ai-remote 0.4.2 → 0.4.3

package/dist/protocols/rdp/cliprdr.d.ts

@@ -1,27 +0,0 @@
-/**
- * One clipboard channel. Emits:
- *   'text' { text } -- the host's clipboard now holds this text
- */
-export declare class ClipboardChannel extends EventTarget {
-    #private;
-    private readonly send;
-    private readonly log;
-    private ready;
-    private longFormatNames;
-    private localText;
-    private pendingAck;
-    /**
-     * @param {(bytes: Uint8Array) => void} send  delivers one complete channel message
-     * @param {(step: string, detail?: unknown) => void} [log]
-     */
-    constructor({ send, log }: {
-        log: any;
-        send: any;
-    });
-    /**
-     * Announce that this side now owns the clipboard and holds `text`. Resolves
-     * once the host has acknowledged, so a paste keystroke can safely follow.
-     */
-    setLocalText(text: string): Promise<unknown>;
-    receive(bytes: Uint8Array): void;
-}

package/dist/protocols/rdp/cliprdr.js

@@ -1,239 +0,0 @@
-import { Reader, Writer, concatBytes } from "./buffer.js";
-const MSG = {
-  MONITOR_READY: 1,
-  FORMAT_LIST: 2,
-  FORMAT_LIST_RESPONSE: 3,
-  FORMAT_DATA_REQUEST: 4,
-  FORMAT_DATA_RESPONSE: 5,
-  CLIP_CAPS: 7
-};
-const RESPONSE_OK = 1;
-const RESPONSE_FAIL = 2;
-const ASCII_NAMES = 4;
-const CF_TEXT = 1;
-const CF_UNICODETEXT = 13;
-const CAPSTYPE_GENERAL = 1;
-const CAPS_VERSION_2 = 2;
-const USE_LONG_FORMAT_NAMES = 2;
-const SHORT_FORMAT_NAME_BYTES = 32;
-const FORMAT_LIST_ACK_TIMEOUT_MS = 400;
-function cliprdrPdu(msgType, msgFlags, body = new Uint8Array(0)) {
-  const writer = new Writer(body.length + 8);
-  writer.u16le(msgType).u16le(msgFlags).u32le(body.length).raw(body);
-  return writer.take();
-}
-function encodeUnicodeText(text) {
-  const writer = new Writer(text.length * 2 + 2);
-  writer.utf16le(text);
-  writer.u16le(0);
-  return writer.take();
-}
-function decodeUnicodeText(bytes) {
-  const units = new Uint16Array(bytes.length >> 1);
-  for (let i = 0; i < units.length; i++) {
-    units[i] = bytes[i * 2] | bytes[i * 2 + 1] << 8;
-  }
-  let end = units.indexOf(0);
-  if (end === -1) end = units.length;
-  let text = "";
-  for (let i = 0; i < end; i += 4096) {
-    text += String.fromCharCode(...units.subarray(i, Math.min(i + 4096, end)));
-  }
-  return text;
-}
-function encodeAsciiText(text) {
-  const writer = new Writer(text.length + 1);
-  for (const character of text) {
-    const code = character.codePointAt(0);
-    writer.u8(code > 255 ? 63 : code);
-  }
-  writer.u8(0);
-  return writer.take();
-}
-function decodeAsciiText(bytes) {
-  let end = bytes.indexOf(0);
-  if (end === -1) end = bytes.length;
-  return String.fromCharCode(...bytes.subarray(0, end));
-}
-class ClipboardChannel extends EventTarget {
-  send;
-  log;
-  ready;
-  longFormatNames;
-  localText;
-  pendingAck;
-  /**
-   * @param {(bytes: Uint8Array) => void} send  delivers one complete channel message
-   * @param {(step: string, detail?: unknown) => void} [log]
-   */
-  constructor({ send, log }) {
-    super();
-    this.send = send;
-    this.log = log || (() => {
-    });
-    this.ready = false;
-    this.longFormatNames = true;
-    this.localText = "";
-    this.pendingAck = null;
-  }
-  #sendPdu(msgType, msgFlags, body) {
-    this.send(cliprdrPdu(msgType, msgFlags, body));
-  }
-  // --- outbound ------------------------------------------------------------
-  /**
-   * Announce that this side now owns the clipboard and holds `text`. Resolves
-   * once the host has acknowledged, so a paste keystroke can safely follow.
-   */
-  setLocalText(text) {
-    this.localText = text;
-    if (!this.ready) return Promise.resolve(false);
-    this.#sendPdu(MSG.FORMAT_LIST, 0, this.#formatListBody(
-      text ? [CF_UNICODETEXT, CF_TEXT] : []
-    ));
-    if (this.pendingAck) this.pendingAck.resolve(false);
-    return new Promise((resolve) => {
-      let timer = 0;
-      const settle = (acknowledged) => {
-        clearTimeout(timer);
-        if (this.pendingAck?.resolve === settle) this.pendingAck = null;
-        resolve(acknowledged);
-      };
-      timer = setTimeout(() => {
-        this.log("clipboard format list was not acknowledged");
-        settle(false);
-      }, FORMAT_LIST_ACK_TIMEOUT_MS);
-      this.pendingAck = { resolve: settle };
-    });
-  }
-  #formatListBody(formatIds) {
-    const parts = formatIds.map((formatId) => {
-      const writer = new Writer(this.longFormatNames ? 6 : 4 + SHORT_FORMAT_NAME_BYTES);
-      writer.u32le(formatId);
-      if (this.longFormatNames) writer.u16le(0);
-      else writer.zeros(SHORT_FORMAT_NAME_BYTES);
-      return writer.take();
-    });
-    return concatBytes(...parts);
-  }
-  // --- inbound -------------------------------------------------------------
-  receive(bytes) {
-    if (bytes.length < 8) return;
-    const reader = new Reader(bytes);
-    const msgType = reader.u16le();
-    const msgFlags = reader.u16le();
-    const dataLength = reader.u32le();
-    const rest = reader.rest();
-    const body = rest.subarray(0, Math.min(dataLength, rest.length));
-    switch (msgType) {
-      case MSG.CLIP_CAPS:
-        this.#handleCapabilities(body);
-        return;
-      case MSG.MONITOR_READY:
-        this.#handleMonitorReady();
-        return;
-      case MSG.FORMAT_LIST:
-        this.#handleFormatList(body, msgFlags);
-        return;
-      case MSG.FORMAT_LIST_RESPONSE:
-        this.pendingAck?.resolve((msgFlags & RESPONSE_FAIL) === 0);
-        return;
-      case MSG.FORMAT_DATA_REQUEST:
-        this.#handleFormatDataRequest(body);
-        return;
-      case MSG.FORMAT_DATA_RESPONSE:
-        this.#handleFormatDataResponse(body, msgFlags);
-        return;
-      default:
-        return;
-    }
-  }
-  #handleCapabilities(body) {
-    const reader = new Reader(body);
-    if (reader.remaining < 4) return;
-    const setCount = reader.u16le();
-    reader.u16le();
-    for (let i = 0; i < setCount && reader.remaining >= 4; i++) {
-      const type = reader.u16le();
-      const length = reader.u16le();
-      if (length < 4 || length - 4 > reader.remaining) break;
-      const set = new Reader(reader.raw(length - 4));
-      if (type === CAPSTYPE_GENERAL && set.remaining >= 8) {
-        set.u32le();
-        const flags = set.u32le();
-        this.longFormatNames = (flags & USE_LONG_FORMAT_NAMES) !== 0;
-      }
-    }
-  }
-  /**
-   * The host is ready. The client answers with its own capabilities and an
-   * initial format list, which MS-RDPECLIP 1.3.2.1 requires even when there is
-   * nothing to offer yet.
-   */
-  #handleMonitorReady() {
-    const general = new Writer(12);
-    general.u16le(CAPSTYPE_GENERAL).u16le(12);
-    general.u32le(CAPS_VERSION_2);
-    general.u32le(this.longFormatNames ? USE_LONG_FORMAT_NAMES : 0);
-    const caps = new Writer(20);
-    caps.u16le(1).u16le(0);
-    caps.raw(general.take());
-    this.#sendPdu(MSG.CLIP_CAPS, 0, caps.take());
-    this.ready = true;
-    this.#sendPdu(MSG.FORMAT_LIST, 0, this.#formatListBody(
-      this.localText ? [CF_UNICODETEXT, CF_TEXT] : []
-    ));
-    this.log("clipboard channel ready", { longFormatNames: this.longFormatNames });
-  }
-  #handleFormatList(body, msgFlags) {
-    const formats = this.#parseFormatList(body, msgFlags);
-    this.#sendPdu(MSG.FORMAT_LIST_RESPONSE, RESPONSE_OK);
-    const wanted = formats.includes(CF_UNICODETEXT) ? CF_UNICODETEXT : formats.includes(CF_TEXT) ? CF_TEXT : null;
-    if (wanted === null) {
-      this.log("host clipboard holds no text format", { formats });
-      return;
-    }
-    const request = new Writer(4);
-    request.u32le(wanted);
-    this.#sendPdu(MSG.FORMAT_DATA_REQUEST, 0, request.take());
-  }
-  #parseFormatList(body, msgFlags) {
-    const reader = new Reader(body);
-    const formats = [];
-    const short = !this.longFormatNames || (msgFlags & ASCII_NAMES) !== 0;
-    while (reader.remaining >= 4) {
-      formats.push(reader.u32le());
-      if (short) {
-        if (reader.remaining < SHORT_FORMAT_NAME_BYTES) break;
-        reader.skip(SHORT_FORMAT_NAME_BYTES);
-        continue;
-      }
-      while (reader.remaining >= 2 && reader.u16le() !== 0) {
-      }
-    }
-    return formats;
-  }
-  #handleFormatDataRequest(body) {
-    const reader = new Reader(body);
-    const formatId = reader.remaining >= 4 ? reader.u32le() : 0;
-    if (formatId !== CF_UNICODETEXT && formatId !== CF_TEXT) {
-      this.#sendPdu(MSG.FORMAT_DATA_RESPONSE, RESPONSE_FAIL);
-      return;
-    }
-    const data = formatId === CF_UNICODETEXT ? encodeUnicodeText(this.localText) : encodeAsciiText(this.localText);
-    this.#sendPdu(MSG.FORMAT_DATA_RESPONSE, RESPONSE_OK, data);
-    this.log("handed the host our clipboard", { formatId, characters: this.localText.length });
-  }
-  #handleFormatDataResponse(body, msgFlags) {
-    if (msgFlags & RESPONSE_FAIL) {
-      this.log("the host refused to hand over its clipboard");
-      return;
-    }
-    const looksUnicode = body.length >= 2 && body.length % 2 === 0 && body[1] === 0;
-    const text = looksUnicode ? decodeUnicodeText(body) : decodeAsciiText(body);
-    if (!text) return;
-    this.dispatchEvent(new CustomEvent("text", { detail: { text } }));
-  }
-}
-export {
-  ClipboardChannel
-};

package/dist/protocols/rdp/credssp.d.ts

@@ -1,34 +0,0 @@
-export declare class CredSspClient {
-    #private;
-    private readonly username;
-    private readonly domain;
-    private readonly password;
-    private readonly serverPublicKey;
-    private readonly send;
-    private readonly log;
-    private inbound;
-    private waiters;
-    constructor({ username, domain, password, serverPublicKey, send, log }: {
-        domain: any;
-        log: any;
-        password: any;
-        send: any;
-        serverPublicKey: any;
-        username: any;
-    });
-    /** Feed decrypted TLS application data. */
-    receive(bytes: Uint8Array): void;
-    authenticate(): Promise<{
-        authenticated: boolean;
-        reachedChallenge: boolean;
-        hostVersion: any;
-        targetName: string;
-        note: string;
-    } | {
-        reachedChallenge?: undefined;
-        note?: undefined;
-        authenticated: boolean;
-        hostVersion: any;
-        targetName: string;
-    }>;
-}

package/dist/protocols/rdp/credssp.js

@@ -1,253 +0,0 @@
-import { concatBytes } from "./buffer.js";
-import { NtlmSealer, authenticateMessage, negotiateMessage, parseChallengeMessage } from "./ntlm.js";
-const CREDSSP_VERSION = 6;
-const CLIENT_TO_SERVER_MAGIC = "CredSSP Client-To-Server Binding Hash\0";
-const SERVER_TO_CLIENT_MAGIC = "CredSSP Server-To-Client Binding Hash\0";
-const NT_STATUS_MESSAGES = {
-  3221225581: "The host rejected the username or password (STATUS_LOGON_FAILURE).",
-  3221225582: "The account is not allowed to sign in right now (STATUS_ACCOUNT_RESTRICTION).",
-  3221225583: "The account is outside its permitted logon hours.",
-  3221225584: "The account is not allowed to sign in from this machine (STATUS_INVALID_WORKSTATION).",
-  3221225585: "The account password has expired.",
-  3221225586: "The account is disabled.",
-  3221225819: "The account is not allowed the Remote Desktop logon type -- add it to the Remote Desktop Users group.",
-  3221225875: "The account has expired.",
-  3221226020: "The account must change its password before signing in.",
-  3221226036: "The account is locked out.",
-  2148074252: "The host denied the logon (SEC_E_LOGON_DENIED).",
-  2148074248: "The host rejected the authentication token (SEC_E_INVALID_TOKEN).",
-  2148074242: "The host rejected the CredSSP exchange (SEC_E_UNSUPPORTED_FUNCTION) -- usually a public-key binding mismatch."
-};
-function derLength(length) {
-  if (length < 128) return new Uint8Array([length]);
-  if (length <= 255) return new Uint8Array([129, length]);
-  if (length <= 65535) return new Uint8Array([130, length >> 8, length & 255]);
-  return new Uint8Array([131, length >> 16 & 255, length >> 8 & 255, length & 255]);
-}
-const derTlv = (tag, content) => concatBytes(new Uint8Array([tag]), derLength(content.length), content);
-const derSequence = (...parts) => derTlv(48, concatBytes(...parts));
-const derOctetString = (bytes) => derTlv(4, bytes);
-const derContext = (index, content) => derTlv(160 | index, content);
-function derInteger(value) {
-  const bytes = [];
-  let remaining = value;
-  do {
-    bytes.unshift(remaining & 255);
-    remaining >>>= 8;
-  } while (remaining > 0);
-  if (bytes[0] & 128) bytes.unshift(0);
-  return derTlv(2, new Uint8Array(bytes));
-}
-function derRead(bytes, offset) {
-  const tag = bytes[offset];
-  let cursor = offset + 1;
-  let length = bytes[cursor++];
-  if (length & 128) {
-    const count = length & 127;
-    length = 0;
-    for (let i = 0; i < count; i++) length = length << 8 | bytes[cursor++];
-  }
-  return { tag, content: bytes.subarray(cursor, cursor + length), end: cursor + length };
-}
-function derElementLength(bytes, offset = 0) {
-  if (bytes.length - offset < 2) return 0;
-  let cursor = offset + 1;
-  let length = bytes[cursor++];
-  if (length & 128) {
-    const count = length & 127;
-    if (bytes.length - cursor < count) return 0;
-    length = 0;
-    for (let i = 0; i < count; i++) length = length << 8 | bytes[cursor++];
-  }
-  const total = cursor - offset + length;
-  return bytes.length - offset < total ? 0 : total;
-}
-function encodeTsRequest({ version, negoToken, authInfo, pubKeyAuth, clientNonce }) {
-  const parts = [derContext(0, derInteger(version))];
-  if (negoToken) {
-    parts.push(derContext(1, derSequence(derSequence(derContext(0, derOctetString(negoToken))))));
-  }
-  if (authInfo) parts.push(derContext(2, derOctetString(authInfo)));
-  if (pubKeyAuth) parts.push(derContext(3, derOctetString(pubKeyAuth)));
-  if (clientNonce) parts.push(derContext(5, derOctetString(clientNonce)));
-  return derSequence(...parts);
-}
-function decodeTsRequest(bytes) {
-  const outer = derRead(bytes, 0);
-  const result = { version: 0, negoToken: null, authInfo: null, pubKeyAuth: null, errorCode: 0 };
-  let offset = 0;
-  while (offset < outer.content.length) {
-    const field = derRead(outer.content, offset);
-    offset = field.end;
-    const index = field.tag & 31;
-    if (index === 0) {
-      result.version = derRead(field.content, 0).content[0];
-      continue;
-    }
-    if (index === 1) {
-      const sequence = derRead(field.content, 0);
-      const item = derRead(sequence.content, 0);
-      const token = derRead(item.content, 0);
-      result.negoToken = derRead(token.content, 0).content;
-      continue;
-    }
-    if (index === 2) {
-      result.authInfo = derRead(field.content, 0).content;
-      continue;
-    }
-    if (index === 3) {
-      result.pubKeyAuth = derRead(field.content, 0).content;
-      continue;
-    }
-    if (index === 4) {
-      const value = derRead(field.content, 0).content;
-      let code = 0;
-      for (const byte of value) code = (code << 8 | byte) >>> 0;
-      result.errorCode = code;
-      continue;
-    }
-  }
-  return result;
-}
-function encodeCredentials(domain, username, password) {
-  const utf16 = (text) => {
-    const out = new Uint8Array(text.length * 2);
-    const view = new DataView(out.buffer);
-    for (let i = 0; i < text.length; i++) view.setUint16(i * 2, text.charCodeAt(i), true);
-    return out;
-  };
-  const passwordCreds = derSequence(
-    derContext(0, derOctetString(utf16(domain))),
-    derContext(1, derOctetString(utf16(username))),
-    derContext(2, derOctetString(utf16(password)))
-  );
-  return derSequence(
-    derContext(0, derInteger(1)),
-    // credType: password
-    derContext(1, derOctetString(passwordCreds))
-  );
-}
-class CredSspClient {
-  username;
-  domain;
-  password;
-  serverPublicKey;
-  send;
-  log;
-  inbound;
-  waiters;
-  constructor({ username, domain, password, serverPublicKey, send, log }) {
-    this.username = username || "";
-    this.domain = domain || "";
-    this.password = password || "";
-    this.serverPublicKey = serverPublicKey;
-    this.send = send;
-    this.log = log || (() => {
-    });
-    this.inbound = new Uint8Array(0);
-    this.waiters = [];
-  }
-  /** Feed decrypted TLS application data. */
-  receive(bytes) {
-    this.inbound = this.inbound.length === 0 ? bytes : concatBytes(this.inbound, bytes);
-    for (; ; ) {
-      const length = derElementLength(this.inbound);
-      if (length === 0) return;
-      const request = decodeTsRequest(this.inbound.subarray(0, length));
-      this.inbound = this.inbound.subarray(length).slice();
-      const waiter = this.waiters.shift();
-      if (waiter) waiter.resolve(request);
-    }
-  }
-  #next(timeoutMs = 15e3) {
-    return new Promise((resolve, reject) => {
-      const timer = setTimeout(
-        () => reject(new Error("CredSSP: the host did not answer within 15s")),
-        timeoutMs
-      );
-      this.waiters.push({
-        resolve: (value) => {
-          clearTimeout(timer);
-          resolve(value);
-        }
-      });
-    });
-  }
-  async #bindingHash(magic, nonce) {
-    const digest = await crypto.subtle.digest(
-      "SHA-256",
-      concatBytes(new TextEncoder().encode(magic), nonce, this.serverPublicKey)
-    );
-    return new Uint8Array(digest);
-  }
-  async authenticate() {
-    const negotiate = negotiateMessage();
-    this.send(encodeTsRequest({ version: CREDSSP_VERSION, negoToken: negotiate }));
-    this.log("CredSSP", "sent NTLM NEGOTIATE");
-    const challengeRequest = await this.#next();
-    if (challengeRequest.errorCode) throw new Error(this.#statusMessage(challengeRequest.errorCode));
-    if (!challengeRequest.negoToken) throw new Error("CredSSP: the host sent no NTLM challenge");
-    const challengeBytes = challengeRequest.negoToken.slice();
-    const challenge = parseChallengeMessage(challengeBytes);
-    const targetName = new TextDecoder("utf-16le").decode(challenge.targetName);
-    this.log("CredSSP", `received NTLM CHALLENGE from "${targetName}" (host CredSSP version ${challengeRequest.version})`);
-    if (!this.username) {
-      return {
-        authenticated: false,
-        reachedChallenge: true,
-        hostVersion: challengeRequest.version,
-        targetName,
-        note: "no credentials supplied, stopping after the challenge"
-      };
-    }
-    const { message, keys } = authenticateMessage({
-      username: this.username,
-      domain: this.domain,
-      password: this.password,
-      challenge,
-      negotiateBytes: negotiate,
-      challengeBytes
-    });
-    const sealer = new NtlmSealer(keys);
-    const clientNonce = new Uint8Array(32);
-    crypto.getRandomValues(clientNonce);
-    const legacy = challengeRequest.version < 5;
-    const binding = legacy ? this.serverPublicKey : await this.#bindingHash(CLIENT_TO_SERVER_MAGIC, clientNonce);
-    this.send(encodeTsRequest({
-      version: CREDSSP_VERSION,
-      negoToken: message,
-      pubKeyAuth: sealer.seal(binding),
-      clientNonce: legacy ? null : clientNonce
-    }));
-    this.log("CredSSP", `sent NTLM AUTHENTICATE with the ${legacy ? "legacy" : "hashed"} public-key binding`);
-    const response = await this.#next();
-    if (response.errorCode) throw new Error(this.#statusMessage(response.errorCode));
-    if (!response.pubKeyAuth) throw new Error("CredSSP: the host returned no public-key confirmation");
-    const confirmed = sealer.unseal(response.pubKeyAuth);
-    const expected = legacy ? this.#incrementedPublicKey() : await this.#bindingHash(SERVER_TO_CLIENT_MAGIC, clientNonce);
-    if (confirmed.length !== expected.length || !expected.every((byte, i) => byte === confirmed[i])) {
-      throw new Error(
-        "CredSSP: the host public-key confirmation did not match. The TLS session is not the one the host authenticated, which is what this check exists to catch."
-      );
-    }
-    this.log("CredSSP", "host confirmed the public-key binding");
-    this.send(encodeTsRequest({
-      version: CREDSSP_VERSION,
-      authInfo: sealer.seal(encodeCredentials(this.domain, this.username, this.password))
-    }));
-    this.log("CredSSP", "sent credentials");
-    return { authenticated: true, hostVersion: challengeRequest.version, targetName };
-  }
-  /** Legacy confirmation is the public key with its first byte incremented. */
-  #incrementedPublicKey() {
-    const expected = this.serverPublicKey.slice();
-    expected[0] = expected[0] + 1 & 255;
-    return expected;
-  }
-  #statusMessage(errorCode) {
-    return NT_STATUS_MESSAGES[errorCode] || `CredSSP: the host reported error 0x${errorCode.toString(16).padStart(8, "0")}.`;
-  }
-}
-export {
-  CredSspClient
-};

package/dist/protocols/rdp/crypto.d.ts

@@ -1,63 +0,0 @@
-export declare function md5(message: Uint8Array): Uint8Array<ArrayBuffer>;
-export declare function sha1(message: Uint8Array): Uint8Array<ArrayBuffer>;
-/** RC4 keystream position. RDP re-keys every 4096 PDUs, so this is mutable. */
-export interface Rc4State {
-    s: Uint8Array;
-    i: number;
-    j: number;
-}
-/** The five values MS-RDPBCGR 5.3.5 derives from the two randoms. */
-export interface SessionKeys {
-    macKey: Uint8Array;
-    keyLength: number;
-    is40Bit: boolean;
-    initialDecryptKey: Uint8Array;
-    initialEncryptKey: Uint8Array;
-    decryptKey: Uint8Array;
-    encryptKey: Uint8Array;
-}
-export declare function rc4Init(key: Uint8Array): Rc4State;
-/** RC4 is symmetric, so this both encrypts and decrypts. State advances. */
-export declare function rc4Crypt(state: any, data: Uint8Array): Uint8Array<ArrayBuffer>;
-/**
- * Textbook RSA over little-endian buffers, which is what RDP's Security
- * Exchange PDU carries: the client random is raised to the server's public
- * exponent with no padding scheme (MS-RDPBCGR 5.3.4.1).
- */
-export declare function rsaEncrypt(dataLe: Uint8Array, modulusLe: Uint8Array, exponentLe: Uint8Array): Uint8Array<ArrayBuffer>;
-/**
- * RSAES-PKCS1-v1_5 encryption over big-endian buffers, which is what TLS uses
- * for an RSA key exchange. WebCrypto only offers OAEP, so the padding is built
- * here and the modular exponentiation reuses the same BigInt path as RDP.
- */
-export declare function rsaEncryptPkcs1(message: Uint8Array, modulusBe: Uint8Array, exponentBe: Uint8Array): Uint8Array<ArrayBuffer>;
-export declare const ENCRYPTION_METHOD: {
-    NONE: number;
-    BIT_40: number;
-    BIT_128: number;
-    BIT_56: number;
-    FIPS: number;
-};
-export declare function keyLengthForMethod(encryptionMethod: number): 8 | 16;
-/**
- * Derive the MAC key and both directional RC4 keys from the two random values
- * exchanged during connection.
- */
-export declare function deriveSessionKeys(clientRandom: Uint8Array, serverRandom: Uint8Array, encryptionMethod: number): {
-    macKey: Uint8Array<ArrayBuffer>;
-    keyLength: number;
-    is40Bit: boolean;
-    initialDecryptKey: Uint8Array<ArrayBuffer>;
-    initialEncryptKey: Uint8Array<ArrayBuffer>;
-    decryptKey: Uint8Array<ArrayBuffer>;
-    encryptKey: Uint8Array<ArrayBuffer>;
-};
-/**
- * MACSignature = First64Bits(MD5(macKey + Pad2 + SHA1(macKey + Pad1 + len + data)))
- */
-export declare function macSignature(macKey: any, data: Uint8Array): Uint8Array<ArrayBuffer>;
-/**
- * Every 4096 PDUs the RC4 key is refreshed from the initial key
- * (MS-RDPBCGR 5.3.7.1). The refreshed key is salted with itself.
- */
-export declare function updateSessionKey(initialKey: any, currentKey: any, keyLength: any, is40Bit: any): Uint8Array<ArrayBuffer>;