meshcore-hashtag-cracker 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Jack Kingsman <jack@jackkingsman.me>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,111 @@
+# MeshCore GroupText Hashtag Room Cracker
+
+Standalone library for cracking MeshCore GroupText packets from hashtag rooms using WebGPU-accelerated brute force (with fallbacks for our non-GPU brethren).
+
+**Note:** This tool is designed exclusively for cracking public hashtag rooms (e.g., `#general`, `#test`). It does not support private rooms or other MeshCore encryption schemes (or, rather, it will attempt to crack them, but nearly certainly fail)
+
+This is an LLM-developed library and has borne out its correctness in various application uses, but caution should still be applied in any mission-critical contexts.
+
+## Features
+
+- WebGPU-accelerated brute force (100M+ keys/second on modern GPUs)
+- Dictionary attack support with external wordlist
+- Configurable timestamp and UTF-8 filters
+- Progress callbacks with ETA
+- Resume support for interrupted searches
+
+## Installation
+
+```bash
+npm install meshcore-cracker
+```
+
+## Usage
+
+```typescript
+import { GroupTextCracker } from 'meshcore-cracker';
+
+const cracker = new GroupTextCracker();
+
+// Example GroupText packet (hex string, no spaces or 0x prefix)
+const packetHex = '150013752F15A1BF3C018EB1FC4F26B5FAEB417BB0F1AE8FF07655484EBAA05CB9A927D689';
+
+const result = await cracker.crack(packetHex, {
+  maxLength: 6,
+});
+
+if (result.found) {
+  console.log(`Room: #${result.roomName}`);
+  console.log(`Key: ${result.key}`);
+  console.log(`Message: ${result.decryptedMessage}`);
+}
+
+cracker.destroy();
+```
+
+**Output:**
+```
+Room: #aa
+Key: e147f36926b7b509af9b41b65304dc30
+Message: foo
+```
+
+### Options
+
+```typescript
+const result = await cracker.crack(packetHex, {
+  maxLength: 8,           // Max room name length to try (default: 8)
+  startingLength: 1,      // Min room name length to try (default: 1)
+  useDictionary: true,    // Try dictionary words first (default: true)
+  useTimestampFilter: true, // Reject old timestamps (default: true)
+  validSeconds: 2592000,  // Timestamp window in seconds (default: 30 days)
+  useUtf8Filter: true,    // Reject invalid UTF-8 (default: true)
+  forceCpu: false,        // Force CPU mode, skip GPU (default: false)
+  startFrom: 'abc',       // Resume from position (optional)
+});
+```
+
+For detailed API documentation, see [API.md](./API.md).
+
+## Browser Requirements
+
+- WebGPU support (Chrome 113+, Edge 113+, or other Chromium-based browsers)
+- HTTPS connection for non-localhost hostnames (falls back gracefully with an error if WebGPU is not available)
+
+## Performance
+
+Typical performance on modern hardware:
+- **GPU (RTX 3080)**: ~500M keys/second
+- **GPU (integrated)**: ~50M keys/second
+
+Search space by room name length:
+| Length | Candidates | Time @ 100M/s |
+|--------|------------|---------------|
+| 1 | 36 | instant |
+| 2 | 1,296 | instant |
+| 3 | 47,952 | instant |
+| 4 | 1,774,224 | <1s |
+| 5 | 65,646,288 | <1s |
+| 6 | 2,428,912,656 | ~24s |
+| 7 | 89,869,768,272 | ~15min |
+| 8 | 3,325,181,426,064 | ~9h |
+
+## Development
+
+```bash
+# Install dependencies
+npm install
+
+# Build
+npm run build
+
+# Run tests
+npm test
+
+# Run tests in watch mode
+npm run test:watch
+```
+
+## License
+
+MIT

package/dist/core.d.ts

@@ -0,0 +1,69 @@
+export declare const CHARS = "abcdefghijklmnopqrstuvwxyz0123456789";
+export declare const CHARS_LEN: number;
+export declare const CHARS_WITH_DASH: string;
+export declare const PUBLIC_ROOM_NAME = "[[public room]]";
+export declare const PUBLIC_KEY = "8b3387e9c5cdea6ac9e5edbaa115cd72";
+export declare const DEFAULT_VALID_SECONDS: number;
+/**
+ * Convert room name to (length, index) for resuming/skipping.
+ * Index encoding: LSB-first (first character = least significant digit).
+ */
+export declare function roomNameToIndex(name: string): {
+    length: number;
+    index: number;
+} | null;
+/**
+ * Convert (length, index) to room name.
+ * Index encoding: LSB-first (first character = least significant digit).
+ */
+export declare function indexToRoomName(length: number, idx: number): string | null;
+/**
+ * Derive 128-bit key from room name using SHA256.
+ * Room names are prefixed with '#' before hashing.
+ */
+export declare function deriveKeyFromRoomName(roomName: string): string;
+/**
+ * Compute channel hash (first byte of SHA256(key)).
+ */
+export declare function getChannelHash(keyHex: string): string;
+/**
+ * Verify MAC using HMAC-SHA256 with 32-byte padded key.
+ */
+export declare function verifyMac(ciphertext: string, cipherMac: string, keyHex: string): boolean;
+/**
+ * Count valid room names for a given length.
+ * Accounts for dash rules (no start/end dash, no consecutive dashes).
+ */
+export declare function countNamesForLength(len: number): number;
+/**
+ * Check if timestamp is within the validity window.
+ * @param timestamp - Unix timestamp to validate
+ * @param validSeconds - Validity window in seconds (default: 30 days)
+ * @param now - Current time for testing (default: current time)
+ */
+export declare function isTimestampValid(timestamp: number, validSeconds?: number, now?: number): boolean;
+/**
+ * Check for valid UTF-8 (no replacement characters).
+ */
+export declare function isValidUtf8(text: string): boolean;
+/**
+ * Room name generator - iterates through all valid room names.
+ */
+export declare class RoomNameGenerator {
+    private length;
+    private indices;
+    private done;
+    private currentInLength;
+    private totalForLength;
+    current(): string;
+    getLength(): number;
+    getCurrentInLength(): number;
+    getTotalForLength(): number;
+    getRemainingInLength(): number;
+    isDone(): boolean;
+    next(): boolean;
+    private isValid;
+    nextValid(): boolean;
+    skipTo(targetLength: number, targetIndex: number): void;
+}
+//# sourceMappingURL=core.d.ts.map

package/dist/core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,KAAK,yCAAyC,CAAC;AAC5D,eAAO,MAAM,SAAS,QAAe,CAAC;AACtC,eAAO,MAAM,eAAe,QAAc,CAAC;AAG3C,eAAO,MAAM,gBAAgB,oBAAoB,CAAC;AAClD,eAAO,MAAM,UAAU,qCAAqC,CAAC;AAG7D,eAAO,MAAM,qBAAqB,QAAoB,CAAC;AAEvD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA+BtF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA0B1E;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAM9D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAGrD;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAKxF;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAwBvD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,YAAY,GAAE,MAA8B,EAC5C,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAGT;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,cAAc,CAAa;IAEnC,OAAO,IAAI,MAAM;IAIjB,SAAS,IAAI,MAAM;IAInB,kBAAkB,IAAI,MAAM;IAI5B,iBAAiB,IAAI,MAAM;IAI3B,oBAAoB,IAAI,MAAM;IAI9B,MAAM,IAAI,OAAO;IAIjB,IAAI,IAAI,OAAO;IA6Cf,OAAO,CAAC,OAAO;IAcf,SAAS,IAAI,OAAO;IAWpB,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;CAiBxD"}

package/dist/core.js

@@ -0,0 +1,244 @@
+// Core logic for MeshCore packet cracker - pure functions
+import SHA256 from 'crypto-js/sha256';
+import HmacSHA256 from 'crypto-js/hmac-sha256';
+import Hex from 'crypto-js/enc-hex';
+// Room name character set
+export const CHARS = 'abcdefghijklmnopqrstuvwxyz0123456789';
+export const CHARS_LEN = CHARS.length; // 36
+export const CHARS_WITH_DASH = CHARS + '-';
+// Public room special case
+export const PUBLIC_ROOM_NAME = '[[public room]]';
+export const PUBLIC_KEY = '8b3387e9c5cdea6ac9e5edbaa115cd72';
+// Default timestamp validity window (30 days in seconds)
+export const DEFAULT_VALID_SECONDS = 30 * 24 * 60 * 60;
+/**
+ * Convert room name to (length, index) for resuming/skipping.
+ * Index encoding: LSB-first (first character = least significant digit).
+ */
+export function roomNameToIndex(name) {
+    if (!name || name.length === 0) {
+        return null;
+    }
+    const length = name.length;
+    let index = 0;
+    let multiplier = 1;
+    // Process from left to right (first char is LSB, matching indexToRoomName)
+    for (let i = 0; i < length; i++) {
+        const c = name[i];
+        const charIdx = CHARS_WITH_DASH.indexOf(c);
+        if (charIdx === -1) {
+            return null;
+        } // Invalid character
+        const isFirst = i === 0;
+        const isLast = i === length - 1;
+        const charCount = isFirst || isLast ? 36 : 37;
+        // Dash not allowed at start/end
+        if ((isFirst || isLast) && charIdx === 36) {
+            return null;
+        }
+        index += charIdx * multiplier;
+        multiplier *= charCount;
+    }
+    return { length, index };
+}
+/**
+ * Convert (length, index) to room name.
+ * Index encoding: LSB-first (first character = least significant digit).
+ */
+export function indexToRoomName(length, idx) {
+    if (length <= 0) {
+        return null;
+    }
+    let result = '';
+    let remaining = idx;
+    let prevWasDash = false;
+    for (let i = 0; i < length; i++) {
+        const isFirst = i === 0;
+        const isLast = i === length - 1;
+        const charCount = isFirst || isLast ? 36 : 37;
+        const charIdx = remaining % charCount;
+        remaining = Math.floor(remaining / charCount);
+        const isDash = charIdx === 36;
+        if (isDash && prevWasDash) {
+            return null;
+        } // Invalid: consecutive dashes
+        prevWasDash = isDash;
+        result += CHARS_WITH_DASH[charIdx];
+    }
+    return result;
+}
+/**
+ * Derive 128-bit key from room name using SHA256.
+ * Room names are prefixed with '#' before hashing.
+ */
+export function deriveKeyFromRoomName(roomName) {
+    if (roomName === PUBLIC_ROOM_NAME) {
+        return PUBLIC_KEY;
+    }
+    const hash = SHA256(roomName);
+    return hash.toString(Hex).substring(0, 32);
+}
+/**
+ * Compute channel hash (first byte of SHA256(key)).
+ */
+export function getChannelHash(keyHex) {
+    const hash = SHA256(Hex.parse(keyHex));
+    return hash.toString(Hex).substring(0, 2);
+}
+/**
+ * Verify MAC using HMAC-SHA256 with 32-byte padded key.
+ */
+export function verifyMac(ciphertext, cipherMac, keyHex) {
+    const paddedKey = keyHex.padEnd(64, '0');
+    const hmac = HmacSHA256(Hex.parse(ciphertext), Hex.parse(paddedKey));
+    const computed = hmac.toString(Hex).substring(0, 4).toLowerCase();
+    return computed === cipherMac.toLowerCase();
+}
+/**
+ * Count valid room names for a given length.
+ * Accounts for dash rules (no start/end dash, no consecutive dashes).
+ */
+export function countNamesForLength(len) {
+    if (len === 1) {
+        return CHARS_LEN;
+    }
+    if (len === 2) {
+        return CHARS_LEN * CHARS_LEN;
+    }
+    // For length >= 3: first and last are CHARS (36), middle follows no-consecutive-dash rule
+    // Middle length = len - 2
+    // Use DP: count sequences of length k with no consecutive dashes
+    // endsWithNonDash[k], endsWithDash[k]
+    let endsNonDash = CHARS_LEN; // length 1 middle
+    let endsDash = 1;
+    for (let i = 2; i <= len - 2; i++) {
+        const newEndsNonDash = (endsNonDash + endsDash) * CHARS_LEN;
+        const newEndsDash = endsNonDash; // dash can only follow non-dash
+        endsNonDash = newEndsNonDash;
+        endsDash = newEndsDash;
+    }
+    const middleCount = len > 2 ? endsNonDash + endsDash : 1;
+    return CHARS_LEN * middleCount * CHARS_LEN;
+}
+/**
+ * Check if timestamp is within the validity window.
+ * @param timestamp - Unix timestamp to validate
+ * @param validSeconds - Validity window in seconds (default: 30 days)
+ * @param now - Current time for testing (default: current time)
+ */
+export function isTimestampValid(timestamp, validSeconds = DEFAULT_VALID_SECONDS, now) {
+    const currentTime = now ?? Math.floor(Date.now() / 1000);
+    return timestamp <= currentTime && timestamp >= currentTime - validSeconds;
+}
+/**
+ * Check for valid UTF-8 (no replacement characters).
+ */
+export function isValidUtf8(text) {
+    return !text.includes('\uFFFD');
+}
+/**
+ * Room name generator - iterates through all valid room names.
+ */
+export class RoomNameGenerator {
+    constructor() {
+        this.length = 1;
+        this.indices = [0];
+        this.done = false;
+        this.currentInLength = 0;
+        this.totalForLength = CHARS_LEN;
+    }
+    current() {
+        return this.indices.map((i) => (i === CHARS_LEN ? '-' : CHARS[i])).join('');
+    }
+    getLength() {
+        return this.length;
+    }
+    getCurrentInLength() {
+        return this.currentInLength;
+    }
+    getTotalForLength() {
+        return this.totalForLength;
+    }
+    getRemainingInLength() {
+        return this.totalForLength - this.currentInLength;
+    }
+    isDone() {
+        return this.done;
+    }
+    next() {
+        if (this.done) {
+            return false;
+        }
+        this.currentInLength++;
+        // Increment with carry, respecting dash rules
+        let pos = this.length - 1;
+        while (pos >= 0) {
+            const isFirst = pos === 0;
+            const isLast = pos === this.length - 1;
+            const maxVal = isFirst || isLast ? CHARS_LEN - 1 : CHARS_LEN; // CHARS_LEN = dash index
+            if (this.indices[pos] < maxVal) {
+                this.indices[pos]++;
+                // Check dash rule: no consecutive dashes
+                if (this.indices[pos] === CHARS_LEN && pos > 0 && this.indices[pos - 1] === CHARS_LEN) {
+                    // Would create consecutive dashes, continue incrementing
+                    continue;
+                }
+                // Reset all positions after this one
+                for (let i = pos + 1; i < this.length; i++) {
+                    this.indices[i] = 0;
+                }
+                // Validate: check no consecutive dashes in reset portion
+                if (this.isValid()) {
+                    return true;
+                }
+                continue;
+            }
+            pos--;
+        }
+        // Overflow - increase length
+        this.length++;
+        this.indices = new Array(this.length).fill(0);
+        this.currentInLength = 0;
+        this.totalForLength = countNamesForLength(this.length);
+        return true;
+    }
+    isValid() {
+        for (let i = 0; i < this.length; i++) {
+            const isDash = this.indices[i] === CHARS_LEN;
+            if (isDash && (i === 0 || i === this.length - 1)) {
+                return false;
+            }
+            if (isDash && i > 0 && this.indices[i - 1] === CHARS_LEN) {
+                return false;
+            }
+        }
+        return true;
+    }
+    // Skip invalid combinations efficiently
+    nextValid() {
+        do {
+            if (!this.next()) {
+                return false;
+            }
+        } while (!this.isValid());
+        return true;
+    }
+    // Skip to a specific (length, index) position
+    // Index encoding: first char is LSB (consistent with indexToRoomName)
+    skipTo(targetLength, targetIndex) {
+        this.length = targetLength;
+        this.indices = new Array(targetLength).fill(0);
+        this.totalForLength = countNamesForLength(targetLength);
+        // Convert index to indices array (LSB first = position 0)
+        let remaining = targetIndex;
+        for (let i = 0; i < targetLength; i++) {
+            const isFirst = i === 0;
+            const isLast = i === targetLength - 1;
+            const charCount = isFirst || isLast ? CHARS_LEN : CHARS_LEN + 1;
+            this.indices[i] = remaining % charCount;
+            remaining = Math.floor(remaining / charCount);
+        }
+        this.currentInLength = targetIndex;
+    }
+}
+//# sourceMappingURL=core.js.map

package/dist/core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAE1D,OAAO,MAAM,MAAM,kBAAkB,CAAC;AACtC,OAAO,UAAU,MAAM,uBAAuB,CAAC;AAC/C,OAAO,GAAG,MAAM,mBAAmB,CAAC;AAEpC,0BAA0B;AAC1B,MAAM,CAAC,MAAM,KAAK,GAAG,sCAAsC,CAAC;AAC5D,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK;AAC5C,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,GAAG,GAAG,CAAC;AAE3C,2BAA2B;AAC3B,MAAM,CAAC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAClD,MAAM,CAAC,MAAM,UAAU,GAAG,kCAAkC,CAAC;AAE7D,yDAAyD;AACzD,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAEvD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,2EAA2E;IAC3E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,oBAAoB;QAEtB,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9C,gCAAgC;QAChC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,IAAI,OAAO,GAAG,UAAU,CAAC;QAC9B,UAAU,IAAI,SAAS,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,GAAW;IACzD,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,SAAS,GAAG,GAAG,CAAC;IACpB,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;QACtC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAG,OAAO,KAAK,EAAE,CAAC;QAC9B,IAAI,MAAM,IAAI,WAAW,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,8BAA8B;QAChC,WAAW,GAAG,MAAM,CAAC;QAErB,MAAM,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QAClC,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,UAAkB,EAAE,SAAiB,EAAE,MAAc;IAC7E,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAClE,OAAO,QAAQ,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACd,OAAO,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IAED,0FAA0F;IAC1F,0BAA0B;IAC1B,iEAAiE;IACjE,sCAAsC;IACtC,IAAI,WAAW,GAAG,SAAS,CAAC,CAAC,kBAAkB;IAC/C,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,cAAc,GAAG,CAAC,WAAW,GAAG,QAAQ,CAAC,GAAG,SAAS,CAAC;QAC5D,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,gCAAgC;QACjE,WAAW,GAAG,cAAc,CAAC;QAC7B,QAAQ,GAAG,WAAW,CAAC;IACzB,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,eAAuB,qBAAqB,EAC5C,GAAY;IAEZ,MAAM,WAAW,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACzD,OAAO,SAAS,IAAI,WAAW,IAAI,SAAS,IAAI,WAAW,GAAG,YAAY,CAAC;AAC7E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,iBAAiB;IAA9B;QACU,WAAM,GAAG,CAAC,CAAC;QACX,YAAO,GAAa,CAAC,CAAC,CAAC,CAAC;QACxB,SAAI,GAAG,KAAK,CAAC;QACb,oBAAe,GAAG,CAAC,CAAC;QACpB,mBAAc,GAAG,SAAS,CAAC;IAiHrC,CAAC;IA/GC,OAAO;QACL,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC;IACpD,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;QAEvB,8CAA8C;QAC9C,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAE1B,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,GAAG,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,yBAAyB;YAEvF,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC;gBAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,yCAAyC;gBACzC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;oBACtF,yDAAyD;oBACzD,SAAS;gBACX,CAAC;gBACD,qCAAqC;gBACrC,KAAK,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC3C,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACtB,CAAC;gBACD,yDAAyD;gBACzD,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;oBACnB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,SAAS;YACX,CAAC;YAED,GAAG,EAAE,CAAC;QACR,CAAC;QAED,6BAA6B;QAC7B,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,CAAC,OAAO,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEvD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,OAAO;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;YAC7C,IAAI,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;gBACjD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACzD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wCAAwC;IACxC,SAAS;QACP,GAAG,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjB,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8CAA8C;IAC9C,sEAAsE;IACtE,MAAM,CAAC,YAAoB,EAAE,WAAmB;QAC9C,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,cAAc,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;QAExD,0DAA0D;QAC1D,IAAI,SAAS,GAAG,WAAW,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;YACxB,MAAM,MAAM,GAAG,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC;YACtC,MAAM,SAAS,GAAG,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;YAChE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS,GAAG,SAAS,CAAC;YACxC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC;IACrC,CAAC;CACF"}

package/dist/cpu-bruteforce.d.ts

@@ -0,0 +1,13 @@
+/**
+ * CPU-based brute force implementation.
+ * Much slower than GPU but works everywhere.
+ */
+export declare class CpuBruteForce {
+    /**
+     * Run a batch of candidates on CPU.
+     * Returns indices of candidates that match the channel hash and MAC.
+     */
+    runBatch(targetChannelHash: number, nameLength: number, batchOffset: number, batchSize: number, ciphertextHex?: string, targetMacHex?: string): number[];
+    destroy(): void;
+}
+//# sourceMappingURL=cpu-bruteforce.d.ts.map

package/dist/cpu-bruteforce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cpu-bruteforce.d.ts","sourceRoot":"","sources":["../src/cpu-bruteforce.ts"],"names":[],"mappings":"AAUA;;;GAGG;AACH,qBAAa,aAAa;IACxB;;;OAGG;IACH,QAAQ,CACN,iBAAiB,EAAE,MAAM,EACzB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,EACtB,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,EAAE;IAoCX,OAAO,IAAI,IAAI;CAGhB"}

package/dist/cpu-bruteforce.js

@@ -0,0 +1,45 @@
+// CPU-based brute force key cracking for MeshCore packets
+// Fallback for environments without WebGPU support
+import { indexToRoomName, deriveKeyFromRoomName, getChannelHash, verifyMac, } from './core';
+/**
+ * CPU-based brute force implementation.
+ * Much slower than GPU but works everywhere.
+ */
+export class CpuBruteForce {
+    /**
+     * Run a batch of candidates on CPU.
+     * Returns indices of candidates that match the channel hash and MAC.
+     */
+    runBatch(targetChannelHash, nameLength, batchOffset, batchSize, ciphertextHex, targetMacHex) {
+        const matches = [];
+        const targetHashHex = targetChannelHash.toString(16).padStart(2, '0');
+        const verifyMacEnabled = !!(ciphertextHex && targetMacHex);
+        for (let i = 0; i < batchSize; i++) {
+            const nameIdx = batchOffset + i;
+            const roomName = indexToRoomName(nameLength, nameIdx);
+            if (!roomName) {
+                continue; // Invalid index (e.g., consecutive dashes)
+            }
+            // Derive key from room name (with # prefix)
+            const key = deriveKeyFromRoomName('#' + roomName);
+            // Check channel hash
+            const channelHash = getChannelHash(key);
+            if (channelHash !== targetHashHex) {
+                continue;
+            }
+            // Channel hash matches - verify MAC if enabled
+            if (verifyMacEnabled) {
+                if (!verifyMac(ciphertextHex, targetMacHex, key)) {
+                    continue;
+                }
+            }
+            // Found a match
+            matches.push(nameIdx);
+        }
+        return matches;
+    }
+    destroy() {
+        // No resources to clean up for CPU implementation
+    }
+}
+//# sourceMappingURL=cpu-bruteforce.js.map

package/dist/cpu-bruteforce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cpu-bruteforce.js","sourceRoot":"","sources":["../src/cpu-bruteforce.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,mDAAmD;AAEnD,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,SAAS,GACV,MAAM,QAAQ,CAAC;AAEhB;;;GAGG;AACH,MAAM,OAAO,aAAa;IACxB;;;OAGG;IACH,QAAQ,CACN,iBAAyB,EACzB,UAAkB,EAClB,WAAmB,EACnB,SAAiB,EACjB,aAAsB,EACtB,YAAqB;QAErB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtE,MAAM,gBAAgB,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,YAAY,CAAC,CAAC;QAE3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,WAAW,GAAG,CAAC,CAAC;YAChC,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAEtD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,SAAS,CAAC,2CAA2C;YACvD,CAAC;YAED,4CAA4C;YAC5C,MAAM,GAAG,GAAG,qBAAqB,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAC;YAElD,qBAAqB;YACrB,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;gBAClC,SAAS;YACX,CAAC;YAED,+CAA+C;YAC/C,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,CAAC,SAAS,CAAC,aAAc,EAAE,YAAa,EAAE,GAAG,CAAC,EAAE,CAAC;oBACnD,SAAS;gBACX,CAAC;YACH,CAAC;YAED,gBAAgB;YAChB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO;QACL,kDAAkD;IACpD,CAAC;CACF"}

package/dist/cracker.d.ts

@@ -0,0 +1,64 @@
+/**
+ * GroupTextCracker - Standalone MeshCore GroupText packet cracker
+ *
+ * Cracks encrypted GroupText packets by trying room names until the
+ * correct encryption key is found.
+ */
+import type { CrackOptions, CrackResult, ProgressCallback, DecodedPacket } from './types';
+/**
+ * Main cracker class for MeshCore GroupText packets.
+ */
+export declare class GroupTextCracker {
+    private gpuInstance;
+    private cpuInstance;
+    private wordlist;
+    private abortFlag;
+    private useTimestampFilter;
+    private useUtf8Filter;
+    private validSeconds;
+    private useCpu;
+    /**
+     * Load a wordlist from a URL for dictionary attacks.
+     * The wordlist should be a text file with one word per line.
+     *
+     * @param url - URL to fetch the wordlist from
+     */
+    loadWordlist(url: string): Promise<void>;
+    /**
+     * Set the wordlist directly from an array of words.
+     *
+     * @param words - Array of room names to try
+     */
+    setWordlist(words: string[]): void;
+    /**
+     * Abort the current cracking operation.
+     * The crack() method will return with aborted: true.
+     */
+    abort(): void;
+    /**
+     * Check if WebGPU is available in the current environment.
+     */
+    isGpuAvailable(): boolean;
+    /**
+     * Decode a packet and extract the information needed for cracking.
+     *
+     * @param packetHex - The packet data as a hex string
+     * @returns Decoded packet info or null if not a GroupText packet
+     */
+    decodePacket(packetHex: string): Promise<DecodedPacket | null>;
+    /**
+     * Crack a GroupText packet to find the room name and decrypt the message.
+     *
+     * @param packetHex - The packet data as a hex string
+     * @param options - Cracking options
+     * @param onProgress - Optional callback for progress updates
+     * @returns The cracking result
+     */
+    crack(packetHex: string, options?: CrackOptions, onProgress?: ProgressCallback): Promise<CrackResult>;
+    /**
+     * Clean up resources.
+     * Call this when you're done using the cracker.
+     */
+    destroy(): void;
+}
+//# sourceMappingURL=cracker.d.ts.map

package/dist/cracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cracker.d.ts","sourceRoot":"","sources":["../src/cracker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAkBH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAkB,gBAAgB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAe1G;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,QAAQ,CAAgB;IAChC,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,kBAAkB,CAAQ;IAClC,OAAO,CAAC,aAAa,CAAQ;IAC7B,OAAO,CAAC,YAAY,CAAyB;IAC7C,OAAO,CAAC,MAAM,CAAS;IAEvB;;;;;OAKG;IACG,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB9C;;;;OAIG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAMlC;;;OAGG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,cAAc,IAAI,OAAO;IAIzB;;;;;OAKG;IACG,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IA8BpE;;;;;;;OAOG;IACG,KAAK,CACT,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,YAAY,EACtB,UAAU,CAAC,EAAE,gBAAgB,GAC5B,OAAO,CAAC,WAAW,CAAC;IAsRvB;;;OAGG;IACH,OAAO,IAAI,IAAI;CAUhB"}