shogun-button-react 6.0.8 → 6.0.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (14) hide show
  1. package/dist/118.index.js +1 -1
  2. package/dist/122.index.js +1 -1
  3. package/dist/18.index.js +1 -1
  4. package/dist/195.index.js +1 -1
  5. package/dist/47.index.js +1 -1
  6. package/dist/508.index.js +1 -1
  7. package/dist/604.index.js +1 -1
  8. package/dist/619.index.js +1 -1
  9. package/dist/649.index.js +1 -1
  10. package/dist/695.index.js +1 -1
  11. package/dist/732.index.js +1 -1
  12. package/dist/794.index.js +1 -1
  13. package/dist/index.js +1 -1
  14. package/package.json +1 -1
package/dist/604.index.js CHANGED
@@ -1,2 +1,2 @@
1
1
  /*! For license information please see 604.index.js.LICENSE.txt */
2
- "use strict";(this.webpackChunkShogunButtonReact=this.webpackChunkShogunButtonReact||[]).push([[604],{15604:(e,t,r)=>{r.r(t),r.d(t,{AEADEncryptedDataPacket:()=>zs,CleartextMessage:()=>ja,CompressedDataPacket:()=>xs,GrammarError:()=>Cs,LiteralDataPacket:()=>As,MarkerPacket:()=>Zs,Message:()=>Na,OnePassSignaturePacket:()=>Is,PacketList:()=>Ks,PaddingPacket:()=>na,PrivateKey:()=>Ca,PublicKey:()=>Ka,PublicKeyEncryptedSessionKeyPacket:()=>Gs,PublicKeyPacket:()=>Vs,PublicSubkeyPacket:()=>Js,SecretKeyPacket:()=>Ws,SecretSubkeyPacket:()=>ta,Signature:()=>sa,SignaturePacket:()=>Es,Subkey:()=>Ea,SymEncryptedIntegrityProtectedDataPacket:()=>Ns,SymEncryptedSessionKeyPacket:()=>js,SymmetricallyEncryptedDataPacket:()=>Ys,TrustPacket:()=>ra,UnparseablePacket:()=>ut,UserAttributePacket:()=>Xs,UserIDPacket:()=>ea,armor:()=>re,config:()=>L,createCleartextMessage:()=>qa,createMessage:()=>Ga,decrypt:()=>eo,decryptKey:()=>Xa,decryptSessionKeys:()=>so,encrypt:()=>$a,encryptKey:()=>Wa,encryptSessionKey:()=>io,enums:()=>F,generateKey:()=>Ya,generateSessionKey:()=>no,readCleartextMessage:()=>Va,readKey:()=>xa,readKeys:()=>Ra,readMessage:()=>za,readPrivateKey:()=>Qa,readPrivateKeys:()=>Ta,readSignature:()=>aa,reformatKey:()=>Za,revokeKey:()=>Ja,sign:()=>to,unarmor:()=>te,verify:()=>ro});const n="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function i(e,t){return t.forEach(function(t){t&&"string"!=typeof t&&!Array.isArray(t)&&Object.keys(t).forEach(function(r){if("default"!==r&&!(r in e)){var n=Object.getOwnPropertyDescriptor(t,r);Object.defineProperty(e,r,n.get?n:{enumerable:!0,get:function(){return t[r]}})}})}),Object.freeze(e)}const s=Symbol("doneWritingPromise"),a=Symbol("doneWritingResolve"),o=Symbol("doneWritingReject"),c=Symbol("readingIndex");class u extends Array{constructor(){super(),Object.setPrototypeOf(this,u.prototype),this[s]=new Promise((e,t)=>{this[a]=e,this[o]=t}),this[s].catch(()=>{})}}function h(e){return e&&e.getReader&&Array.isArray(e)}function f(e){if(!h(e)){const t=e.getWriter(),r=t.releaseLock;return t.releaseLock=()=>{t.closed.catch(function(){}),r.call(t)},t}this.stream=e}function l(e){if(h(e))return"array";if(n.ReadableStream&&n.ReadableStream.prototype.isPrototypeOf(e))return"web";if(e&&!(n.ReadableStream&&e instanceof n.ReadableStream)&&"function"==typeof e._read&&"object"==typeof e._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!e||!e.getReader)&&"web-like"}function y(e){return Uint8Array.prototype.isPrototypeOf(e)}function g(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!y(e[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let n=0;return e.forEach(function(e){r.set(e,n),n+=e.length}),r}u.prototype.getReader=function(){return void 0===this[c]&&(this[c]=0),{read:async()=>(await this[s],this[c]===this.length?{value:void 0,done:!0}:{value:this[this[c]++],done:!1})}},u.prototype.readToEnd=async function(e){await this[s];const t=e(this.slice(this[c]));return this.length=0,t},u.prototype.clone=function(){const e=new u;return e[s]=this[s].then(()=>{e.push(...this)}),e},f.prototype.write=async function(e){this.stream.push(e)},f.prototype.close=async function(){this.stream[a]()},f.prototype.abort=async function(e){return this.stream[o](e),e},f.prototype.releaseLock=function(){},"object"==typeof n.process&&n.process.versions;const p=new WeakSet,d=Symbol("externalBuffer");function A(e){if(this.stream=e,e[d]&&(this[d]=e[d].slice()),h(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(l(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{t.closed.catch(function(){}),t.releaseLock()},void(this._cancel=t.cancel.bind(t))}let t=!1;this._read=async()=>t||p.has(e)?{value:void 0,done:!0}:(t=!0,{value:e,done:!1}),this._releaseLock=()=>{if(t)try{p.add(e)}catch(e){}}}function w(e){return l(e)?e:new ReadableStream({start(t){t.enqueue(e),t.close()}})}function m(e){if(l(e))return e;const t=new u;return(async()=>{const r=T(t);await r.write(e),await r.close()})(),t}function b(e){return e.some(e=>l(e)&&!h(e))?function(e){e=e.map(w);const t=v(async function(e){await Promise.all(n.map(t=>x(t,e)))});let r=Promise.resolve();const n=e.map((n,i)=>I(n,(n,s)=>(r=r.then(()=>k(n,t.writable,{preventClose:i!==e.length-1})),r)));return t.readable}(e):e.some(e=>h(e))?function(e){const t=new u;let r=Promise.resolve();return e.forEach((n,i)=>(r=r.then(()=>k(n,t,{preventClose:i!==e.length-1})),r)),t}(e):"string"==typeof e[0]?e.join(""):g(e)}async function k(e,t,{preventClose:r=!1,preventAbort:n=!1,preventCancel:i=!1}={}){if(l(e)&&!h(e)){e=w(e);try{if(e[d]){const r=T(t);for(let t=0;t<e[d].length;t++)await r.ready,await r.write(e[d][t]);r.releaseLock()}await e.pipeTo(t,{preventClose:r,preventAbort:n,preventCancel:i})}catch(e){}return}const s=R(e=m(e)),a=T(t);try{for(;;){await a.ready;const{done:e,value:t}=await s.read();if(e){r||await a.close();break}await a.write(t)}}catch(e){n||await a.abort(e)}finally{s.releaseLock(),a.releaseLock()}}function E(e,t){const r=new TransformStream(t);return k(e,r.writable),r.readable}function v(e){let t,r,n,i=!1,s=!1;return{readable:new ReadableStream({start(e){n=e},pull(){t?t():i=!0},async cancel(t){s=!0,e&&await e(t),r&&r(t)}},{highWaterMark:0}),writable:new WritableStream({write:async function(e){if(s)throw Error("Stream is cancelled");n.enqueue(e),i?i=!1:(await new Promise((e,n)=>{t=e,r=n}),t=null,r=null)},close:n.close.bind(n),abort:n.error.bind(n)})}}function B(e,t=()=>{},r=()=>{}){if(h(e)){const n=new u;return(async()=>{const i=T(n);try{const n=await P(e),s=t(n),a=r();let o;o=void 0!==s&&void 0!==a?b([s,a]):void 0!==s?s:a,await i.write(o),await i.close()}catch(e){await i.abort(e)}})(),n}if(l(e))return E(e,{async transform(e,r){try{const n=await t(e);void 0!==n&&r.enqueue(n)}catch(e){r.error(e)}},async flush(e){try{const t=await r();void 0!==t&&e.enqueue(t)}catch(t){e.error(t)}}});const n=t(e),i=r();return void 0!==n&&void 0!==i?b([n,i]):void 0!==n?n:i}function I(e,t){if(l(e)&&!h(e)){let r;const n=new TransformStream({start(e){r=e}}),i=k(e,n.writable),s=v(async function(e){r.error(e),await i,await new Promise(setTimeout)});return t(n.readable,s.writable),s.readable}e=m(e);const r=new u;return t(e,r),r}function S(e,t){let r;const n=I(e,(e,i)=>{const s=R(e);s.remainder=()=>(s.releaseLock(),k(e,i),n),r=t(s)});return r}function K(e){if(h(e))return e.clone();if(l(e)){const t=function(e){if(h(e))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(l(e)){const t=w(e).tee();return t[0][d]=t[1][d]=e[d],t}return[U(e),U(e)]}(e);return D(e,t[0]),t[1]}return U(e)}function C(e){return h(e)?K(e):l(e)?new ReadableStream({start(t){const r=I(e,async(e,r)=>{const n=R(e),i=T(r);try{for(;;){await i.ready;const{done:r,value:s}=await n.read();if(r){try{t.close()}catch(e){}return void await i.close()}try{t.enqueue(s)}catch(e){}await i.write(s)}}catch(e){t.error(e),await i.abort(e)}});D(e,r)}}):U(e)}function D(e,t){Object.entries(Object.getOwnPropertyDescriptors(e.constructor.prototype)).forEach(([r,n])=>{"constructor"!==r&&(n.value?n.value=n.value.bind(t):n.get=n.get.bind(t),Object.defineProperty(e,r,n))})}function U(e,t=0,r=1/0){if(h(e))throw Error("Not implemented");if(l(e)){if(t>=0&&r>=0){let n=0;return E(e,{transform(e,i){n<r?(n+e.length>=t&&i.enqueue(U(e,Math.max(t-n,0),r-n)),n+=e.length):i.terminate()}})}if(t<0&&(r<0||r===1/0)){let n=[];return B(e,e=>{e.length>=-t?n=[e]:n.push(e)},()=>U(b(n),t,r))}if(0===t&&r<0){let n;return B(e,e=>{const i=n?b([n,e]):e;if(i.length>=-r)return n=U(i,r),U(i,t,r);n=i})}return console.warn(`stream.slice(input, ${t}, ${r}) not implemented efficiently.`),Q(async()=>U(await P(e),t,r))}return e[d]&&(e=b(e[d].concat([e]))),y(e)?e.subarray(t,r===1/0?e.length:r):e.slice(t,r)}async function P(e,t=b){return h(e)?e.readToEnd(t):l(e)?R(e).readToEnd(t):e}async function x(e,t){if(l(e)){if(e.cancel){const r=await e.cancel(t);return await new Promise(setTimeout),r}if(e.destroy)return e.destroy(t),await new Promise(setTimeout),t}}function Q(e){const t=new u;return(async()=>{const r=T(t);try{await r.write(await e()),await r.close()}catch(e){await r.abort(e)}})(),t}function R(e){return new A(e)}function T(e){return new f(e)}A.prototype.read=async function(){return this[d]&&this[d].length?{done:!1,value:this[d].shift()}:this._read()},A.prototype.releaseLock=function(){this[d]&&(this.stream[d]=this[d]),this._releaseLock()},A.prototype.cancel=function(e){return this._cancel(e)},A.prototype.readLine=async function(){let e,t=[];for(;!e;){let{done:r,value:n}=await this.read();if(n+="",r)return t.length?b(t):void 0;const i=n.indexOf("\n")+1;i&&(e=b(t.concat(n.substr(0,i))),t=[]),i!==n.length&&t.push(n.substr(i))}return this.unshift(...t),e},A.prototype.readByte=async function(){const{done:e,value:t}=await this.read();if(e)return;const r=t[0];return this.unshift(U(t,1)),r},A.prototype.readBytes=async function(e){const t=[];let r=0;for(;;){const{done:n,value:i}=await this.read();if(n)return t.length?b(t):void 0;if(t.push(i),r+=i.length,r>=e){const r=b(t);return this.unshift(U(r,e)),U(r,0,e)}}},A.prototype.peekBytes=async function(e){const t=await this.readBytes(e);return this.unshift(t),t},A.prototype.unshift=function(...e){this[d]||(this[d]=[]),1===e.length&&y(e[0])&&this[d].length&&e[0].length&&this[d][0].byteOffset>=e[0].length?this[d][0]=new Uint8Array(this[d][0].buffer,this[d][0].byteOffset-e[0].length,this[d][0].byteLength+e[0].length):this[d].unshift(...e.filter(e=>e&&e.length))},A.prototype.readToEnd=async function(e=b){const t=[];for(;;){const{done:e,value:r}=await this.read();if(e)break;t.push(r)}return e(t)};const M=Symbol("byValue");var F={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(e,t){if("number"==typeof t&&(t=this.read(e,t)),void 0!==e[t])return e[t];throw Error("Invalid enum value.")},read:function(e,t){if(e[M]||(e[M]=[],Object.entries(e).forEach(([t,r])=>{e[M][r]=t})),void 0!==e[M][t])return e[M][t];throw Error("Invalid enum value.")}},L={preferredHashAlgorithm:F.hash.sha512,preferredSymmetricAlgorithm:F.symmetric.aes256,preferredCompressionAlgorithm:F.compression.uncompressed,aeadProtect:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:F.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,enableParsingV5Entities:!1,s2kType:F.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,minRSABits:2047,passwordCollisionCheck:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([F.symmetric.aes128,F.symmetric.aes192,F.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,enforceGrammar:!0,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.2.2",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],nonDeterministicSignaturesViaNotation:!0,useEllipticFallback:!0,rejectHashAlgorithms:new Set([F.hash.md5,F.hash.ripemd]),rejectMessageHashAlgorithms:new Set([F.hash.md5,F.hash.ripemd,F.hash.sha1]),rejectPublicKeyAlgorithms:new Set([F.publicKey.elgamal,F.publicKey.dsa]),rejectCurves:new Set([F.curve.secp256k1])};const N=(()=>{try{return!1}catch(e){}return!1})(),O={isString:function(e){return"string"==typeof e||e instanceof String},nodeRequire:()=>{},isArray:function(e){return e instanceof Array},isUint8Array:y,isStream:l,getNobleCurve:async(e,t)=>{if(!L.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then(function(){return of});switch(e){case F.publicKey.ecdh:case F.publicKey.ecdsa:{const e=r.get(t);if(!e)throw Error("Unsupported curve");return e}case F.publicKey.x448:return r.get("x448");case F.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(e){let t=0;for(let r=0;r<e.length;r++)t+=256**r*e[e.length-1-r];return t},writeNumber:function(e,t){const r=new Uint8Array(t);for(let n=0;n<t;n++)r[n]=e>>8*(t-n-1)&255;return r},readDate:function(e){const t=O.readNumber(e);return new Date(1e3*t)},writeDate:function(e){const t=Math.floor(e.getTime()/1e3);return O.writeNumber(t,4)},normalizeDate:function(e=Date.now()){return null===e||e===1/0?e:new Date(1e3*Math.floor(+e/1e3))},readMPI:function(e){const t=7+(e[0]<<8|e[1])>>>3;return O.readExactSubarray(e,2,2+t)},readExactSubarray:function(e,t,r){if(e.length<r-t)throw Error("Input array too short");return e.subarray(t,r)},leftPad(e,t){if(e.length>t)throw Error("Input array too long");const r=new Uint8Array(t),n=t-e.length;return r.set(e,n),r},uint8ArrayToMPI:function(e){const t=O.uint8ArrayBitLength(e);if(0===t)throw Error("Zero MPI");const r=e.subarray(e.length-Math.ceil(t/8)),n=new Uint8Array([(65280&t)>>8,255&t]);return O.concatUint8Array([n,r])},uint8ArrayBitLength:function(e){let t;for(t=0;t<e.length&&0===e[t];t++);if(t===e.length)return 0;const r=e.subarray(t);return 8*(r.length-1)+O.nbits(r[0])},hexToUint8Array:function(e){const t=new Uint8Array(e.length>>1);for(let r=0;r<e.length>>1;r++)t[r]=parseInt(e.substr(r<<1,2),16);return t},uint8ArrayToHex:function(e){const t="0123456789abcdef";let r="";return e.forEach(e=>{r+=t[e>>4]+t[15&e]}),r},stringToUint8Array:function(e){return B(e,e=>{if(!O.isString(e))throw Error("stringToUint8Array: Data must be in the form of a string");const t=new Uint8Array(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t})},uint8ArrayToString:function(e){const t=[],r=16384,n=(e=new Uint8Array(e)).length;for(let i=0;i<n;i+=r)t.push(String.fromCharCode.apply(String,e.subarray(i,i+r<n?i+r:n)));return t.join("")},encodeUTF8:function(e){const t=new TextEncoder("utf-8");function r(e,r=!1){return t.encode(e,{stream:!r})}return B(e,r,()=>r("",!0))},decodeUTF8:function(e){const t=new TextDecoder("utf-8");function r(e,r=!1){return t.decode(e,{stream:!r})}return B(e,r,()=>r(new Uint8Array,!0))},concat:b,concatUint8Array:g,equalsUint8Array:function(e,t){if(!O.isUint8Array(e)||!O.isUint8Array(t))throw Error("Data must be in the form of a Uint8Array");if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0},findLastIndex:function(e,t){for(let r=e.length;r>=0;r--)if(t(e[r],r,e))return r;return-1},writeChecksum:function(e){let t=0;for(let r=0;r<e.length;r++)t=t+e[r]&65535;return O.writeNumber(t,2)},printDebug:function(e){N&&console.log("[OpenPGP.js debug]",e)},printDebugError:function(e){N&&console.error("[OpenPGP.js debug]",e)},nbits:function(e){let t=1,r=e>>>16;return 0!==r&&(e=r,t+=16),r=e>>8,0!==r&&(e=r,t+=8),r=e>>4,0!==r&&(e=r,t+=4),r=e>>2,0!==r&&(e=r,t+=2),r=e>>1,0!==r&&(e=r,t+=1),t},double:function(e){const t=new Uint8Array(e.length),r=e.length-1;for(let n=0;n<r;n++)t[n]=e[n]<<1^e[n+1]>>7;return t[r]=e[r]<<1^135*(e[0]>>7),t},shiftRight:function(e,t){if(t)for(let r=e.length-1;r>=0;r--)e[r]>>=t,r>0&&(e[r]|=e[r-1]<<8-t);return e},getWebCrypto:function(){const e=void 0!==n&&n.crypto&&n.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!e)throw Error("The WebCrypto API is not available");return e},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){return"undefined"!=typeof navigator?navigator.hardwareConcurrency||1:this.nodeRequire("os").cpus().length},isEmailAddress:function(e){return!!O.isString(e)&&/^[^\p{C}\p{Z}@<>\\]+@[^\p{C}\p{Z}@<>\\]+[^\p{C}\p{Z}\p{P}]$/u.test(e)},canonicalizeEOL:function(e){let t=!1;return B(e,e=>{let r;t&&(e=O.concatUint8Array([new Uint8Array([13]),e])),13===e[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;const n=[];for(let t=0;r=e.indexOf(10,t)+1,r;t=r)13!==e[r-2]&&n.push(r);if(!n.length)return e;const i=new Uint8Array(e.length+n.length);let s=0;for(let t=0;t<n.length;t++){const r=e.subarray(n[t-1]||0,n[t]);i.set(r,s),s+=r.length,i[s-1]=13,i[s]=10,s++}return i.set(e.subarray(n[n.length-1]||0),s),i},()=>t?new Uint8Array([13]):void 0)},nativeEOL:function(e){let t=!1;return B(e,e=>{let r;13===(e=t&&10!==e[0]?O.concatUint8Array([new Uint8Array([13]),e]):new Uint8Array(e))[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;let n=0;for(let t=0;t!==e.length;t=r){r=e.indexOf(13,t)+1,r||(r=e.length);const i=r-(10===e[r]?1:0);t&&e.copyWithin(n,t,i),n+=i-t}return e.subarray(0,n)},()=>t?new Uint8Array([13]):void 0)},removeTrailingSpaces:function(e){return e.split("\n").map(e=>{let t=e.length-1;for(;t>=0&&(" "===e[t]||"\t"===e[t]||"\r"===e[t]);t--);return e.substr(0,t+1)}).join("\n")},wrapError:function(e,t){if(!t)return e instanceof Error?e:Error(e);if(e instanceof Error){try{e.message+=": "+t.message,e.cause=t}catch(e){}return e}return Error(e+": "+t.message,{cause:t})},constructAllowedPackets:function(e){const t={};return e.forEach(e=>{if(!e.tag)throw Error("Invalid input: expected a packet class");t[e.tag]=e}),t},anyPromise:function(e){return new Promise(async(t,r)=>{let n;await Promise.all(e.map(async e=>{try{t(await e)}catch(e){n=e}})),r(n)})},selectUint8Array:function(e,t,r){const n=Math.max(t.length,r.length),i=new Uint8Array(n);let s=0;for(let n=0;n<i.length;n++)i[n]=t[n]&256-e|r[n]&255+e,s+=e&n<t.length|1-e&n<r.length;return i.subarray(0,s)},selectUint8:function(e,t,r){return t&256-e|r&255+e},isAES:function(e){return e===F.symmetric.aes128||e===F.symmetric.aes192||e===F.symmetric.aes256}},H=O.getNodeBuffer();let z,G;function _(e){let t=new Uint8Array;return B(e,e=>{t=O.concatUint8Array([t,e]);const r=[],n=Math.floor(t.length/45),i=45*n,s=z(t.subarray(0,i));for(let e=0;e<n;e++)r.push(s.substr(60*e,60)),r.push("\n");return t=t.subarray(i),r.join("")},()=>t.length?z(t)+"\n":"")}function j(e){let t="";return B(e,e=>{t+=e;let r=0;const n=[" ","\t","\r","\n"];for(let e=0;e<n.length;e++){const i=n[e];for(let e=t.indexOf(i);-1!==e;e=t.indexOf(i,e+1))r++}let i=t.length;for(;i>0&&(i-r)%4!=0;i--)n.includes(t[i])&&r--;const s=G(t.substr(0,i));return t=t.substr(i),s},()=>G(t))}function V(e){return j(e.replace(/-/g,"+").replace(/_/g,"/"))}function q(e,t){let r=_(e).replace(/[\r\n]/g,"");return r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,""),r}function Y(e){const t=e.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!t)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(t[1])?F.armor.multipartSection:/MESSAGE, PART \d+/.test(t[1])?F.armor.multipartLast:/SIGNED MESSAGE/.test(t[1])?F.armor.signed:/MESSAGE/.test(t[1])?F.armor.message:/PUBLIC KEY BLOCK/.test(t[1])?F.armor.publicKey:/PRIVATE KEY BLOCK/.test(t[1])?F.armor.privateKey:/SIGNATURE/.test(t[1])?F.armor.signature:void 0}function Z(e,t){let r="";return t.showVersion&&(r+="Version: "+t.versionString+"\n"),t.showComment&&(r+="Comment: "+t.commentString+"\n"),e&&(r+="Comment: "+e+"\n"),r+="\n",r}function J(e){const t=function(e){let t=13501623;return B(e,e=>{const r=W?Math.floor(e.length/4):0,n=new Uint32Array(e.buffer,e.byteOffset,r);for(let e=0;e<r;e++)t^=n[e],t=X[0][t>>24&255]^X[1][t>>16&255]^X[2][t>>8&255]^X[3][255&t];for(let n=4*r;n<e.length;n++)t=t>>8^X[0][255&t^e[n]]},()=>new Uint8Array([t,t>>8,t>>16]))}(e);return _(t)}H?(z=e=>H.from(e).toString("base64"),G=e=>{const t=H.from(e,"base64");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength)}):(z=e=>btoa(O.uint8ArrayToString(e)),G=e=>O.stringToUint8Array(atob(e)));const X=[Array(255),Array(255),Array(255),Array(255)];for(let e=0;e<=255;e++){let t=e<<16;for(let e=0;e<8;e++)t=t<<1^(8388608&t?8801531:0);X[0][e]=(16711680&t)>>16|65280&t|(255&t)<<16}for(let e=0;e<=255;e++)X[1][e]=X[0][e]>>8^X[0][255&X[0][e]];for(let e=0;e<=255;e++)X[2][e]=X[1][e]>>8^X[0][255&X[1][e]];for(let e=0;e<=255;e++)X[3][e]=X[2][e]>>8^X[0][255&X[2][e]];const W=function(){const e=new ArrayBuffer(2);return new DataView(e).setInt16(0,255,!0),255===new Int16Array(e)[0]}();function $(e){for(let t=0;t<e.length;t++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(e[t])||O.printDebugError(Error("Improperly formatted armor header: "+e[t])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(e[t])||O.printDebugError(Error("Unknown header: "+e[t]))}function ee(e){let t=e;const r=e.lastIndexOf("=");return r>=0&&r!==e.length-1&&(t=e.slice(0,r)),t}function te(e){return new Promise(async(t,r)=>{try{const n=/^-----[^-]+-----$/m,i=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,u=a,h=[];const f=j(I(e,async(e,l)=>{const y=R(e);try{for(;;){let e=await y.readLine();if(void 0===e)throw Error("Misformed armored text");if(e=O.removeTrailingSpaces(e.replace(/[\r\n]/g,"")),s)if(o)c||s!==F.armor.signed||(n.test(e)?(h=h.join("\r\n"),c=!0,$(u),u=[],o=!1):h.push(e.replace(/^- /,"")));else if(n.test(e)&&r(Error("Mandatory blank line missing between armor headers and armor data")),i.test(e)){if($(u),o=!0,c||s!==F.armor.signed){t({text:h,data:f,headers:a,type:s});break}}else u.push(e);else n.test(e)&&(s=Y(e))}}catch(e){return void r(e)}const g=T(l);try{for(;;){await g.ready;const{done:e,value:t}=await y.read();if(e)throw Error("Misformed armored text");const r=t+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let e=await y.readToEnd();e.length||(e=""),e=r+e,e=O.removeTrailingSpaces(e.replace(/\r/g,""));const t=e.split(n);if(1===t.length)throw Error("Misformed armored text");const i=ee(t[0].slice(0,-1));await g.write(i);break}await g.write(r)}await g.ready,await g.close()}catch(e){await g.abort(e)}}))}catch(e){r(e)}}).then(async e=>(h(e.data)&&(e.data=await P(e.data)),e))}function re(e,t,r,n,i,s=!1,a=L){let o,c;e===F.armor.signed&&(o=t.text,c=t.hash,t=t.data);const u=s&&C(t),h=[];switch(e){case F.armor.multipartSection:h.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+n+"-----\n"),h.push(Z(i,a)),h.push(_(t)),u&&h.push("=",J(u)),h.push("-----END PGP MESSAGE, PART "+r+"/"+n+"-----\n");break;case F.armor.multipartLast:h.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),h.push(Z(i,a)),h.push(_(t)),u&&h.push("=",J(u)),h.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case F.armor.signed:h.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),h.push(c?`Hash: ${c}\n\n`:"\n"),h.push(o.replace(/^-/gm,"- -")),h.push("\n-----BEGIN PGP SIGNATURE-----\n"),h.push(Z(i,a)),h.push(_(t)),u&&h.push("=",J(u)),h.push("-----END PGP SIGNATURE-----\n");break;case F.armor.message:h.push("-----BEGIN PGP MESSAGE-----\n"),h.push(Z(i,a)),h.push(_(t)),u&&h.push("=",J(u)),h.push("-----END PGP MESSAGE-----\n");break;case F.armor.publicKey:h.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),h.push(Z(i,a)),h.push(_(t)),u&&h.push("=",J(u)),h.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case F.armor.privateKey:h.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),h.push(Z(i,a)),h.push(_(t)),u&&h.push("=",J(u)),h.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case F.armor.signature:h.push("-----BEGIN PGP SIGNATURE-----\n"),h.push(Z(i,a)),h.push(_(t)),u&&h.push("=",J(u)),h.push("-----END PGP SIGNATURE-----\n")}return O.concat(h)}const ne=BigInt(0),ie=BigInt(1);function se(e){const t="0123456789ABCDEF";let r="";return e.forEach(e=>{r+=t[e>>4]+t[15&e]}),BigInt("0x0"+r)}function ae(e,t){const r=e%t;return r<ne?r+t:r}function oe(e,t,r){if(r===ne)throw Error("Modulo cannot be zero");if(r===ie)return BigInt(0);if(t<ne)throw Error("Unsopported negative exponent");let n=t,i=e;i%=r;let s=BigInt(1);for(;n>ne;){const e=n&ie;n>>=ie,s=e?s*i%r:s,i=i*i%r}return s}function ce(e){return e>=ne?e:-e}function ue(e,t){const{gcd:r,x:n}=function(e,t){let r=BigInt(0),n=BigInt(1),i=BigInt(1),s=BigInt(0),a=ce(e),o=ce(t);const c=e<ne,u=t<ne;for(;o!==ne;){const e=a/o;let t=r;r=i-e*r,i=t,t=n,n=s-e*n,s=t,t=o,o=a%o,a=t}return{x:c?-i:i,y:u?-s:s,gcd:a}}(e,t);if(r!==ie)throw Error("Inverse does not exist");return ae(n+t,t)}function he(e){const t=Number(e);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}function fe(e,t){return(e>>BigInt(t)&ie)===ne?0:1}function le(e){const t=e<ne?BigInt(-1):ne;let r=1,n=e;for(;(n>>=ie)!==t;)r++;return r}function ye(e){const t=e<ne?BigInt(-1):ne,r=BigInt(8);let n=1,i=e;for(;(i>>=r)!==t;)n++;return n}function ge(e,t="be",r){let n=e.toString(16);n.length%2==1&&(n="0"+n);const i=n.length/2,s=new Uint8Array(r||i),a=r?r-i:0;let o=0;for(;o<i;)s[o+a]=parseInt(n.slice(2*o,2*o+2),16),o++;return"be"!==t&&s.reverse(),s}const pe=O.getNodeCrypto();function de(e){const t="undefined"!=typeof crypto?crypto:pe?.webcrypto;if(t?.getRandomValues){const r=new Uint8Array(e);return t.getRandomValues(r)}throw Error("No secure random number generator available.")}function Ae(e,t){if(t<e)throw Error("Illegal parameter value: max <= min");const r=t-e;return ae(se(de(ye(r)+8)),r)+e}const we=BigInt(1);function me(e,t,r){const n=BigInt(30),i=we<<BigInt(e-1),s=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2];let a=Ae(i,i<<we),o=he(ae(a,n));do{a+=BigInt(s[o]),o=(o+s[o])%s.length,le(a)>e&&(a=ae(a,i<<we),a+=i,o=he(ae(a,n)))}while(!be(a,t,r));return a}function be(e,t,r){return!(t&&function(e,t){let r=e,n=t;for(;n!==ne;){const e=n;n=r%n,r=e}return r}(e-we,t)!==we||!function(e){const t=BigInt(0);return ke.every(r=>ae(e,r)!==t)}(e)||!function(e,t=BigInt(2)){return oe(t,e-we,e)===we}(e)||!function(e,t){const r=le(e);t||(t=Math.max(1,r/48|0));const n=e-we;let i=0;for(;!fe(n,i);)i++;const s=e>>BigInt(i);for(;t>0;t--){let t,r=oe(Ae(BigInt(2),n),s,e);if(r!==we&&r!==n){for(t=1;t<i;t++){if(r=ae(r*r,e),r===we)return!1;if(r===n)break}if(t===i)return!1}}return!0}(e,r))}const ke=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999].map(e=>BigInt(e)),Ee=O.getWebCrypto(),ve=O.getNodeCrypto(),Be=ve&&ve.getHashes();function Ie(e){if(ve&&Be.includes(e))return async function(t){const r=ve.createHash(e);return B(t,e=>{r.update(e)},()=>new Uint8Array(r.digest()))}}function Se(e,t){const r=async()=>{const{nobleHashes:t}=await Promise.resolve().then(function(){return Rf}),r=t.get(e);if(!r)throw Error("Unsupported hash");return r};return async function(e){if(h(e)&&(e=await P(e)),O.isStream(e)){const t=(await r()).create();return B(e,e=>{t.update(e)},()=>t.digest())}return Ee&&t?new Uint8Array(await Ee.digest(t,e)):(await r())(e)}}const Ke=Ie("md5")||Se("md5"),Ce=Ie("sha1")||Se("sha1","SHA-1"),De=Ie("sha224")||Se("sha224"),Ue=Ie("sha256")||Se("sha256","SHA-256"),Pe=Ie("sha384")||Se("sha384","SHA-384"),xe=Ie("sha512")||Se("sha512","SHA-512"),Qe=Ie("ripemd160")||Se("ripemd160"),Re=Ie("sha3-256")||Se("sha3_256"),Te=Ie("sha3-512")||Se("sha3_512");function Me(e,t){switch(e){case F.hash.md5:return Ke(t);case F.hash.sha1:return Ce(t);case F.hash.ripemd:return Qe(t);case F.hash.sha256:return Ue(t);case F.hash.sha384:return Pe(t);case F.hash.sha512:return xe(t);case F.hash.sha224:return De(t);case F.hash.sha3_256:return Re(t);case F.hash.sha3_512:return Te(t);default:throw Error("Unsupported hash function")}}function Fe(e){switch(e){case F.hash.md5:return 16;case F.hash.sha1:case F.hash.ripemd:return 20;case F.hash.sha256:return 32;case F.hash.sha384:return 48;case F.hash.sha512:return 64;case F.hash.sha224:return 28;case F.hash.sha3_256:return 32;case F.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}}const Le=[];function Ne(e,t){const r=e.length;if(r>t-11)throw Error("Message too long");const n=function(e){const t=new Uint8Array(e);let r=0;for(;r<e;){const n=de(e-r);for(let e=0;e<n.length;e++)0!==n[e]&&(t[r++]=n[e])}return t}(t-r-3),i=new Uint8Array(t);return i[1]=2,i.set(n,2),i.set(e,t-r),i}function Oe(e,t){let r=2,n=1;for(let t=r;t<e.length;t++)n&=0!==e[t],r+=n;const i=r-2,s=e.subarray(r+1),a=0===e[0]&2===e[1]&i>=8&!n;if(t)return O.selectUint8Array(a,s,t);if(a)return s;throw Error("Decryption error")}function He(e,t,r){let n;if(t.length!==Fe(e))throw Error("Invalid hash length");const i=new Uint8Array(Le[e].length);for(n=0;n<Le[e].length;n++)i[n]=Le[e][n];const s=i.length+t.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(i,r-s),o.set(t,r-t.length),o}Le[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],Le[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],Le[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],Le[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],Le[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],Le[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],Le[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];const ze=O.getWebCrypto(),Ge=O.getNodeCrypto(),_e=BigInt(1);async function je(e,t,r,n,i,s,a,o,c){if(Fe(e)>=r.length)throw Error("Digest size cannot exceed key modulus size");if(t&&!O.isStream(t))if(O.getWebCrypto())try{return await async function(e,t,r,n,i,s,a,o){const c=await qe(r,n,i,s,a,o),u={name:"RSASSA-PKCS1-v1_5",hash:{name:e}},h=await ze.importKey("jwk",c,u,!1,["sign"]);return new Uint8Array(await ze.sign("RSASSA-PKCS1-v1_5",h,t))}(F.read(F.webHash,e),t,r,n,i,s,a,o)}catch(e){O.printDebugError(e)}else if(O.getNodeCrypto())return async function(e,t,r,n,i,s,a,o){const c=Ge.createSign(F.read(F.hash,e));c.write(t),c.end();const u=await qe(r,n,i,s,a,o);return new Uint8Array(c.sign({key:u,format:"jwk",type:"pkcs1"}))}(e,t,r,n,i,s,a,o);return async function(e,t,r,n){return t=se(t),ge(oe(se(He(e,n,ye(t))),r=se(r),t),"be",ye(t))}(e,r,i,c)}async function Ve(e,t,r){return O.getNodeCrypto()?async function(e,t,r){const n={key:Ye(t,r),format:"jwk",type:"pkcs1",padding:Ge.constants.RSA_PKCS1_PADDING};return new Uint8Array(Ge.publicEncrypt(n,e))}(e,t,r):async function(e,t,r){if(t=se(t),e=se(Ne(e,ye(t))),r=se(r),e>=t)throw Error("Message size cannot exceed modulus size");return ge(oe(e,r,t),"be",ye(t))}(e,t,r)}async function qe(e,t,r,n,i,s){const a=se(n),o=se(i),c=se(r);let u=ae(c,o-_e),h=ae(c,a-_e);return h=ge(h),u=ge(u),{kty:"RSA",n:q(e),e:q(t),d:q(r),p:q(i),q:q(n),dp:q(u),dq:q(h),qi:q(s),ext:!0}}function Ye(e,t){return{kty:"RSA",n:q(e),e:q(t),ext:!0}}function Ze(e,t){return{n:V(e.n),e:ge(t),d:V(e.d),p:V(e.q),q:V(e.p),u:V(e.qi)}}const Je=BigInt(1),Xe={"2a8648ce3d030107":F.curve.nistP256,"2b81040022":F.curve.nistP384,"2b81040023":F.curve.nistP521,"2b8104000a":F.curve.secp256k1,"2b06010401da470f01":F.curve.ed25519Legacy,"2b060104019755010501":F.curve.curve25519Legacy,"2b2403030208010107":F.curve.brainpoolP256r1,"2b240303020801010b":F.curve.brainpoolP384r1,"2b240303020801010d":F.curve.brainpoolP512r1};class We{constructor(e){if(e instanceof We)this.oid=e.oid;else if(O.isArray(e)||O.isUint8Array(e)){if(6===(e=new Uint8Array(e))[0]){if(e[1]!==e.length-2)throw Error("Length mismatch in DER encoded oid");e=e.subarray(2)}this.oid=e}else this.oid=""}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.oid=e.subarray(1,1+t),1+this.oid.length}throw Error("Invalid oid")}write(){return O.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return O.uint8ArrayToHex(this.oid)}getName(){const e=Xe[this.toHex()];if(!e)throw Error("Unknown curve object identifier.");return e}}function $e(e){let t,r=0;const n=e[0];return n<192?([r]=e,t=1):n<255?(r=(e[0]-192<<8)+e[1]+192,t=2):255===n&&(r=O.readNumber(e.subarray(1,5)),t=5),{len:r,offset:t}}function et(e){return e<192?new Uint8Array([e]):e>191&&e<8384?new Uint8Array([192+(e-192>>8),e-192&255]):O.concatUint8Array([new Uint8Array([255]),O.writeNumber(e,4)])}function tt(e){if(e<0||e>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+e])}function rt(e){return new Uint8Array([192|e])}function nt(e,t){return O.concatUint8Array([rt(e),et(t)])}function it(e){return[F.packet.literalData,F.packet.compressedData,F.packet.symmetricallyEncryptedData,F.packet.symEncryptedIntegrityProtectedData,F.packet.aeadEncryptedData].includes(e)}async function st(e,t,r){let n,i;try{const s=await e.peekBytes(2);if(!s||s.length<2||!(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const a=await e.readByte();let o,c,h=-1,f=-1;f=0,64&a&&(f=1),f?h=63&a:(h=(63&a)>>2,c=3&a);const l=it(h);let y,g=null;if(t&&l){if("array"===t){const e=new u;n=T(e),g=e}else{const e=new TransformStream;n=T(e.writable),g=e.readable}i=r({tag:h,packet:g})}else g=[];do{if(f){const t=await e.readByte();if(y=!1,t<192)o=t;else if(t>=192&&t<224)o=(t-192<<8)+await e.readByte()+192;else if(t>223&&t<255){if(o=1<<(31&t),y=!0,!l)throw new TypeError("This packet type does not support partial lengths.")}else o=await e.readByte()<<24|await e.readByte()<<16|await e.readByte()<<8|await e.readByte()}else switch(c){case 0:o=await e.readByte();break;case 1:o=await e.readByte()<<8|await e.readByte();break;case 2:o=await e.readByte()<<24|await e.readByte()<<16|await e.readByte()<<8|await e.readByte();break;default:o=1/0}if(o>0){let t=0;for(;;){n&&await n.ready;const{done:r,value:i}=await e.read();if(r){if(o===1/0)break;throw Error("Unexpected end of packet")}const s=o===1/0?i:i.subarray(0,o-t);if(n?await n.write(s):g.push(s),t+=i.length,t>=o){e.unshift(i.subarray(o-t+i.length));break}}}}while(y);n?(await n.ready,await n.close()):(g=O.concatUint8Array(g),await r({tag:h,packet:g}))}catch(e){if(n)return await n.abort(e),!0;throw e}finally{n&&await i}}class at extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,at),this.name="UnsupportedError"}}class ot extends at{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,at),this.name="UnknownPacketError"}}class ct extends at{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,at),this.name="MalformedPacketError"}}class ut{constructor(e,t){this.tag=e,this.rawContent=t}write(){return this.rawContent}}async function ht(e){switch(e){case F.publicKey.ed25519:try{const e=O.getWebCrypto(),t=await e.generateKey("Ed25519",!0,["sign","verify"]).catch(e=>{if("OperationError"===e.name){const e=Error("Unexpected key generation issue");throw e.name="NotSupportedError",e}throw e}),r=await e.exportKey("jwk",t.privateKey),n=await e.exportKey("jwk",t.publicKey);return{A:new Uint8Array(V(n.x)),seed:V(r.d)}}catch(t){if("NotSupportedError"!==t.name)throw t;const{default:r}=await Promise.resolve().then(function(){return Bl}),n=de(gt(e)),{publicKey:i}=r.sign.keyPair.fromSeed(n);return{A:i,seed:n}}case F.publicKey.ed448:{const e=await O.getNobleCurve(F.publicKey.ed448),{secretKey:t,publicKey:r}=e.keygen();return{A:r,seed:t}}default:throw Error("Unsupported EdDSA algorithm")}}async function ft(e,t,r,n,i,s){if(Fe(t)<Fe(pt(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case F.publicKey.ed25519:try{const t=O.getWebCrypto(),r=At(e,n,i),a=await t.importKey("jwk",r,"Ed25519",!1,["sign"]);return{RS:new Uint8Array(await t.sign("Ed25519",a,s))}}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:t}=await Promise.resolve().then(function(){return Bl}),r=O.concatUint8Array([i,n]);return{RS:t.sign.detached(s,r)}}case F.publicKey.ed448:return{RS:(await O.getNobleCurve(F.publicKey.ed448)).sign(s,i)};default:throw Error("Unsupported EdDSA algorithm")}}async function lt(e,t,{RS:r},n,i,s){if(Fe(t)<Fe(pt(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case F.publicKey.ed25519:try{const t=O.getWebCrypto(),n=dt(e,i),a=await t.importKey("jwk",n,"Ed25519",!1,["verify"]);return await t.verify("Ed25519",a,r,s)}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:t}=await Promise.resolve().then(function(){return Bl});return t.sign.detached.verify(s,r,i)}case F.publicKey.ed448:return(await O.getNobleCurve(F.publicKey.ed448)).verify(r,s,i);default:throw Error("Unsupported EdDSA algorithm")}}async function yt(e,t,r){switch(e){case F.publicKey.ed25519:try{const n=O.getWebCrypto(),i=At(e,t,r),s=dt(e,t),a=await n.importKey("jwk",i,"Ed25519",!1,["sign"]),o=await n.importKey("jwk",s,"Ed25519",!1,["verify"]),c=de(8),u=new Uint8Array(await n.sign("Ed25519",a,c));return await n.verify("Ed25519",o,u,c)}catch(e){if("NotSupportedError"!==e.name)return!1;const{default:n}=await Promise.resolve().then(function(){return Bl}),{publicKey:i}=n.sign.keyPair.fromSeed(r);return O.equalsUint8Array(t,i)}case F.publicKey.ed448:{const e=(await O.getNobleCurve(F.publicKey.ed448)).getPublicKey(r);return O.equalsUint8Array(t,e)}default:return!1}}function gt(e){switch(e){case F.publicKey.ed25519:return 32;case F.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function pt(e){switch(e){case F.publicKey.ed25519:return F.hash.sha256;case F.publicKey.ed448:return F.hash.sha512;default:throw Error("Unknown EdDSA algo")}}const dt=(e,t)=>{if(e===F.publicKey.ed25519)return{kty:"OKP",crv:"Ed25519",x:q(t),ext:!0};throw Error("Unsupported EdDSA algorithm")},At=(e,t,r)=>{if(e===F.publicKey.ed25519){const n=dt(e,t);return n.d=q(r),n}throw Error("Unsupported EdDSA algorithm")};var wt=Object.freeze({__proto__:null,generate:ht,getPayloadSize:gt,getPreferredHashAlgo:pt,sign:ft,validateParams:yt,verify:lt});function mt(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&"Uint8Array"===e.constructor.name}function bt(e,...t){if(!mt(e))throw Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw Error("Uint8Array expected of length "+t+", got length="+e.length)}function kt(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Et(e,t){bt(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}function vt(e){return new Uint8Array(e.buffer,e.byteOffset,e.byteLength)}function Bt(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function It(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function St(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}const Kt=(()=>68===new Uint8Array(new Uint32Array([287454020]).buffer)[0])();function Ct(e){if("string"==typeof e)e=function(e){if("string"!=typeof e)throw Error("string expected");return new Uint8Array((new TextEncoder).encode(e))}(e);else{if(!mt(e))throw Error("Uint8Array expected, got "+typeof e);e=Mt(e)}return e}function Dt(e,t){return e.buffer===t.buffer&&e.byteOffset<t.byteOffset+t.byteLength&&t.byteOffset<e.byteOffset+e.byteLength}function Ut(e,t){if(Dt(e,t)&&e.byteOffset<t.byteOffset)throw Error("complex overlap of input and output is not supported")}function Pt(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return 0===r}const xt=(e,t)=>{function r(r,...n){if(bt(r),!Kt)throw Error("Non little-endian hardware is not yet supported");if(void 0!==e.nonceLength){const t=n[0];if(!t)throw Error("nonce / iv required");e.varSizeNonce?bt(t):bt(t,e.nonceLength)}const i=e.tagLength;i&&void 0!==n[1]&&bt(n[1]);const s=t(r,...n),a=(e,t)=>{if(void 0!==t){if(2!==e)throw Error("cipher output not supported");bt(t)}};let o=!1;return{encrypt(e,t){if(o)throw Error("cannot encrypt() twice with same key + nonce");return o=!0,bt(e),a(s.encrypt.length,t),s.encrypt(e,t)},decrypt(e,t){if(bt(e),i&&e.length<i)throw Error("invalid ciphertext length: smaller than tagLength="+i);return a(s.decrypt.length,t),s.decrypt(e,t)}}}return Object.assign(r,e),r};function Qt(e,t,r=!0){if(void 0===t)return new Uint8Array(e);if(t.length!==e)throw Error("invalid output length, expected "+e+", got: "+t.length);if(r&&!Tt(t))throw Error("invalid output, must be aligned");return t}function Rt(e,t,r,n){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,n);const i=BigInt(32),s=BigInt(4294967295),a=Number(r>>i&s),o=Number(r&s);e.setUint32(t+0,a,n),e.setUint32(t+4,o,n)}function Tt(e){return e.byteOffset%4==0}function Mt(e){return Uint8Array.from(e)}const Ft=16,Lt=new Uint8Array(16),Nt=Bt(Lt),Ot=e=>(e>>>0&255)<<24|(e>>>8&255)<<16|(e>>>16&255)<<8|e>>>24&255;class Ht{constructor(e,t){this.blockLen=Ft,this.outputLen=Ft,this.s0=0,this.s1=0,this.s2=0,this.s3=0,this.finished=!1,bt(e=Ct(e),16);const r=St(e);let n=r.getUint32(0,!1),i=r.getUint32(4,!1),s=r.getUint32(8,!1),a=r.getUint32(12,!1);const o=[];for(let e=0;e<128;e++)o.push({s0:Ot(n),s1:Ot(i),s2:Ot(s),s3:Ot(a)}),({s0:n,s1:i,s2:s,s3:a}={s3:(h=s)<<31|(f=a)>>>1,s2:(u=i)<<31|h>>>1,s1:(c=n)<<31|u>>>1,s0:c>>>1^225<<24&-(1&f)});var c,u,h,f;const l=(y=t||1024)>65536?8:y>1024?4:2;var y;if(![1,2,4,8].includes(l))throw Error("ghash: invalid window size, expected 2, 4 or 8");this.W=l;const g=128/l,p=this.windowSize=2**l,d=[];for(let e=0;e<g;e++)for(let t=0;t<p;t++){let r=0,n=0,i=0,s=0;for(let a=0;a<l;a++){if(!(t>>>l-a-1&1))continue;const{s0:c,s1:u,s2:h,s3:f}=o[l*e+a];r^=c,n^=u,i^=h,s^=f}d.push({s0:r,s1:n,s2:i,s3:s})}this.t=d}_updateBlock(e,t,r,n){e^=this.s0,t^=this.s1,r^=this.s2,n^=this.s3;const{W:i,t:s,windowSize:a}=this;let o=0,c=0,u=0,h=0;const f=(1<<i)-1;let l=0;for(const y of[e,t,r,n])for(let e=0;e<4;e++){const t=y>>>8*e&255;for(let e=8/i-1;e>=0;e--){const r=t>>>i*e&f,{s0:n,s1:y,s2:g,s3:p}=s[l*a+r];o^=n,c^=y,u^=g,h^=p,l+=1}}this.s0=o,this.s1=c,this.s2=u,this.s3=h}update(e){kt(this),bt(e=Ct(e));const t=Bt(e),r=Math.floor(e.length/Ft),n=e.length%Ft;for(let e=0;e<r;e++)this._updateBlock(t[4*e+0],t[4*e+1],t[4*e+2],t[4*e+3]);return n&&(Lt.set(e.subarray(r*Ft)),this._updateBlock(Nt[0],Nt[1],Nt[2],Nt[3]),It(Nt)),this}destroy(){const{t:e}=this;for(const t of e)t.s0=0,t.s1=0,t.s2=0,t.s3=0}digestInto(e){kt(this),Et(e,this),this.finished=!0;const{s0:t,s1:r,s2:n,s3:i}=this,s=Bt(e);return s[0]=t,s[1]=r,s[2]=n,s[3]=i,e}digest(){const e=new Uint8Array(Ft);return this.digestInto(e),this.destroy(),e}}class zt extends Ht{constructor(e,t){bt(e=Ct(e));const r=function(e){e.reverse();const t=1&e[15];let r=0;for(let t=0;t<e.length;t++){const n=e[t];e[t]=n>>>1|r,r=(1&n)<<7}return e[0]^=225&-t,e}(Mt(e));super(r,t),It(r)}update(e){e=Ct(e),kt(this);const t=Bt(e),r=e.length%Ft,n=Math.floor(e.length/Ft);for(let e=0;e<n;e++)this._updateBlock(Ot(t[4*e+3]),Ot(t[4*e+2]),Ot(t[4*e+1]),Ot(t[4*e+0]));return r&&(Lt.set(e.subarray(n*Ft)),this._updateBlock(Ot(Nt[3]),Ot(Nt[2]),Ot(Nt[1]),Ot(Nt[0])),It(Nt)),this}digestInto(e){kt(this),Et(e,this),this.finished=!0;const{s0:t,s1:r,s2:n,s3:i}=this,s=Bt(e);return s[0]=t,s[1]=r,s[2]=n,s[3]=i,e.reverse()}}function Gt(e){const t=(t,r)=>e(r,t.length).update(Ct(t)).digest(),r=e(new Uint8Array(16),0);return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=(t,r)=>e(t,r),t}const _t=Gt((e,t)=>new Ht(e,t));Gt((e,t)=>new zt(e,t));const jt=16,Vt=new Uint8Array(jt);function qt(e){return e<<1^283&-(e>>7)}function Yt(e,t){let r=0;for(;t>0;t>>=1)r^=e&-(1&t),e=qt(e);return r}const Zt=(()=>{const e=new Uint8Array(256);for(let t=0,r=1;t<256;t++,r^=qt(r))e[t]=r;const t=new Uint8Array(256);t[0]=99;for(let r=0;r<255;r++){let n=e[255-r];n|=n<<8,t[e[r]]=255&(n^n>>4^n>>5^n>>6^n>>7^99)}return It(e),t})(),Jt=Zt.map((e,t)=>Zt.indexOf(t)),Xt=e=>e<<8|e>>>24,Wt=e=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;function $t(e,t){if(256!==e.length)throw Error("Wrong sbox length");const r=new Uint32Array(256).map((r,n)=>t(e[n])),n=r.map(Xt),i=n.map(Xt),s=i.map(Xt),a=new Uint32Array(65536),o=new Uint32Array(65536),c=new Uint16Array(65536);for(let t=0;t<256;t++)for(let u=0;u<256;u++){const h=256*t+u;a[h]=r[t]^n[u],o[h]=i[t]^s[u],c[h]=e[t]<<8|e[u]}return{sbox:e,sbox2:c,T0:r,T1:n,T2:i,T3:s,T01:a,T23:o}}const er=$t(Zt,e=>Yt(e,3)<<24|e<<16|e<<8|Yt(e,2)),tr=$t(Jt,e=>Yt(e,11)<<24|Yt(e,13)<<16|Yt(e,9)<<8|Yt(e,14)),rr=(()=>{const e=new Uint8Array(16);for(let t=0,r=1;t<16;t++,r=qt(r))e[t]=r;return e})();function nr(e){bt(e);const t=e.length;if(![16,24,32].includes(t))throw Error("aes: invalid key size, should be 16, 24 or 32, got "+t);const{sbox2:r}=er,n=[];Tt(e)||n.push(e=Mt(e));const i=Bt(e),s=i.length,a=e=>ar(r,e,e,e,e),o=new Uint32Array(t+28);o.set(i);for(let e=s;e<o.length;e++){let t=o[e-1];e%s==0?t=a((c=t)<<24|c>>>8)^rr[e/s-1]:s>6&&e%s==4&&(t=a(t)),o[e]=o[e-s]^t}var c;return It(...n),o}function ir(e){const t=nr(e),r=t.slice(),n=t.length,{sbox2:i}=er,{T0:s,T1:a,T2:o,T3:c}=tr;for(let e=0;e<n;e+=4)for(let i=0;i<4;i++)r[e+i]=t[n-e-4+i];It(t);for(let e=4;e<n-4;e++){const t=r[e],n=ar(i,t,t,t,t);r[e]=s[255&n]^a[n>>>8&255]^o[n>>>16&255]^c[n>>>24]}return r}function sr(e,t,r,n,i,s){return e[r<<8&65280|n>>>8&255]^t[i>>>8&65280|s>>>24&255]}function ar(e,t,r,n,i){return e[255&t|65280&r]|e[n>>>16&255|i>>>16&65280]<<16}function or(e,t,r,n,i){const{sbox2:s,T01:a,T23:o}=er;let c=0;t^=e[c++],r^=e[c++],n^=e[c++],i^=e[c++];const u=e.length/4-2;for(let s=0;s<u;s++){const s=e[c++]^sr(a,o,t,r,n,i),u=e[c++]^sr(a,o,r,n,i,t),h=e[c++]^sr(a,o,n,i,t,r),f=e[c++]^sr(a,o,i,t,r,n);t=s,r=u,n=h,i=f}return{s0:e[c++]^ar(s,t,r,n,i),s1:e[c++]^ar(s,r,n,i,t),s2:e[c++]^ar(s,n,i,t,r),s3:e[c++]^ar(s,i,t,r,n)}}function cr(e,t,r,n,i){const{sbox2:s,T01:a,T23:o}=tr;let c=0;t^=e[c++],r^=e[c++],n^=e[c++],i^=e[c++];const u=e.length/4-2;for(let s=0;s<u;s++){const s=e[c++]^sr(a,o,t,i,n,r),u=e[c++]^sr(a,o,r,t,i,n),h=e[c++]^sr(a,o,n,r,t,i),f=e[c++]^sr(a,o,i,n,r,t);t=s,r=u,n=h,i=f}return{s0:e[c++]^ar(s,t,i,n,r),s1:e[c++]^ar(s,r,t,i,n),s2:e[c++]^ar(s,n,r,t,i),s3:e[c++]^ar(s,i,n,r,t)}}function ur(e,t,r,n){bt(t,jt),bt(r);const i=r.length;Ut(r,n=Qt(i,n));const s=t,a=Bt(s);let{s0:o,s1:c,s2:u,s3:h}=or(e,a[0],a[1],a[2],a[3]);const f=Bt(r),l=Bt(n);for(let t=0;t+4<=f.length;t+=4){l[t+0]=f[t+0]^o,l[t+1]=f[t+1]^c,l[t+2]=f[t+2]^u,l[t+3]=f[t+3]^h;let r=1;for(let e=s.length-1;e>=0;e--)r=r+(255&s[e])|0,s[e]=255&r,r>>>=8;({s0:o,s1:c,s2:u,s3:h}=or(e,a[0],a[1],a[2],a[3]))}const y=jt*Math.floor(f.length/4);if(y<i){const e=new Uint32Array([o,c,u,h]),t=vt(e);for(let e=y,s=0;e<i;e++,s++)n[e]=r[e]^t[s];It(e)}return n}function hr(e,t,r,n,i){bt(r,jt),bt(n),i=Qt(n.length,i);const s=r,a=Bt(s),o=St(s),c=Bt(n),u=Bt(i),h=t?0:12,f=n.length;let l=o.getUint32(h,t),{s0:y,s1:g,s2:p,s3:d}=or(e,a[0],a[1],a[2],a[3]);for(let r=0;r+4<=c.length;r+=4)u[r+0]=c[r+0]^y,u[r+1]=c[r+1]^g,u[r+2]=c[r+2]^p,u[r+3]=c[r+3]^d,l=l+1>>>0,o.setUint32(h,l,t),({s0:y,s1:g,s2:p,s3:d}=or(e,a[0],a[1],a[2],a[3]));const A=jt*Math.floor(c.length/4);if(A<f){const e=new Uint32Array([y,g,p,d]),t=vt(e);for(let e=A,r=0;e<f;e++,r++)i[e]=n[e]^t[r];It(e)}return i}const fr=xt({blockSize:16,nonceLength:16},function(e,t){function r(r,n){if(bt(r),void 0!==n&&(bt(n),!Tt(n)))throw Error("unaligned destination");const i=nr(e),s=Mt(t),a=[i,s];Tt(r)||a.push(r=Mt(r));const o=ur(i,s,r,n);return It(...a),o}return{encrypt:(e,t)=>r(e,t),decrypt:(e,t)=>r(e,t)}}),lr=xt({blockSize:16,nonceLength:16},function(e,t,r={}){const n=!r.disablePadding;return{encrypt(r,i){const s=nr(e),{b:a,o,out:c}=function(e,t,r){bt(e);let n=e.length;const i=n%jt;if(!t&&0!==i)throw Error("aec/(cbc-ecb): unpadded plaintext with disabled padding");Tt(e)||(e=Mt(e));const s=Bt(e);if(t){let e=jt-i;e||(e=jt),n+=e}return Ut(e,r=Qt(n,r)),{b:s,o:Bt(r),out:r}}(r,n,i);let u=t;const h=[s];Tt(u)||h.push(u=Mt(u));const f=Bt(u);let l=f[0],y=f[1],g=f[2],p=f[3],d=0;for(;d+4<=a.length;)l^=a[d+0],y^=a[d+1],g^=a[d+2],p^=a[d+3],({s0:l,s1:y,s2:g,s3:p}=or(s,l,y,g,p)),o[d++]=l,o[d++]=y,o[d++]=g,o[d++]=p;if(n){const e=function(e){const t=new Uint8Array(16),r=Bt(t);t.set(e);const n=jt-e.length;for(let e=jt-n;e<jt;e++)t[e]=n;return r}(r.subarray(4*d));l^=e[0],y^=e[1],g^=e[2],p^=e[3],({s0:l,s1:y,s2:g,s3:p}=or(s,l,y,g,p)),o[d++]=l,o[d++]=y,o[d++]=g,o[d++]=p}return It(...h),c},decrypt(r,i){!function(e){if(bt(e),e.length%jt!=0)throw Error("aes-(cbc/ecb).decrypt ciphertext should consist of blocks with size 16")}(r);const s=ir(e);let a=t;const o=[s];Tt(a)||o.push(a=Mt(a));const c=Bt(a);i=Qt(r.length,i),Tt(r)||o.push(r=Mt(r)),Ut(r,i);const u=Bt(r),h=Bt(i);let f=c[0],l=c[1],y=c[2],g=c[3];for(let e=0;e+4<=u.length;){const t=f,r=l,n=y,i=g;f=u[e+0],l=u[e+1],y=u[e+2],g=u[e+3];const{s0:a,s1:o,s2:c,s3:p}=cr(s,f,l,y,g);h[e++]=a^t,h[e++]=o^r,h[e++]=c^n,h[e++]=p^i}return It(...o),function(e,t){if(!t)return e;const r=e.length;if(!r)throw Error("aes/pcks5: empty ciphertext not allowed");const n=e[r-1];if(n<=0||n>16)throw Error("aes/pcks5: wrong padding");const i=e.subarray(0,-n);for(let t=0;t<n;t++)if(e[r-t-1]!==n)throw Error("aes/pcks5: wrong padding");return i}(i,n)}}}),yr=xt({blockSize:16,nonceLength:16},function(e,t){function r(r,n,i){bt(r);const s=r.length;if(Dt(r,i=Qt(s,i)))throw Error("overlapping src and dst not supported.");const a=nr(e);let o=t;const c=[a];Tt(o)||c.push(o=Mt(o)),Tt(r)||c.push(r=Mt(r));const u=Bt(r),h=Bt(i),f=n?h:u,l=Bt(o);let y=l[0],g=l[1],p=l[2],d=l[3];for(let e=0;e+4<=u.length;){const{s0:t,s1:r,s2:n,s3:i}=or(a,y,g,p,d);h[e+0]=u[e+0]^t,h[e+1]=u[e+1]^r,h[e+2]=u[e+2]^n,h[e+3]=u[e+3]^i,y=f[e++],g=f[e++],p=f[e++],d=f[e++]}const A=jt*Math.floor(u.length/4);if(A<s){({s0:y,s1:g,s2:p,s3:d}=or(a,y,g,p,d));const e=vt(new Uint32Array([y,g,p,d]));for(let t=A,n=0;t<s;t++,n++)i[t]=r[t]^e[n];It(e)}return It(...c),i}return{encrypt:(e,t)=>r(e,!0,t),decrypt:(e,t)=>r(e,!1,t)}}),gr=xt({blockSize:16,nonceLength:12,tagLength:16,varSizeNonce:!0},function(e,t,r){if(t.length<8)throw Error("aes/gcm: invalid nonce length");function n(e,t,n){const i=function(e,t,r,n,i){const s=i?i.length:0,a=e.create(r,n.length+s);i&&a.update(i);const o=function(e,t,r){const n=new Uint8Array(16),i=St(n);return Rt(i,0,BigInt(t),r),Rt(i,8,BigInt(e),r),n}(8*n.length,8*s,!1);a.update(n),a.update(o);const c=a.digest();return It(o),c}(_t,0,e,n,r);for(let e=0;e<t.length;e++)i[e]^=t[e];return i}function i(){const r=nr(e),n=Vt.slice(),i=Vt.slice();if(hr(r,!1,i,i,n),12===t.length)i.set(t);else{const e=Vt.slice();Rt(St(e),8,BigInt(8*t.length),!1);const r=_t.create(n).update(t).update(e);r.digestInto(i),r.destroy()}return{xk:r,authKey:n,counter:i,tagMask:hr(r,!1,i,Vt)}}return{encrypt(e){const{xk:t,authKey:r,counter:s,tagMask:a}=i(),o=new Uint8Array(e.length+16),c=[t,r,s,a];Tt(e)||c.push(e=Mt(e)),hr(t,!1,s,e,o.subarray(0,e.length));const u=n(r,a,o.subarray(0,o.length-16));return c.push(u),o.set(u,e.length),It(...c),o},decrypt(e){const{xk:t,authKey:r,counter:s,tagMask:a}=i(),o=[t,r,a,s];Tt(e)||o.push(e=Mt(e));const c=e.subarray(0,-16),u=e.subarray(-16),h=n(r,a,c);if(o.push(h),!Pt(h,u))throw Error("aes/gcm: invalid ghash tag");const f=hr(t,!1,s,c);return It(...o),f}}});function pr(e){return e instanceof Uint32Array||ArrayBuffer.isView(e)&&"Uint32Array"===e.constructor.name}function dr(e,t){if(bt(t,16),!pr(e))throw Error("_encryptBlock accepts result of expandKeyLE");const r=Bt(t);let{s0:n,s1:i,s2:s,s3:a}=or(e,r[0],r[1],r[2],r[3]);return r[0]=n,r[1]=i,r[2]=s,r[3]=a,t}function Ar(e,t){if(bt(t,16),!pr(e))throw Error("_decryptBlock accepts result of expandKeyLE");const r=Bt(t);let{s0:n,s1:i,s2:s,s3:a}=cr(e,r[0],r[1],r[2],r[3]);return r[0]=n,r[1]=i,r[2]=s,r[3]=a,t}const wr={encrypt(e,t){if(t.length>=2**32)throw Error("plaintext should be less than 4gb");const r=nr(e);if(16===t.length)dr(r,t);else{const e=Bt(t);let n=e[0],i=e[1];for(let t=0,s=1;t<6;t++)for(let t=2;t<e.length;t+=2,s++){const{s0:a,s1:o,s2:c,s3:u}=or(r,n,i,e[t],e[t+1]);n=a,i=o^Wt(s),e[t]=c,e[t+1]=u}e[0]=n,e[1]=i}r.fill(0)},decrypt(e,t){if(t.length-8>=2**32)throw Error("ciphertext should be less than 4gb");const r=ir(e),n=t.length/8-1;if(1===n)Ar(r,t);else{const e=Bt(t);let i=e[0],s=e[1];for(let t=0,a=6*n;t<6;t++)for(let t=2*n;t>=1;t-=2,a--){s^=Wt(a);const{s0:n,s1:o,s2:c,s3:u}=cr(r,i,s,e[t],e[t+1]);i=n,s=o,e[t]=c,e[t+1]=u}e[0]=i,e[1]=s}r.fill(0)}},mr=new Uint8Array(8).fill(166),br=xt({blockSize:8},e=>({encrypt(t){if(!t.length||t.length%8!=0)throw Error("invalid plaintext length");if(8===t.length)throw Error("8-byte keys not allowed in AESKW, use AESKWP instead");const r=function(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];bt(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}(mr,t);return wr.encrypt(e,r),r},decrypt(t){if(t.length%8!=0||t.length<24)throw Error("invalid ciphertext length");const r=Mt(t);if(wr.decrypt(e,r),!Pt(r.subarray(0,8),mr))throw Error("integrity check failed");return r.subarray(0,8).fill(0),r.subarray(8)}})),kr={expandKeyLE:nr,expandKeyDecLE:ir,encrypt:or,decrypt:cr,encryptBlock:dr,decryptBlock:Ar,ctrCounter:ur,ctr32:hr};async function Er(e){switch(e){case F.symmetric.aes128:case F.symmetric.aes192:case F.symmetric.aes256:throw Error("Not a legacy cipher");case F.symmetric.cast5:case F.symmetric.blowfish:case F.symmetric.twofish:case F.symmetric.tripledes:{const{legacyCiphers:t}=await Promise.resolve().then(function(){return Nl}),r=F.read(F.symmetric,e),n=t.get(r);if(!n)throw Error("Unsupported cipher algorithm");return n}default:throw Error("Unsupported cipher algorithm")}}function vr(e){switch(e){case F.symmetric.aes128:case F.symmetric.aes192:case F.symmetric.aes256:case F.symmetric.twofish:return 16;case F.symmetric.blowfish:case F.symmetric.cast5:case F.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function Br(e){switch(e){case F.symmetric.aes128:case F.symmetric.blowfish:case F.symmetric.cast5:return 16;case F.symmetric.aes192:case F.symmetric.tripledes:return 24;case F.symmetric.aes256:case F.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function Ir(e){return{keySize:Br(e),blockSize:vr(e)}}const Sr=O.getWebCrypto();async function Kr(e,t,r){const{keySize:n}=Ir(e);if(!O.isAES(e)||t.length!==n)throw Error("Unexpected algorithm or key size");try{const e=await Sr.importKey("raw",t,{name:"AES-KW"},!1,["wrapKey"]),n=await Sr.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),i=await Sr.wrapKey("raw",n,e,{name:"AES-KW"});return new Uint8Array(i)}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;O.printDebugError("Browser did not support operation: "+e.message)}return br(t).encrypt(r)}async function Cr(e,t,r){const{keySize:n}=Ir(e);if(!O.isAES(e)||t.length!==n)throw Error("Unexpected algorithm or key size");let i;try{i=await Sr.importKey("raw",t,{name:"AES-KW"},!1,["unwrapKey"])}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;return O.printDebugError("Browser did not support operation: "+e.message),br(t).decrypt(r)}try{const e=await Sr.unwrapKey("raw",r,i,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await Sr.exportKey("raw",e))}catch(e){if("OperationError"===e.name)throw Error("Key Data Integrity failed");throw e}}async function Dr(e,t,r,n,i){const s=O.getWebCrypto(),a=F.read(F.webHash,e);if(!a)throw Error("Hash algo not supported with HKDF");const o=await s.importKey("raw",t,"HKDF",!1,["deriveBits"]),c=await s.deriveBits({name:"HKDF",hash:a,salt:r,info:n},o,8*i);return new Uint8Array(c)}const Ur={x25519:O.encodeUTF8("OpenPGP X25519"),x448:O.encodeUTF8("OpenPGP X448")};async function Pr(e){switch(e){case F.publicKey.x25519:try{const e=O.getWebCrypto(),t=await e.generateKey("X25519",!0,["deriveKey","deriveBits"]).catch(e=>{if("OperationError"===e.name){const e=Error("Unexpected key generation issue");throw e.name="NotSupportedError",e}throw e}),r=await e.exportKey("jwk",t.privateKey),n=await e.exportKey("jwk",t.publicKey);if(r.x!==n.x){const e=Error("Unexpected mismatching public point");throw e.name="NotSupportedError",e}return{A:new Uint8Array(V(n.x)),k:V(r.d)}}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:t}=await Promise.resolve().then(function(){return Bl}),{secretKey:r,publicKey:n}=t.box.keyPair();return{A:n,k:r}}case F.publicKey.x448:{const e=await O.getNobleCurve(F.publicKey.x448),{secretKey:t,publicKey:r}=e.keygen();return{A:r,k:t}}default:throw Error("Unsupported ECDH algorithm")}}async function xr(e,t,r){switch(e){case F.publicKey.x25519:try{const{ephemeralPublicKey:n,sharedSecret:i}=await Mr(e,t),s=await Fr(e,n,t,r);return O.equalsUint8Array(i,s)}catch(e){return!1}case F.publicKey.x448:{const e=(await O.getNobleCurve(F.publicKey.x448)).getPublicKey(r);return O.equalsUint8Array(t,e)}default:return!1}}async function Qr(e,t,r){const{ephemeralPublicKey:n,sharedSecret:i}=await Mr(e,r),s=O.concatUint8Array([n,r,i]);switch(e){case F.publicKey.x25519:{const e=F.symmetric.aes128,{keySize:r}=Ir(e),i=await Dr(F.hash.sha256,s,new Uint8Array,Ur.x25519,r);return{ephemeralPublicKey:n,wrappedKey:await Kr(e,i,t)}}case F.publicKey.x448:{const e=F.symmetric.aes256,{keySize:r}=Ir(F.symmetric.aes256),i=await Dr(F.hash.sha512,s,new Uint8Array,Ur.x448,r);return{ephemeralPublicKey:n,wrappedKey:await Kr(e,i,t)}}default:throw Error("Unsupported ECDH algorithm")}}async function Rr(e,t,r,n,i){const s=await Fr(e,t,n,i),a=O.concatUint8Array([t,n,s]);switch(e){case F.publicKey.x25519:{const e=F.symmetric.aes128,{keySize:t}=Ir(e);return Cr(e,await Dr(F.hash.sha256,a,new Uint8Array,Ur.x25519,t),r)}case F.publicKey.x448:{const e=F.symmetric.aes256,{keySize:t}=Ir(F.symmetric.aes256);return Cr(e,await Dr(F.hash.sha512,a,new Uint8Array,Ur.x448,t),r)}default:throw Error("Unsupported ECDH algorithm")}}function Tr(e){switch(e){case F.publicKey.x25519:return 32;case F.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}}async function Mr(e,t){switch(e){case F.publicKey.x25519:try{const r=O.getWebCrypto(),n=await r.generateKey("X25519",!0,["deriveKey","deriveBits"]).catch(e=>{if("OperationError"===e.name){const e=Error("Unexpected key generation issue");throw e.name="NotSupportedError",e}throw e}),i=await r.exportKey("jwk",n.publicKey);if((await r.exportKey("jwk",n.privateKey)).x!==i.x){const e=Error("Unexpected mismatching public point");throw e.name="NotSupportedError",e}const s=Nr(e,t),a=await r.importKey("jwk",s,"X25519",!1,[]),o=await r.deriveBits({name:"X25519",public:a},n.privateKey,8*Tr(e));return{sharedSecret:new Uint8Array(o),ephemeralPublicKey:new Uint8Array(V(i.x))}}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:r}=await Promise.resolve().then(function(){return Bl}),{secretKey:n,publicKey:i}=r.box.keyPair(),s=r.scalarMult(n,t);return Lr(s),{ephemeralPublicKey:i,sharedSecret:s}}case F.publicKey.x448:{const e=await O.getNobleCurve(F.publicKey.x448),{secretKey:r,publicKey:n}=e.keygen(),i=e.getSharedSecret(r,t);return Lr(i),{ephemeralPublicKey:n,sharedSecret:i}}default:throw Error("Unsupported ECDH algorithm")}}async function Fr(e,t,r,n){switch(e){case F.publicKey.x25519:try{const i=O.getWebCrypto(),s=function(e,t,r){if(e===F.publicKey.x25519){const n=Nr(e,t);return n.d=q(r),n}throw Error("Unsupported ECDH algorithm")}(e,r,n),a=Nr(e,t),o=await i.importKey("jwk",s,"X25519",!1,["deriveKey","deriveBits"]),c=await i.importKey("jwk",a,"X25519",!1,[]),u=await i.deriveBits({name:"X25519",public:c},o,8*Tr(e));return new Uint8Array(u)}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:r}=await Promise.resolve().then(function(){return Bl}),i=r.scalarMult(n,t);return Lr(i),i}case F.publicKey.x448:{const e=(await O.getNobleCurve(F.publicKey.x448)).getSharedSecret(n,t);return Lr(e),e}default:throw Error("Unsupported ECDH algorithm")}}function Lr(e){let t=0;for(let r=0;r<e.length;r++)t|=e[r];if(0===t)throw Error("Unexpected low order point")}function Nr(e,t){if(e===F.publicKey.x25519)return{kty:"OKP",crv:"X25519",x:q(t),ext:!0};throw Error("Unsupported ECDH algorithm")}var Or=Object.freeze({__proto__:null,decrypt:Rr,encrypt:Qr,generate:Pr,generateEphemeralEncryptionMaterial:Mr,getPayloadSize:Tr,recomputeSharedSecret:Fr,validateParams:xr});const Hr=O.getWebCrypto(),zr=O.getNodeCrypto(),Gr={[F.curve.nistP256]:"P-256",[F.curve.nistP384]:"P-384",[F.curve.nistP521]:"P-521"},_r=zr?zr.getCurves():[],jr=zr?{[F.curve.secp256k1]:_r.includes("secp256k1")?"secp256k1":void 0,[F.curve.nistP256]:_r.includes("prime256v1")?"prime256v1":void 0,[F.curve.nistP384]:_r.includes("secp384r1")?"secp384r1":void 0,[F.curve.nistP521]:_r.includes("secp521r1")?"secp521r1":void 0,[F.curve.ed25519Legacy]:_r.includes("ED25519")?"ED25519":void 0,[F.curve.curve25519Legacy]:_r.includes("X25519")?"X25519":void 0,[F.curve.brainpoolP256r1]:_r.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[F.curve.brainpoolP384r1]:_r.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[F.curve.brainpoolP512r1]:_r.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},Vr={[F.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:F.publicKey.ecdsa,hash:F.hash.sha256,cipher:F.symmetric.aes128,node:jr[F.curve.nistP256],web:Gr[F.curve.nistP256],payloadSize:32,sharedSize:256,wireFormatLeadingByte:4},[F.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:F.publicKey.ecdsa,hash:F.hash.sha384,cipher:F.symmetric.aes192,node:jr[F.curve.nistP384],web:Gr[F.curve.nistP384],payloadSize:48,sharedSize:384,wireFormatLeadingByte:4},[F.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:F.publicKey.ecdsa,hash:F.hash.sha512,cipher:F.symmetric.aes256,node:jr[F.curve.nistP521],web:Gr[F.curve.nistP521],payloadSize:66,sharedSize:528,wireFormatLeadingByte:4},[F.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:F.publicKey.ecdsa,hash:F.hash.sha256,cipher:F.symmetric.aes128,node:jr[F.curve.secp256k1],payloadSize:32,wireFormatLeadingByte:4},[F.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:F.publicKey.eddsaLegacy,hash:F.hash.sha512,node:!1,payloadSize:32,wireFormatLeadingByte:64},[F.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:F.publicKey.ecdh,hash:F.hash.sha256,cipher:F.symmetric.aes128,node:!1,payloadSize:32,wireFormatLeadingByte:64},[F.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:F.publicKey.ecdsa,hash:F.hash.sha256,cipher:F.symmetric.aes128,node:jr[F.curve.brainpoolP256r1],payloadSize:32,wireFormatLeadingByte:4},[F.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:F.publicKey.ecdsa,hash:F.hash.sha384,cipher:F.symmetric.aes192,node:jr[F.curve.brainpoolP384r1],payloadSize:48,wireFormatLeadingByte:4},[F.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:F.publicKey.ecdsa,hash:F.hash.sha512,cipher:F.symmetric.aes256,node:jr[F.curve.brainpoolP512r1],payloadSize:64,wireFormatLeadingByte:4}};class qr{constructor(e){try{this.name=e instanceof We?e.getName():F.write(F.curve,e)}catch(e){throw new at("Unknown curve")}const t=Vr[this.name];this.keyType=t.keyType,this.oid=t.oid,this.hash=t.hash,this.cipher=t.cipher,this.node=t.node,this.web=t.web,this.payloadSize=t.payloadSize,this.sharedSize=t.sharedSize,this.wireFormatLeadingByte=t.wireFormatLeadingByte,this.web&&O.getWebCrypto()?this.type="web":this.node&&O.getNodeCrypto()?this.type="node":this.name===F.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===F.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(e,t){const r=await Hr.generateKey({name:"ECDSA",namedCurve:Gr[e]},!0,["sign","verify"]),n=await Hr.exportKey("jwk",r.privateKey);return{publicKey:$r(await Hr.exportKey("jwk",r.publicKey),t),privateKey:V(n.d)}}(this.name,this.wireFormatLeadingByte)}catch(e){return O.printDebugError("Browser did not support generating ec key "+e.message),Wr(this.name)}case"node":return async function(e){const t=zr.createECDH(jr[e]);return await t.generateKeys(),{publicKey:new Uint8Array(t.getPublicKey()),privateKey:new Uint8Array(t.getPrivateKey())}}(this.name);case"curve25519Legacy":{const{k:e,A:t}=await Pr(F.publicKey.x25519),r=e.slice().reverse();return r[0]=127&r[0]|64,r[31]&=248,{publicKey:O.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t]),privateKey:r}}case"ed25519Legacy":{const{seed:e,A:t}=await ht(F.publicKey.ed25519);return{publicKey:O.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t]),privateKey:e}}default:return Wr(this.name)}}}async function Yr(e){const t=new qr(e),{oid:r,hash:n,cipher:i}=t,s=await t.genKeyPair();return{oid:r,Q:s.publicKey,secret:O.leftPad(s.privateKey,t.payloadSize),hash:n,cipher:i}}function Zr(e){return Vr[e.getName()].hash}async function Jr(e,t,r,n){const i={[F.curve.nistP256]:!0,[F.curve.nistP384]:!0,[F.curve.nistP521]:!0,[F.curve.secp256k1]:!0,[F.curve.curve25519Legacy]:e===F.publicKey.ecdh,[F.curve.brainpoolP256r1]:!0,[F.curve.brainpoolP384r1]:!0,[F.curve.brainpoolP512r1]:!0},s=t.getName();if(!i[s])return!1;if(s===F.curve.curve25519Legacy){const e=n.slice().reverse();return!(r.length<1||64!==r[0])&&xr(F.publicKey.x25519,r.subarray(1),e)}const a=(await O.getNobleCurve(F.publicKey.ecdsa,s)).getPublicKey(n,!1);return!!O.equalsUint8Array(a,r)}function Xr(e,t){const{payloadSize:r,wireFormatLeadingByte:n,name:i}=e,s=i===F.curve.curve25519Legacy||i===F.curve.ed25519Legacy?r:2*r;if(t[0]!==n||t.length!==s+1)throw Error("Invalid point encoding")}async function Wr(e){const t=await O.getNobleCurve(F.publicKey.ecdsa,e),{secretKey:r}=t.keygen();return{publicKey:t.getPublicKey(r,!1),privateKey:r}}function $r(e,t){const r=V(e.x),n=V(e.y),i=new Uint8Array(r.length+n.length+1);return i[0]=t,i.set(r,1),i.set(n,r.length+1),i}function en(e,t,r){const n=e,i=r.slice(1,n+1),s=r.slice(n+1,2*n+1);return{kty:"EC",crv:t,x:q(i),y:q(s),ext:!0}}function tn(e,t,r,n){const i=en(e,t,r);return i.d=q(n),i}const rn=O.getWebCrypto(),nn=O.getNodeCrypto();async function sn(e,t,r,n,i,s){const a=new qr(e);if(Xr(a,n),r&&!O.isStream(r)){const s={publicKey:n,privateKey:i};switch(a.type){case"web":try{return await async function(e,t,r,n){const i=e.payloadSize,s=tn(e.payloadSize,Gr[e.name],n.publicKey,n.privateKey),a=await rn.importKey("jwk",s,{name:"ECDSA",namedCurve:Gr[e.name],hash:{name:F.read(F.webHash,e.hash)}},!1,["sign"]),o=new Uint8Array(await rn.sign({name:"ECDSA",namedCurve:Gr[e.name],hash:{name:F.read(F.webHash,t)}},a,r));return{r:o.slice(0,i),s:o.slice(i,i<<1)}}(a,t,r,s)}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;O.printDebugError("Browser did not support signing: "+e.message)}break;case"node":return async function(e,t,r,n){const i=O.nodeRequire("eckey-utils"),s=O.getNodeBuffer(),{privateKey:a}=i.generateDer({curveName:jr[e.name],privateKey:s.from(n)}),o=nn.createSign(F.read(F.hash,t));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),u=e.payloadSize;return{r:c.subarray(0,u),s:c.subarray(u,u<<1)}}(a,t,r,i)}}const o=(await O.getNobleCurve(F.publicKey.ecdsa,a.name)).sign(s,i,{lowS:!1});return{r:ge(o.r,"be",a.payloadSize),s:ge(o.s,"be",a.payloadSize)}}async function an(e,t,r,n,i,s){const a=new qr(e);Xr(a,i);const o=async()=>0===s[0]&&on(a,r,s.subarray(1),i);if(n&&!O.isStream(n))switch(a.type){case"web":try{const e=await async function(e,t,{r,s:n},i,s){const a=en(e.payloadSize,Gr[e.name],s),o=await rn.importKey("jwk",a,{name:"ECDSA",namedCurve:Gr[e.name],hash:{name:F.read(F.webHash,e.hash)}},!1,["verify"]),c=O.concatUint8Array([r,n]).buffer;return rn.verify({name:"ECDSA",namedCurve:Gr[e.name],hash:{name:F.read(F.webHash,t)}},o,c,i)}(a,t,r,n,i);return e||o()}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;O.printDebugError("Browser did not support verifying: "+e.message)}break;case"node":{const e=await async function(e,t,{r,s:n},i,s){const a=O.nodeRequire("eckey-utils"),o=O.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:jr[e.name],publicKey:o.from(s)}),u=nn.createVerify(F.read(F.hash,t));u.write(i),u.end();const h=O.concatUint8Array([r,n]);try{return u.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},h)}catch(e){return!1}}(a,t,r,n,i);return e||o()}}return await on(a,r,s,i)||o()}async function on(e,t,r,n){return(await O.getNobleCurve(F.publicKey.ecdsa,e.name)).verify(O.concatUint8Array([t.r,t.s]),r,n,{lowS:!1})}var cn=Object.freeze({__proto__:null,sign:sn,validateParams:async function(e,t,r){const n=new qr(e);if(n.keyType!==F.publicKey.ecdsa)return!1;switch(n.type){case"web":case"node":{const n=de(8),i=F.hash.sha256,s=await Me(i,n);try{const a=await sn(e,i,n,t,r,s);return await an(e,i,a,n,t,s)}catch(e){return!1}}default:return Jr(F.publicKey.ecdsa,e,t,r)}},verify:an});async function un(e,t,r,n,i,s){if(Xr(new qr(e),n),Fe(t)<Fe(F.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const{RS:a}=await ft(F.publicKey.ed25519,t,0,n.subarray(1),i,s);return{r:a.subarray(0,32),s:a.subarray(32)}}async function hn(e,t,{r,s:n},i,s,a){if(Xr(new qr(e),s),Fe(t)<Fe(F.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const o=O.concatUint8Array([r,n]);return lt(F.publicKey.ed25519,t,{RS:o},0,s.subarray(1),a)}async function fn(e,t,r){return e.getName()===F.curve.ed25519Legacy&&!(t.length<1||64!==t[0])&&yt(F.publicKey.ed25519,t.subarray(1),r)}var ln=Object.freeze({__proto__:null,sign:un,validateParams:fn,verify:hn});function yn(e){const t=e.length;if(t>0){const r=e[t-1];if(r>=1){const n=e.subarray(t-r),i=new Uint8Array(r).fill(r);if(O.equalsUint8Array(n,i))return e.subarray(0,t-r)}}throw Error("Invalid padding")}function gn(e,t,r,n){return O.concatUint8Array([t.write(),new Uint8Array([e]),r.write(),O.stringToUint8Array("Anonymous Sender "),n])}async function pn(e,t,r,n,i=!1,s=!1){let a;if(i){for(a=0;a<t.length&&0===t[a];a++);t=t.subarray(a)}if(s){for(a=t.length-1;a>=0&&0===t[a];a--);t=t.subarray(0,a+1)}return(await Me(e,O.concatUint8Array([new Uint8Array([0,0,0,1]),t,n]))).subarray(0,r)}async function dn(e,t,r,n,i){const s=function(e){const t=8-e.length%8,r=new Uint8Array(e.length+t).fill(t);return r.set(e),r}(r),a=new qr(e);Xr(a,n);const{publicKey:o,sharedKey:c}=await async function(e,t){switch(e.type){case"curve25519Legacy":{const{sharedSecret:r,ephemeralPublicKey:n}=await Mr(F.publicKey.x25519,t.subarray(1));return{publicKey:O.concatUint8Array([new Uint8Array([e.wireFormatLeadingByte]),n]),sharedKey:r}}case"web":if(e.web&&O.getWebCrypto())try{return await async function(e,t){const r=O.getWebCrypto(),n=en(e.payloadSize,e.web,t);let i=r.generateKey({name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]),s=r.importKey("jwk",n,{name:"ECDH",namedCurve:e.web},!1,[]);[i,s]=await Promise.all([i,s]);let a=r.deriveBits({name:"ECDH",namedCurve:e.web,public:s},i.privateKey,e.sharedSize),o=r.exportKey("jwk",i.publicKey);[a,o]=await Promise.all([a,o]);const c=new Uint8Array(a);return{publicKey:new Uint8Array($r(o,e.wireFormatLeadingByte)),sharedKey:c}}(e,t)}catch(r){return O.printDebugError(r),mn(e,t)}break;case"node":return async function(e,t){const r=O.getNodeCrypto().createECDH(e.node);r.generateKeys();const n=new Uint8Array(r.computeSecret(t));return{publicKey:new Uint8Array(r.getPublicKey()),sharedKey:n}}(e,t);default:return mn(e,t)}}(a,n),u=gn(F.publicKey.ecdh,e,t,i),{keySize:h}=Ir(t.cipher),f=await pn(t.hash,c,h,u);return{publicKey:o,wrappedKey:await Kr(t.cipher,f,s)}}async function An(e,t,r,n,i,s,a){const o=new qr(e);Xr(o,i),Xr(o,r);const{sharedKey:c}=await async function(e,t,r,n){if(n.length!==e.payloadSize){const t=new Uint8Array(e.payloadSize);t.set(n,e.payloadSize-n.length),n=t}switch(e.type){case"curve25519Legacy":{const e=n.slice().reverse();return{secretKey:e,sharedKey:await Fr(F.publicKey.x25519,t.subarray(1),r.subarray(1),e)}}case"web":if(e.web&&O.getWebCrypto())try{return await async function(e,t,r,n){const i=O.getWebCrypto(),s=tn(e.payloadSize,e.web,r,n);let a=i.importKey("jwk",s,{name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]);const o=en(e.payloadSize,e.web,t);let c=i.importKey("jwk",o,{name:"ECDH",namedCurve:e.web},!0,[]);[a,c]=await Promise.all([a,c]);let u=i.deriveBits({name:"ECDH",namedCurve:e.web,public:c},a,e.sharedSize),h=i.exportKey("jwk",a);[u,h]=await Promise.all([u,h]);const f=new Uint8Array(u);return{secretKey:V(h.d),sharedKey:f}}(e,t,r,n)}catch(r){return O.printDebugError(r),wn(e,t,n)}break;case"node":return async function(e,t,r){const n=O.getNodeCrypto().createECDH(e.node);n.setPrivateKey(r);const i=new Uint8Array(n.computeSecret(t));return{secretKey:new Uint8Array(n.getPrivateKey()),sharedKey:i}}(e,t,n);default:return wn(e,t,n)}}(o,r,i,s),u=gn(F.publicKey.ecdh,e,t,a),{keySize:h}=Ir(t.cipher);let f;for(let r=0;r<3;r++)try{const e=await pn(t.hash,c,h,u,1===r,2===r);return yn(await Cr(t.cipher,e,n))}catch(e){f=e}throw f}async function wn(e,t,r){return{secretKey:r,sharedKey:(await O.getNobleCurve(F.publicKey.ecdh,e.name)).getSharedSecret(r,t).subarray(1)}}async function mn(e,t){const r=await O.getNobleCurve(F.publicKey.ecdh,e.name),{publicKey:n,privateKey:i}=await e.genKeyPair();return{publicKey:n,sharedKey:r.getSharedSecret(i,t).subarray(1)}}var bn=Object.freeze({__proto__:null,CurveWithOID:qr,ecdh:Object.freeze({__proto__:null,decrypt:An,encrypt:dn,validateParams:async function(e,t,r){return Jr(F.publicKey.ecdh,e,t,r)}}),ecdhX:Or,ecdsa:cn,eddsa:wt,eddsaLegacy:ln,generate:Yr,getPreferredHashAlgo:Zr});const kn=BigInt(0),En=BigInt(1);class vn{constructor(e){e&&(this.data=e)}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.data=e.subarray(1,1+t),1+this.data.length}throw Error("Invalid symmetric key")}write(){return O.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class Bn{constructor(e){if(e){const{hash:t,cipher:r}=e;this.hash=t,this.cipher=r}else this.hash=null,this.cipher=null}read(e){if(e.length<4||3!==e[0]||1!==e[1])throw new at("Cannot read KDFParams");return this.hash=e[2],this.cipher=e[3],4}write(){return new Uint8Array([3,1,this.hash,this.cipher])}}class In{static fromObject({wrappedKey:e,algorithm:t}){const r=new In;return r.wrappedKey=e,r.algorithm=t,r}read(e){let t=0,r=e[t++];this.algorithm=r%2?e[t++]:null,r-=r%2,this.wrappedKey=O.readExactSubarray(e,t,t+r),t+=r}write(){return O.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}function Sn(e,t,r){let n=0;switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:{const e=O.readMPI(t.subarray(n));n+=e.length+2;const r=O.readMPI(t.subarray(n));n+=r.length+2;const i=O.readMPI(t.subarray(n));n+=i.length+2;const s=O.readMPI(t.subarray(n));return n+=s.length+2,{read:n,privateParams:{d:e,p:r,q:i,u:s}}}case F.publicKey.dsa:case F.publicKey.elgamal:{const e=O.readMPI(t.subarray(n));return n+=e.length+2,{read:n,privateParams:{x:e}}}case F.publicKey.ecdsa:case F.publicKey.ecdh:{const i=Un(e,r.oid);let s=O.readMPI(t.subarray(n));return n+=s.length+2,s=O.leftPad(s,i),{read:n,privateParams:{d:s}}}case F.publicKey.eddsaLegacy:{const i=Un(e,r.oid);if(r.oid.getName()!==F.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let s=O.readMPI(t.subarray(n));return n+=s.length+2,s=O.leftPad(s,i),{read:n,privateParams:{seed:s}}}case F.publicKey.ed25519:case F.publicKey.ed448:{const r=Un(e),i=O.readExactSubarray(t,n,n+r);return n+=i.length,{read:n,privateParams:{seed:i}}}case F.publicKey.x25519:case F.publicKey.x448:{const r=Un(e),i=O.readExactSubarray(t,n,n+r);return n+=i.length,{read:n,privateParams:{k:i}}}default:throw new at("Unknown public key encryption algorithm.")}}function Kn(e,t){const r=new Set([F.publicKey.ed25519,F.publicKey.x25519,F.publicKey.ed448,F.publicKey.x448]),n=Object.keys(t).map(n=>{const i=t[n];return O.isUint8Array(i)?r.has(e)?i:O.uint8ArrayToMPI(i):i.write()});return O.concatUint8Array(n)}function Cn(e){const{keySize:t}=Ir(e);return de(t)}function Dn(e){try{e.getName()}catch(e){throw new at("Unknown curve OID")}}function Un(e,t){switch(e){case F.publicKey.ecdsa:case F.publicKey.ecdh:case F.publicKey.eddsaLegacy:return new qr(t).payloadSize;case F.publicKey.ed25519:case F.publicKey.ed448:return gt(e);case F.publicKey.x25519:case F.publicKey.x448:return Tr(e);default:throw Error("Unknown elliptic algo")}}const Pn=O.getWebCrypto(),xn=O.getNodeCrypto(),Qn=xn?xn.getCiphers():[],Rn={idea:Qn.includes("idea-cfb")?"idea-cfb":void 0,tripledes:Qn.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:Qn.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:Qn.includes("bf-cfb")?"bf-cfb":void 0,aes128:Qn.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:Qn.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:Qn.includes("aes-256-cfb")?"aes-256-cfb":void 0};async function Tn(e){const{blockSize:t}=Ir(e),r=await de(t),n=new Uint8Array([r[r.length-2],r[r.length-1]]);return O.concat([r,n])}async function Mn(e,t,r,n,i){const s=F.read(F.symmetric,e);if(O.getNodeCrypto()&&Rn[s])return function(e,t,r,n){const i=F.read(F.symmetric,e),s=new xn.createCipheriv(Rn[i],t,n);return B(r,e=>new Uint8Array(s.update(e)))}(e,t,r,n);if(O.isAES(e))return async function(e,t,r,n){if(Pn&&await Ln.isSupported(e)){const i=new Ln(e,t,n);return O.isStream(r)?B(r,e=>i.encryptChunk(e),()=>i.finish()):i.encrypt(r)}if(O.isStream(r)){const i=new Nn(!0,e,t,n);return B(r,e=>i.processChunk(e),()=>i.finish())}return yr(t,n).encrypt(r)}(e,t,r,n);const a=new(await Er(e))(t),o=a.blockSize,c=n.slice();let u=new Uint8Array;const h=e=>{e&&(u=O.concatUint8Array([u,e]));const t=new Uint8Array(u.length);let r,n=0;for(;e?u.length>=o:u.length;){const e=a.encrypt(c);for(r=0;r<o;r++)c[r]=u[r]^e[r],t[n++]=c[r];u=u.subarray(o)}return t.subarray(0,n)};return B(r,h,h)}async function Fn(e,t,r,n){const i=F.read(F.symmetric,e);if(xn&&Rn[i])return function(e,t,r,n){const i=F.read(F.symmetric,e),s=new xn.createDecipheriv(Rn[i],t,n);return B(r,e=>new Uint8Array(s.update(e)))}(e,t,r,n);if(O.isAES(e))return async function(e,t,r,n){if(O.isStream(r)){const i=new Nn(!1,e,t,n);return B(r,e=>i.processChunk(e),()=>i.finish())}return yr(t,n).decrypt(r)}(e,t,r,n);const s=new(await Er(e))(t),a=s.blockSize;let o=n,c=new Uint8Array;const u=e=>{e&&(c=O.concatUint8Array([c,e]));const t=new Uint8Array(c.length);let r,n=0;for(;e?c.length>=a:c.length;){const e=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)t[n++]=o[r]^e[r];c=c.subarray(a)}return t.subarray(0,n)};return B(r,u,u)}class Ln{constructor(e,t,r){const{blockSize:n}=Ir(e);this.key=t,this.prevBlock=r,this.nextBlock=new Uint8Array(n),this.i=0,this.blockSize=n,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(e){const{keySize:t}=Ir(e);return Pn.importKey("raw",new Uint8Array(t),"aes-cbc",!1,["encrypt"]).then(()=>!0,()=>!1)}async _runCBC(e,t){const r="AES-CBC";this.keyRef=this.keyRef||await Pn.importKey("raw",this.key,r,!1,["encrypt"]);const n=await Pn.encrypt({name:r,iv:t||this.zeroBlock},this.keyRef,e);return new Uint8Array(n).subarray(0,e.length)}async encryptChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,n=O.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),i=O.concatUint8Array([this.prevBlock,n.subarray(0,n.length-this.blockSize)]),s=await this._runCBC(i);return On(s,n),this.prevBlock=s.slice(-this.blockSize),r>0&&this.nextBlock.set(e.subarray(-r)),this.i=r,s}let n;if(this.i+=r.length,this.i===this.nextBlock.length){const t=this.nextBlock;n=await this._runCBC(this.prevBlock),On(n,t),this.prevBlock=n.slice(),this.i=0;const i=e.subarray(r.length);this.nextBlock.set(i,this.i),this.i+=i.length}else n=new Uint8Array;return n}async finish(){let e;if(0===this.i)e=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const t=this.nextBlock,r=await this._runCBC(this.prevBlock);On(r,t),e=r.subarray(0,t.length)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(e){const t=(await this._runCBC(O.concatUint8Array([new Uint8Array(this.blockSize),e]),this.iv)).subarray(0,e.length);return On(t,e),this.clearSensitiveData(),t}}class Nn{constructor(e,t,r,n){this.forEncryption=e;const{blockSize:i}=Ir(t);this.key=kr.expandKeyLE(r),n.byteOffset%4!=0&&(n=n.slice()),this.prevBlock=Hn(n),this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i}_runCFB(e){const t=Hn(e),r=new Uint8Array(e.length),n=Hn(r);for(let e=0;e+4<=n.length;e+=4){const{s0:r,s1:i,s2:s,s3:a}=kr.encrypt(this.key,this.prevBlock[0],this.prevBlock[1],this.prevBlock[2],this.prevBlock[3]);n[e+0]=t[e+0]^r,n[e+1]=t[e+1]^i,n[e+2]=t[e+2]^s,n[e+3]=t[e+3]^a,this.prevBlock=(this.forEncryption?n:t).slice(e,e+4)}return r}async processChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,n=O.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),i=this._runCFB(n);return r>0&&this.nextBlock.set(e.subarray(-r)),this.i=r,i}let n;if(this.i+=r.length,this.i===this.nextBlock.length){n=this._runCFB(this.nextBlock),this.i=0;const t=e.subarray(r.length);this.nextBlock.set(t,this.i),this.i+=t.length}else n=new Uint8Array;return n}async finish(){let e;return e=0===this.i?new Uint8Array:this._runCFB(this.nextBlock).subarray(0,this.i),this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.key.fill(0)}}function On(e,t){const r=Math.min(e.length,t.length);for(let n=0;n<r;n++)e[n]=e[n]^t[n]}const Hn=e=>new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4)),zn=O.getWebCrypto(),Gn=O.getNodeCrypto(),_n=16;function jn(e,t){const r=e.length-_n;for(let n=0;n<_n;n++)e[n+r]^=t[n];return e}const Vn=new Uint8Array(_n);const qn=O.getWebCrypto(),Yn=O.getNodeCrypto(),Zn=O.getNodeBuffer(),Jn=new Uint8Array(16),Xn=new Uint8Array(16);Xn[15]=1;const Wn=new Uint8Array(16);async function $n(e){const t=await async function(e){const t=await async function(e){if(O.getNodeCrypto())return async function(t){const r=new Gn.createCipheriv("aes-"+8*e.length+"-cbc",e,Vn).update(t);return new Uint8Array(r)};if(O.getWebCrypto())try{return e=await zn.importKey("raw",e,{name:"AES-CBC",length:8*e.length},!1,["encrypt"]),async function(t){const r=await zn.encrypt({name:"AES-CBC",iv:Vn,length:128},e,t);return new Uint8Array(r).subarray(0,r.byteLength-_n)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;O.printDebugError("Browser did not support operation: "+t.message)}return async function(t){return lr(e,Vn,{disablePadding:!0}).encrypt(t)}}(e),r=O.double(await t(Vn)),n=O.double(r);return async function(e){return(await t(function(e,t,r){if(e.length&&e.length%_n==0)return jn(e,t);const n=new Uint8Array(e.length+(_n-e.length%_n));return n.set(e),n[e.length]=128,jn(n,r)}(e,r,n))).subarray(-16)}}(e);return function(e,r){return t(O.concatUint8Array([e,r]))}}async function ei(e){if(O.getNodeCrypto())return async function(t,r){const n=new Yn.createCipheriv("aes-"+8*e.length+"-ctr",e,r),i=Zn.concat([n.update(t),n.final()]);return new Uint8Array(i)};if(O.getWebCrypto())try{const t=await qn.importKey("raw",e,{name:"AES-CTR",length:8*e.length},!1,["encrypt"]);return async function(e,r){const n=await qn.encrypt({name:"AES-CTR",counter:r,length:128},t,e);return new Uint8Array(n)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;O.printDebugError("Browser did not support operation: "+t.message)}return async function(t,r){return fr(e,r).encrypt(t)}}async function ti(e,t){if(e!==F.symmetric.aes128&&e!==F.symmetric.aes192&&e!==F.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,n]=await Promise.all([$n(t),ei(t)]);return{encrypt:async function(e,t,i){const[s,a]=await Promise.all([r(Jn,t),r(Xn,i)]),o=await n(e,s),c=await r(Wn,o);for(let e=0;e<16;e++)c[e]^=a[e]^s[e];return O.concatUint8Array([o,c])},decrypt:async function(e,t,i){if(e.length<16)throw Error("Invalid EAX ciphertext");const s=e.subarray(0,-16),a=e.subarray(-16),[o,c,u]=await Promise.all([r(Jn,t),r(Xn,i),r(Wn,s)]),h=u;for(let e=0;e<16;e++)h[e]^=c[e]^o[e];if(!O.equalsUint8Array(a,h))throw Error("Authentication tag mismatch");return await n(s,o)}}}Wn[15]=2,ti.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[8+e]^=t[e];return r},ti.blockLength=16,ti.ivLength=16,ti.tagLength=16;const ri=16;function ni(e){let t=0;for(let r=1;!(e&r);r<<=1)t++;return t}function ii(e,t){for(let r=0;r<e.length;r++)e[r]^=t[r];return e}function si(e,t){return ii(e.slice(),t)}const ai=new Uint8Array(ri),oi=new Uint8Array([1]);async function ci(e,t){const{keySize:r}=Ir(e);if(!O.isAES(e)||t.length!==r)throw Error("Unexpected algorithm or key size");let n=0;const i=e=>lr(t,ai,{disablePadding:!0}).encrypt(e),s=e=>lr(t,ai,{disablePadding:!0}).decrypt(e);let a;function o(e,t,r,s){const o=t.length/ri|0;!function(e,t){const r=O.nbits(Math.max(e.length,t.length)/ri|0)-1;for(let e=n+1;e<=r;e++)a[e]=O.double(a[e-1]);n=r}(t,s);const c=O.concatUint8Array([ai.subarray(0,15-r.length),oi,r]),u=63&c[15];c[15]&=192;const h=i(c),f=O.concatUint8Array([h,si(h.subarray(0,8),h.subarray(1,9))]),l=O.shiftRight(f.subarray(0+(u>>3),17+(u>>3)),8-(7&u)).subarray(1),y=new Uint8Array(ri),g=new Uint8Array(t.length+16);let p,d=0;for(p=0;p<o;p++)ii(l,a[ni(p+1)]),g.set(ii(e(si(l,t)),l),d),ii(y,e===i?t:g.subarray(d)),t=t.subarray(ri),d+=ri;if(t.length){ii(l,a.x);const r=i(l);g.set(si(t,r),d);const n=new Uint8Array(ri);n.set(e===i?t:g.subarray(d,-16),0),n[t.length]=128,ii(y,n),d+=t.length}const A=ii(i(ii(ii(y,l),a.$)),function(e){if(!e.length)return ai;const t=e.length/ri|0,r=new Uint8Array(ri),n=new Uint8Array(ri);for(let s=0;s<t;s++)ii(r,a[ni(s+1)]),ii(n,i(si(r,e))),e=e.subarray(ri);if(e.length){ii(r,a.x);const t=new Uint8Array(ri);t.set(e,0),t[e.length]=128,ii(t,r),ii(n,i(t))}return n}(s));return g.set(A,d),g}return function(){const e=i(ai),t=O.double(e);a=[],a[0]=O.double(t),a.x=e,a.$=t}(),{encrypt:async function(e,t,r){return o(i,e,t,r)},decrypt:async function(e,t,r){if(e.length<16)throw Error("Invalid OCB ciphertext");const n=e.subarray(-16);e=e.subarray(0,-16);const i=o(s,e,t,r);if(O.equalsUint8Array(n,i.subarray(-16)))return i.subarray(0,-16);throw Error("Authentication tag mismatch")}}}ci.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[7+e]^=t[e];return r},ci.blockLength=ri,ci.ivLength=15,ci.tagLength=16;const ui=O.getWebCrypto(),hi=O.getNodeCrypto(),fi=O.getNodeBuffer(),li="AES-GCM";async function yi(e,t){if(e!==F.symmetric.aes128&&e!==F.symmetric.aes192&&e!==F.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(O.getNodeCrypto())return{encrypt:async function(e,r,n=new Uint8Array){const i=new hi.createCipheriv("aes-"+8*t.length+"-gcm",t,r);i.setAAD(n);const s=fi.concat([i.update(e),i.final(),i.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(e,r,n=new Uint8Array){const i=new hi.createDecipheriv("aes-"+8*t.length+"-gcm",t,r);i.setAAD(n),i.setAuthTag(e.slice(e.length-16,e.length));const s=fi.concat([i.update(e.slice(0,e.length-16)),i.final()]);return new Uint8Array(s)}};if(O.getWebCrypto())try{const e=await ui.importKey("raw",t,{name:li},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(n,i,s=new Uint8Array){if(r&&!n.length)return gr(t,i,s).encrypt(n);const a=await ui.encrypt({name:li,iv:i,additionalData:s,tagLength:128},e,n);return new Uint8Array(a)},decrypt:async function(n,i,s=new Uint8Array){if(r&&16===n.length)return gr(t,i,s).decrypt(n);try{const t=await ui.decrypt({name:li,iv:i,additionalData:s,tagLength:128},e,n);return new Uint8Array(t)}catch(e){if("OperationError"===e.name)throw Error("Authentication tag mismatch")}}}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;O.printDebugError("Browser did not support operation: "+e.message)}return{encrypt:async function(e,r,n){return gr(t,r,n).encrypt(e)},decrypt:async function(e,r,n){return gr(t,r,n).decrypt(e)}}}function gi(e,t=!1){switch(e){case F.aead.eax:return ti;case F.aead.ocb:return ci;case F.aead.gcm:return yi;case F.aead.experimentalGCM:if(!t)throw Error("Unexpected non-standard `experimentalGCM` AEAD algorithm provided in `config.preferredAEADAlgorithm`: use `gcm` instead");return yi;default:throw Error("Unsupported AEAD mode")}}yi.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[4+e]^=t[e];return r},yi.blockLength=16,yi.ivLength=12,yi.tagLength=16;class pi extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,pi),this.name="Argon2OutOfMemoryError"}}let di,Ai;class wi{constructor(e=L){const{passes:t,parallelism:r,memoryExponent:n}=e.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=t,this.p=r,this.encodedM=n}generateSalt(){this.salt=de(16)}read(e){let t=0;return this.salt=e.subarray(t,t+16),t+=16,this.t=e[t++],this.p=e[t++],this.encodedM=e[t++],t}write(){const e=[new Uint8Array([F.write(F.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return O.concatUint8Array(e)}async produceKey(e,t){const r=2<<this.encodedM-1;try{di=di||(await Promise.resolve().then(function(){return py})).default,Ai=Ai||di();const n=(await Ai)({version:19,type:2,password:O.encodeUTF8(e),salt:this.salt,tagLength:t,memorySize:r,parallelism:this.p,passes:this.t});return r>1048576&&(Ai=di(),Ai.catch(()=>{})),n}catch(e){throw e.message&&(e.message.includes("Unable to grow instance memory")||e.message.includes("failed to grow memory")||e.message.includes("WebAssembly.Memory.grow")||e.message.includes("Out of memory"))?new pi("Could not allocate required memory for Argon2"):e}}}class mi{constructor(e,t=L){this.algorithm=F.hash.sha256,this.type=F.read(F.s2k,e),this.c=t.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=de(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(e){let t=0;switch(this.algorithm=e[t++],this.type){case"simple":break;case"salted":this.salt=e.subarray(t,t+8),t+=8;break;case"iterated":this.salt=e.subarray(t,t+8),t+=8,this.c=e[t++];break;case"gnu":if("GNU"!==O.uint8ArrayToString(e.subarray(t,t+3)))throw new at("Unknown s2k type.");if(t+=3,1001!==1e3+e[t++])throw new at("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new at("Unknown s2k type.")}return t}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...O.stringToUint8Array("GNU"),1]);const e=[new Uint8Array([F.write(F.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":e.push(this.salt);break;case"iterated":e.push(this.salt),e.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return O.concatUint8Array(e)}async produceKey(e,t){e=O.encodeUTF8(e);const r=[];let n=0,i=0;for(;n<t;){let t;switch(this.type){case"simple":t=O.concatUint8Array([new Uint8Array(i),e]);break;case"salted":t=O.concatUint8Array([new Uint8Array(i),this.salt,e]);break;case"iterated":{const r=O.concatUint8Array([this.salt,e]);let n=r.length;const s=Math.max(this.getCount(),n);t=new Uint8Array(i+s),t.set(r,i);for(let e=i+n;e<s;e+=n,n*=2)t.copyWithin(e,i,e);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await Me(this.algorithm,t);r.push(s),n+=s.length,i++}return O.concatUint8Array(r).subarray(0,t)}}const bi=new Set([F.s2k.argon2,F.s2k.iterated]);function ki(e,t=L){switch(e){case F.s2k.argon2:return new wi(t);case F.s2k.iterated:case F.s2k.gnu:case F.s2k.salted:case F.s2k.simple:return new mi(e,t);default:throw new at("Unsupported S2K type")}}function Ei(e){const{s2kType:t}=e;if(!bi.has(t))throw Error("The provided `config.s2kType` value is not allowed");return ki(t,e)}var vi=Uint8Array,Bi=Uint16Array,Ii=Int32Array,Si=new vi([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),Ki=new vi([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),Ci=new vi([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),Di=function(e,t){for(var r=new Bi(31),n=0;n<31;++n)r[n]=t+=1<<e[n-1];var i=new Ii(r[30]);for(n=1;n<30;++n)for(var s=r[n];s<r[n+1];++s)i[s]=s-r[n]<<5|n;return{b:r,r:i}},Ui=Di(Si,2),Pi=Ui.b,xi=Ui.r;Pi[28]=258,xi[258]=28;for(var Qi=Di(Ki,0),Ri=Qi.b,Ti=Qi.r,Mi=new Bi(32768),Fi=0;Fi<32768;++Fi){var Li=(43690&Fi)>>1|(21845&Fi)<<1;Li=(61680&(Li=(52428&Li)>>2|(13107&Li)<<2))>>4|(3855&Li)<<4,Mi[Fi]=((65280&Li)>>8|(255&Li)<<8)>>1}var Ni=function(e,t,r){for(var n=e.length,i=0,s=new Bi(t);i<n;++i)e[i]&&++s[e[i]-1];var a,o=new Bi(t);for(i=1;i<t;++i)o[i]=o[i-1]+s[i-1]<<1;if(r){a=new Bi(1<<t);var c=15-t;for(i=0;i<n;++i)if(e[i])for(var u=i<<4|e[i],h=t-e[i],f=o[e[i]-1]++<<h,l=f|(1<<h)-1;f<=l;++f)a[Mi[f]>>c]=u}else for(a=new Bi(n),i=0;i<n;++i)e[i]&&(a[i]=Mi[o[e[i]-1]++]>>15-e[i]);return a},Oi=new vi(288);for(Fi=0;Fi<144;++Fi)Oi[Fi]=8;for(Fi=144;Fi<256;++Fi)Oi[Fi]=9;for(Fi=256;Fi<280;++Fi)Oi[Fi]=7;for(Fi=280;Fi<288;++Fi)Oi[Fi]=8;var Hi=new vi(32);for(Fi=0;Fi<32;++Fi)Hi[Fi]=5;var zi=Ni(Oi,9,0),Gi=Ni(Oi,9,1),_i=Ni(Hi,5,0),ji=Ni(Hi,5,1),Vi=function(e){for(var t=e[0],r=1;r<e.length;++r)e[r]>t&&(t=e[r]);return t},qi=function(e,t,r){var n=t/8|0;return(e[n]|e[n+1]<<8)>>(7&t)&r},Yi=function(e,t){var r=t/8|0;return(e[r]|e[r+1]<<8|e[r+2]<<16)>>(7&t)},Zi=function(e){return(e+7)/8|0},Ji=function(e,t,r){return(null==t||t<0)&&(t=0),(null==r||r>e.length)&&(r=e.length),new vi(e.subarray(t,r))},Xi=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],Wi=function(e,t,r){var n=Error(t||Xi[e]);if(n.code=e,Error.captureStackTrace&&Error.captureStackTrace(n,Wi),!r)throw n;return n},$i=function(e,t,r){r<<=7&t;var n=t/8|0;e[n]|=r,e[n+1]|=r>>8},es=function(e,t,r){r<<=7&t;var n=t/8|0;e[n]|=r,e[n+1]|=r>>8,e[n+2]|=r>>16},ts=function(e,t){for(var r=[],n=0;n<e.length;++n)e[n]&&r.push({s:n,f:e[n]});var i=r.length,s=r.slice();if(!i)return{t:cs,l:0};if(1==i){var a=new vi(r[0].s+1);return a[r[0].s]=1,{t:a,l:1}}r.sort(function(e,t){return e.f-t.f}),r.push({s:-1,f:25001});var o=r[0],c=r[1],u=0,h=1,f=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};h!=i-1;)o=r[r[u].f<r[f].f?u++:f++],c=r[u!=h&&r[u].f<r[f].f?u++:f++],r[h++]={s:-1,f:o.f+c.f,l:o,r:c};var l=s[0].s;for(n=1;n<i;++n)s[n].s>l&&(l=s[n].s);var y=new Bi(l+1),g=rs(r[h-1],y,0);if(g>t){n=0;var p=0,d=g-t,A=1<<d;for(s.sort(function(e,t){return y[t.s]-y[e.s]||e.f-t.f});n<i;++n){var w=s[n].s;if(!(y[w]>t))break;p+=A-(1<<g-y[w]),y[w]=t}for(p>>=d;p>0;){var m=s[n].s;y[m]<t?p-=1<<t-y[m]++-1:++n}for(;n>=0&&p;--n){var b=s[n].s;y[b]==t&&(--y[b],++p)}g=t}return{t:new vi(y),l:g}},rs=function(e,t,r){return-1==e.s?Math.max(rs(e.l,t,r+1),rs(e.r,t,r+1)):t[e.s]=r},ns=function(e){for(var t=e.length;t&&!e[--t];);for(var r=new Bi(++t),n=0,i=e[0],s=1,a=function(e){r[n++]=e},o=1;o<=t;++o)if(e[o]==i&&o!=t)++s;else{if(!i&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(i),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(i);s=1,i=e[o]}return{c:r.subarray(0,n),n:t}},is=function(e,t){for(var r=0,n=0;n<t.length;++n)r+=e[n]*t[n];return r},ss=function(e,t,r){var n=r.length,i=Zi(t+2);e[i]=255&n,e[i+1]=n>>8,e[i+2]=255^e[i],e[i+3]=255^e[i+1];for(var s=0;s<n;++s)e[i+s+4]=r[s];return 8*(i+4+n)},as=function(e,t,r,n,i,s,a,o,c,u,h){$i(t,h++,r),++i[256];for(var f=ts(i,15),l=f.t,y=f.l,g=ts(s,15),p=g.t,d=g.l,A=ns(l),w=A.c,m=A.n,b=ns(p),k=b.c,E=b.n,v=new Bi(19),B=0;B<w.length;++B)++v[31&w[B]];for(B=0;B<k.length;++B)++v[31&k[B]];for(var I=ts(v,7),S=I.t,K=I.l,C=19;C>4&&!S[Ci[C-1]];--C);var D,U,P,x,Q=u+5<<3,R=is(i,Oi)+is(s,Hi)+a,T=is(i,l)+is(s,p)+a+14+3*C+is(v,S)+2*v[16]+3*v[17]+7*v[18];if(c>=0&&Q<=R&&Q<=T)return ss(t,h,e.subarray(c,c+u));if($i(t,h,1+(T<R)),h+=2,T<R){D=Ni(l,y,0),U=l,P=Ni(p,d,0),x=p;var M=Ni(S,K,0);for($i(t,h,m-257),$i(t,h+5,E-1),$i(t,h+10,C-4),h+=14,B=0;B<C;++B)$i(t,h+3*B,S[Ci[B]]);h+=3*C;for(var F=[w,k],L=0;L<2;++L){var N=F[L];for(B=0;B<N.length;++B){var O=31&N[B];$i(t,h,M[O]),h+=S[O],O>15&&($i(t,h,N[B]>>5&127),h+=N[B]>>12)}}}else D=zi,U=Oi,P=_i,x=Hi;for(B=0;B<o;++B){var H=n[B];if(H>255){es(t,h,D[257+(O=H>>18&31)]),h+=U[O+257],O>7&&($i(t,h,H>>23&31),h+=Si[O]);var z=31&H;es(t,h,P[z]),h+=x[z],z>3&&(es(t,h,H>>5&8191),h+=Ki[z])}else es(t,h,D[H]),h+=U[H]}return es(t,h,D[256]),h+U[256]},os=new Ii([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),cs=new vi(0),us=function(){var e=1,t=0;return{p:function(r){for(var n=e,i=t,s=0|r.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)i+=n+=r[a];n=(65535&n)+15*(n>>16),i=(65535&i)+15*(i>>16)}e=n,t=i},d:function(){return(255&(e%=65521))<<24|(65280&e)<<8|(255&(t%=65521))<<8|t>>8}}},hs=function(e,t,r,n,i){if(!i&&(i={l:1},t.dictionary)){var s=t.dictionary.subarray(-32768),a=new vi(s.length+e.length);a.set(s),a.set(e,s.length),e=a,i.w=s.length}return function(e,t,r,n,i,s){var a=s.z||e.length,o=new vi(n+a+5*(1+Math.ceil(a/7e3))+i),c=o.subarray(n,o.length-i),u=s.l,h=7&(s.r||0);if(t){h&&(c[0]=s.r>>3);for(var f=os[t-1],l=f>>13,y=8191&f,g=(1<<r)-1,p=s.p||new Bi(32768),d=s.h||new Bi(g+1),A=Math.ceil(r/3),w=2*A,m=function(t){return(e[t]^e[t+1]<<A^e[t+2]<<w)&g},b=new Ii(25e3),k=new Bi(288),E=new Bi(32),v=0,B=0,I=s.i||0,S=0,K=s.w||0,C=0;I+2<a;++I){var D=m(I),U=32767&I,P=d[D];if(p[U]=P,d[D]=U,K<=I){var x=a-I;if((v>7e3||S>24576)&&(x>423||!u)){h=as(e,c,0,b,k,E,B,S,C,I-C,h),S=v=B=0,C=I;for(var Q=0;Q<286;++Q)k[Q]=0;for(Q=0;Q<30;++Q)E[Q]=0}var R=2,T=0,M=y,F=U-P&32767;if(x>2&&D==m(I-F))for(var L=Math.min(l,x)-1,N=Math.min(32767,I),O=Math.min(258,x);F<=N&&--M&&U!=P;){if(e[I+R]==e[I+R-F]){for(var H=0;H<O&&e[I+H]==e[I+H-F];++H);if(H>R){if(R=H,T=F,H>L)break;var z=Math.min(F,H-2),G=0;for(Q=0;Q<z;++Q){var _=I-F+Q&32767,j=_-p[_]&32767;j>G&&(G=j,P=_)}}}F+=(U=P)-(P=p[U])&32767}if(T){b[S++]=268435456|xi[R]<<18|Ti[T];var V=31&xi[R],q=31&Ti[T];B+=Si[V]+Ki[q],++k[257+V],++E[q],K=I+R,++v}else b[S++]=e[I],++k[e[I]]}}for(I=Math.max(I,K);I<a;++I)b[S++]=e[I],++k[e[I]];h=as(e,c,u,b,k,E,B,S,C,I-C,h),u||(s.r=7&h|c[h/8|0]<<3,h-=7,s.h=d,s.p=p,s.i=I,s.w=K)}else{for(I=s.w||0;I<a+u;I+=65535){var Y=I+65535;Y>=a&&(c[h/8|0]=u,Y=a),h=ss(c,h+1,e.subarray(I,Y))}s.i=a}return Ji(o,0,n+Zi(h)+i)}(e,null==t.level?6:t.level,null==t.mem?i.l?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(e.length)))):20:12+t.mem,r,n,i)},fs=function(e,t,r){for(;r;++t)e[t]=r,r>>>=8},ls=function(){function e(e,t){if("function"==typeof e&&(t=e,e={}),this.ondata=t,this.o=e||{},this.s={l:0,i:32768,w:32768,z:32768},this.b=new vi(98304),this.o.dictionary){var r=this.o.dictionary.subarray(-32768);this.b.set(r,32768-r.length),this.s.i=32768-r.length}}return e.prototype.p=function(e,t){this.ondata(hs(e,this.o,0,0,this.s),t)},e.prototype.push=function(e,t){this.ondata||Wi(5),this.s.l&&Wi(4);var r=e.length+this.s.z;if(r>this.b.length){if(r>2*this.b.length-32768){var n=new vi(-32768&r);n.set(this.b.subarray(0,this.s.z)),this.b=n}var i=this.b.length-this.s.z;this.b.set(e.subarray(0,i),this.s.z),this.s.z=this.b.length,this.p(this.b,!1),this.b.set(this.b.subarray(-32768)),this.b.set(e.subarray(i),32768),this.s.z=e.length-i+32768,this.s.i=32766,this.s.w=32768}else this.b.set(e,this.s.z),this.s.z+=e.length;this.s.l=1&t,(this.s.z>this.s.w+8191||t)&&(this.p(this.b,t||!1),this.s.w=this.s.i,this.s.i-=2)},e.prototype.flush=function(){this.ondata||Wi(5),this.s.l&&Wi(4),this.p(this.b,!1),this.s.w=this.s.i,this.s.i-=2},e}(),ys=function(){function e(e,t){"function"==typeof e&&(t=e,e={}),this.ondata=t;var r=e&&e.dictionary&&e.dictionary.subarray(-32768);this.s={i:0,b:r?r.length:0},this.o=new vi(32768),this.p=new vi(0),r&&this.o.set(r)}return e.prototype.e=function(e){if(this.ondata||Wi(5),this.d&&Wi(4),this.p.length){if(e.length){var t=new vi(this.p.length+e.length);t.set(this.p),t.set(e,this.p.length),this.p=t}}else this.p=e},e.prototype.c=function(e){this.s.i=+(this.d=e||!1);var t=this.s.b,r=function(e,t,r){var n=e.length;if(!n||t.f&&!t.l)return r||new vi(0);var i=!r,s=i||2!=t.i,a=t.i;i&&(r=new vi(3*n));var o=function(e){var t=r.length;if(e>t){var n=new vi(Math.max(2*t,e));n.set(r),r=n}},c=t.f||0,u=t.p||0,h=t.b||0,f=t.l,l=t.d,y=t.m,g=t.n,p=8*n;do{if(!f){c=qi(e,u,1);var d=qi(e,u+1,3);if(u+=3,!d){var A=e[(C=Zi(u)+4)-4]|e[C-3]<<8,w=C+A;if(w>n){a&&Wi(0);break}s&&o(h+A),r.set(e.subarray(C,w),h),t.b=h+=A,t.p=u=8*w,t.f=c;continue}if(1==d)f=Gi,l=ji,y=9,g=5;else if(2==d){var m=qi(e,u,31)+257,b=qi(e,u+10,15)+4,k=m+qi(e,u+5,31)+1;u+=14;for(var E=new vi(k),v=new vi(19),B=0;B<b;++B)v[Ci[B]]=qi(e,u+3*B,7);u+=3*b;var I=Vi(v),S=(1<<I)-1,K=Ni(v,I,1);for(B=0;B<k;){var C,D=K[qi(e,u,S)];if(u+=15&D,(C=D>>4)<16)E[B++]=C;else{var U=0,P=0;for(16==C?(P=3+qi(e,u,3),u+=2,U=E[B-1]):17==C?(P=3+qi(e,u,7),u+=3):18==C&&(P=11+qi(e,u,127),u+=7);P--;)E[B++]=U}}var x=E.subarray(0,m),Q=E.subarray(m);y=Vi(x),g=Vi(Q),f=Ni(x,y,1),l=Ni(Q,g,1)}else Wi(1);if(u>p){a&&Wi(0);break}}s&&o(h+131072);for(var R=(1<<y)-1,T=(1<<g)-1,M=u;;M=u){var F=(U=f[Yi(e,u)&R])>>4;if((u+=15&U)>p){a&&Wi(0);break}if(U||Wi(2),F<256)r[h++]=F;else{if(256==F){M=u,f=null;break}var L=F-254;if(F>264){var N=Si[B=F-257];L=qi(e,u,(1<<N)-1)+Pi[B],u+=N}var O=l[Yi(e,u)&T],H=O>>4;if(O||Wi(3),u+=15&O,Q=Ri[H],H>3&&(N=Ki[H],Q+=Yi(e,u)&(1<<N)-1,u+=N),u>p){a&&Wi(0);break}s&&o(h+131072);var z=h+L;if(h<Q){var G=0-Q,_=Math.min(Q,z);for(G+h<0&&Wi(3);h<_;++h)r[h]=(void 0)[G+h]}for(;h<z;++h)r[h]=r[h-Q]}}t.l=f,t.p=M,t.b=h,t.f=c,f&&(c=1,t.m=y,t.d=l,t.n=g)}while(!c);return h!=r.length&&i?Ji(r,0,h):r.subarray(0,h)}(this.p,this.s,this.o);this.ondata(Ji(r,t,this.s.b),this.d),this.o=Ji(r,this.s.b-32768),this.s.b=this.o.length,this.p=Ji(this.p,this.s.p/8|0),this.s.p&=7},e.prototype.push=function(e,t){this.e(e),this.c(t)},e}(),gs=function(){function e(e,t){this.c=us(),this.v=1,ls.call(this,e,t)}return e.prototype.push=function(e,t){this.c.p(e),ls.prototype.push.call(this,e,t)},e.prototype.p=function(e,t){var r=hs(e,this.o,this.v&&(this.o.dictionary?6:2),t&&4,this.s);this.v&&(function(e,t){var r=t.level,n=0==r?0:r<6?1:9==r?3:2;if(e[0]=120,e[1]=n<<6|(t.dictionary&&32),e[1]|=31-(e[0]<<8|e[1])%31,t.dictionary){var i=us();i.p(t.dictionary),fs(e,2,i.d())}}(r,this.o),this.v=0),t&&fs(r,r.length-4,this.c.d()),this.ondata(r,t)},e.prototype.flush=function(){ls.prototype.flush.call(this)},e}(),ps=function(){function e(e,t){ys.call(this,e,t),this.v=e&&e.dictionary?2:1}return e.prototype.push=function(e,t){if(ys.prototype.e.call(this,e),this.v){if(this.p.length<6&&!t)return;this.p=this.p.subarray((r=this.p,n=this.v-1,(8!=(15&r[0])||r[0]>>4>7||(r[0]<<8|r[1])%31)&&Wi(6,"invalid zlib data"),(r[1]>>5&1)==+!n&&Wi(6,"invalid zlib data: "+(32&r[1]?"need":"unexpected")+" dictionary"),2+(r[1]>>3&4))),this.v=0}var r,n;t&&(this.p.length<4&&Wi(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),ys.prototype.c.call(this,t)},e}(),ds="undefined"!=typeof TextDecoder&&new TextDecoder;try{ds.decode(cs,{stream:!0})}catch(n){}class As{static get tag(){return F.packet.literalData}constructor(e=new Date){this.format=F.literal.utf8,this.date=O.normalizeDate(e),this.text=null,this.data=null,this.filename=""}setText(e,t=F.literal.utf8){this.format=t,this.text=e,this.data=null}getText(e=!1){return(null===this.text||O.isStream(this.text))&&(this.text=O.decodeUTF8(O.nativeEOL(this.getBytes(e)))),this.text}setBytes(e,t){this.format=t,this.data=e,this.text=null}getBytes(e=!1){return null===this.data&&(this.data=O.canonicalizeEOL(O.encodeUTF8(this.text))),e?C(this.data):this.data}setFilename(e){this.filename=e}getFilename(){return this.filename}async read(e){await S(e,async e=>{const t=await e.readByte(),r=await e.readByte();this.filename=O.decodeUTF8(await e.readBytes(r)),this.date=O.readDate(await e.readBytes(4));let n=e.remainder();h(n)&&(n=await P(n)),this.setBytes(n,t)})}writeHeader(){const e=O.encodeUTF8(this.filename),t=new Uint8Array([e.length]),r=new Uint8Array([this.format]),n=O.writeDate(this.date);return O.concatUint8Array([r,t,e,n])}write(){const e=this.writeHeader(),t=this.getBytes();return O.concat([e,t])}}class ws{constructor(){this.bytes=""}read(e){return this.bytes=O.uint8ArrayToString(e.subarray(0,8)),this.bytes.length}write(){return O.stringToUint8Array(this.bytes)}toHex(){return O.uint8ArrayToHex(O.stringToUint8Array(this.bytes))}equals(e,t=!1){return t&&(e.isWildcard()||this.isWildcard())||this.bytes===e.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(e){return e.toHex()}static fromID(e){const t=new ws;return t.read(O.hexToUint8Array(e)),t}static wildcard(){const e=new ws;return e.read(new Uint8Array(8)),e}}const ms=Symbol("verified"),bs="salt@notations.openpgpjs.org",ks=new Set([F.signatureSubpacket.issuerKeyID,F.signatureSubpacket.issuerFingerprint,F.signatureSubpacket.embeddedSignature]);class Es{static get tag(){return F.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.unknownSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new ws,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[ms]=null}read(e,t=L){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new at("Support for v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4!==this.version&&5!==this.version&&6!==this.version)throw new at(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=e[r++],this.publicKeyAlgorithm=e[r++],this.hashAlgorithm=e[r++],r+=this.readSubPackets(e.subarray(r,e.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=e.subarray(0,r),r+=this.readSubPackets(e.subarray(r,e.length),!1),this.signedHashValue=e.subarray(r,r+2),r+=2,6===this.version){const t=e[r++];this.salt=e.subarray(r,r+t),r+=t}const n=e.subarray(r,e.length),{read:i,signatureParams:s}=function(e,t){let r=0;switch(e){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.rsaSign:{const e=O.readMPI(t.subarray(r));return r+=e.length+2,{read:r,signatureParams:{s:e}}}case F.publicKey.dsa:case F.publicKey.ecdsa:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const n=O.readMPI(t.subarray(r));return r+=n.length+2,{read:r,signatureParams:{r:e,s:n}}}case F.publicKey.eddsaLegacy:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const n=O.readMPI(t.subarray(r));return r+=n.length+2,{read:r,signatureParams:{r:e,s:n}}}case F.publicKey.ed25519:case F.publicKey.ed448:{const n=2*gt(e),i=O.readExactSubarray(t,r,r+n);return r+=i.length,{read:r,signatureParams:{RS:i}}}default:throw new at("Unknown signature algorithm.")}}(this.publicKeyAlgorithm,n);if(i<n.length)throw Error("Error reading MPIs");this.params=s}writeParams(){return this.params instanceof Promise?Q(async()=>Kn(this.publicKeyAlgorithm,await this.params)):Kn(this.publicKeyAlgorithm,this.params)}write(){const e=[];return e.push(this.signatureData),e.push(this.writeUnhashedSubPackets()),e.push(this.signedHashValue),6===this.version&&(e.push(new Uint8Array([this.salt.length])),e.push(this.salt)),e.push(this.writeParams()),O.concat(e)}async sign(e,t,r=new Date,n=!1,i){this.version=e.version,this.created=O.normalizeDate(r),this.issuerKeyVersion=e.version,this.issuerFingerprint=e.getFingerprintBytes(),this.issuerKeyID=e.getKeyID();const s=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(6===this.version){const e=Bs(this.hashAlgorithm);if(null===this.salt)this.salt=de(e);else if(e!==this.salt.length)throw Error("Provided salt does not have the required length")}else if(i.nonDeterministicSignaturesViaNotation){if(0!==this.rawNotations.filter(({name:e})=>e===bs).length)throw Error("Unexpected existing salt notation");{const e=de(Bs(this.hashAlgorithm));this.rawNotations.push({name:bs,value:e,humanReadable:!1,critical:!1})}}s.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=O.concat(s);const a=this.toHash(this.signatureType,t,n),o=await this.hash(this.signatureType,t,a,n);this.signedHashValue=U(K(o),0,2);const c=async()=>async function(e,t,r,n,i,s){if(!r||!n)throw Error("Missing key parameters");switch(e){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.rsaSign:{const{n:e,e:a}=r,{d:o,p:c,q:u,u:h}=n;return{s:await je(t,i,e,a,o,c,u,h,s)}}case F.publicKey.dsa:{const{g:e,p:t,q:i}=r,{x:a}=n;return async function(e,t,r,n,i,s){const a=BigInt(0);let o,c,u,h;n=se(n),i=se(i),r=se(r),s=se(s),r=ae(r,n),s=ae(s,i);const f=ae(se(t.subarray(0,ye(i))),i);for(;;){if(o=Ae(En,i),c=ae(oe(r,o,n),i),c===a)continue;const e=ae(s*c,i);if(h=ae(f+e,i),u=ae(ue(o,i)*h,i),u!==a)break}return{r:ge(c,"be",ye(n)),s:ge(u,"be",ye(n))}}(0,s,e,t,i,a)}case F.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case F.publicKey.ecdsa:{const{oid:e,Q:a}=r,{d:o}=n;return sn(e,t,i,a,o,s)}case F.publicKey.eddsaLegacy:{const{oid:e,Q:i}=r,{seed:a}=n;return un(e,t,0,i,a,s)}case F.publicKey.ed25519:case F.publicKey.ed448:{const{A:i}=r,{seed:a}=n;return ft(e,t,0,i,a,s)}default:throw Error("Unknown signature algorithm.")}}(this.publicKeyAlgorithm,this.hashAlgorithm,e.publicParams,e.privateParams,a,await P(o));O.isStream(o)?this.params=c():(this.params=await c(),this[ms]=!0)}writeHashedSubPackets(){const e=F.signatureSubpacket,t=[];let r;if(null===this.created)throw Error("Missing signature creation time");t.push(vs(e.signatureCreationTime,!0,O.writeDate(this.created))),null!==this.signatureExpirationTime&&t.push(vs(e.signatureExpirationTime,!0,O.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&t.push(vs(e.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),t.push(vs(e.trustSignature,!0,r))),null!==this.regularExpression&&t.push(vs(e.regularExpression,!0,this.regularExpression)),null!==this.revocable&&t.push(vs(e.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&t.push(vs(e.keyExpirationTime,!0,O.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredSymmetricAlgorithms)),t.push(vs(e.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=O.concat([r,this.revocationKeyFingerprint]),t.push(vs(e.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&t.push(vs(e.issuerKeyID,!1,this.issuerKeyID.write())),this.rawNotations.forEach(({name:n,value:i,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=O.encodeUTF8(n);r.push(O.writeNumber(o.length,2)),r.push(O.writeNumber(i.length,2)),r.push(o),r.push(i),r=O.concat(r),t.push(vs(e.notationData,a,r))}),null!==this.preferredHashAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredHashAlgorithms)),t.push(vs(e.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredCompressionAlgorithms)),t.push(vs(e.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.keyServerPreferences)),t.push(vs(e.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&t.push(vs(e.preferredKeyServer,!1,O.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&t.push(vs(e.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&t.push(vs(e.policyURI,!1,O.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.keyFlags)),t.push(vs(e.keyFlags,!0,r))),null!==this.signersUserID&&t.push(vs(e.signersUserID,!1,O.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=O.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),t.push(vs(e.reasonForRevocation,!0,r))),null!==this.features&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.features)),t.push(vs(e.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(O.stringToUint8Array(this.signatureTargetHash)),r=O.concat(r),t.push(vs(e.signatureTarget,!0,r))),null!==this.embeddedSignature&&t.push(vs(e.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=O.concat(r),t.push(vs(e.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredAEADAlgorithms)),t.push(vs(e.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),t.push(vs(e.preferredCipherSuites,!1,r)));const n=O.concat(t),i=O.writeNumber(n.length,6===this.version?4:2);return O.concat([i,n])}writeUnhashedSubPackets(){const e=this.unhashedSubpackets.map(({type:e,critical:t,body:r})=>vs(e,t,r)),t=O.concat(e),r=O.writeNumber(t.length,6===this.version?4:2);return O.concat([r,t])}readSubPacket(e,t=!0){let r=0;const n=!!(128&e[r]),i=127&e[r];if(r++,t||(this.unhashedSubpackets.push({type:i,critical:n,body:e.subarray(r,e.length)}),ks.has(i)))switch(i){case F.signatureSubpacket.signatureCreationTime:this.created=O.readDate(e.subarray(r,e.length));break;case F.signatureSubpacket.signatureExpirationTime:{const t=O.readNumber(e.subarray(r,e.length));this.signatureNeverExpires=0===t,this.signatureExpirationTime=t;break}case F.signatureSubpacket.exportableCertification:this.exportable=1===e[r++];break;case F.signatureSubpacket.trustSignature:this.trustLevel=e[r++],this.trustAmount=e[r++];break;case F.signatureSubpacket.regularExpression:this.regularExpression=e[r];break;case F.signatureSubpacket.revocable:this.revocable=1===e[r++];break;case F.signatureSubpacket.keyExpirationTime:{const t=O.readNumber(e.subarray(r,e.length));this.keyExpirationTime=t,this.keyNeverExpires=0===t;break}case F.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.revocationKey:this.revocationKeyClass=e[r++],this.revocationKeyAlgorithm=e[r++],this.revocationKeyFingerprint=e.subarray(r,r+20);break;case F.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(e.subarray(r,e.length));else if(t)throw Error("Unexpected Issuer Key ID subpacket");break;case F.signatureSubpacket.notationData:{const t=!!(128&e[r]);r+=4;const i=O.readNumber(e.subarray(r,r+2));r+=2;const s=O.readNumber(e.subarray(r,r+2));r+=2;const a=O.decodeUTF8(e.subarray(r,r+i)),o=e.subarray(r+i,r+i+s);this.rawNotations.push({name:a,humanReadable:t,value:o,critical:n}),t&&(this.notations[a]=O.decodeUTF8(o));break}case F.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=O.decodeUTF8(e.subarray(r,e.length));break;case F.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==e[r++];break;case F.signatureSubpacket.policyURI:this.policyURI=O.decodeUTF8(e.subarray(r,e.length));break;case F.signatureSubpacket.keyFlags:this.keyFlags=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.signersUserID:this.signersUserID=O.decodeUTF8(e.subarray(r,e.length));break;case F.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=e[r++],this.reasonForRevocationString=O.decodeUTF8(e.subarray(r,e.length));break;case F.signatureSubpacket.features:this.features=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=e[r++],this.signatureTargetHashAlgorithm=e[r++];const t=Fe(this.signatureTargetHashAlgorithm);this.signatureTargetHash=O.uint8ArrayToString(e.subarray(r,r+t));break}case F.signatureSubpacket.embeddedSignature:this.embeddedSignature=new Es,this.embeddedSignature.read(e.subarray(r,e.length));break;case F.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=e[r++],this.issuerFingerprint=e.subarray(r,e.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case F.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let t=r;t<e.length;t+=2)this.preferredCipherSuites.push([e[t],e[t+1]]);break;default:this.unknownSubpackets.push({type:i,critical:n,body:e.subarray(r,e.length)})}}readSubPackets(e,t=!0,r){const n=6===this.version?4:2,i=O.readNumber(e.subarray(0,n));let s=n;for(;s<2+i;){const n=$e(e.subarray(s,e.length));s+=n.offset,this.readSubPacket(e.subarray(s,s+n.len),t,r),s+=n.len}return s}toSign(e,t){const r=F.signature;switch(e){case r.binary:return null!==t.text?O.encodeUTF8(t.getText(!0)):t.getBytes(!0);case r.text:{const e=t.getBytes(!0);return O.canonicalizeEOL(e)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let e,n;if(t.userID)n=180,e=t.userID;else{if(!t.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");n=209,e=t.userAttribute}const i=e.write();return O.concat([this.toSign(r.key,t),new Uint8Array([n]),O.writeNumber(i.length,4),i])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return O.concat([this.toSign(r.key,t),this.toSign(r.key,{key:t.bind})]);case r.key:if(void 0===t.key)throw Error("Key packet is required for this signature.");return t.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,t);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(e,t){let r=0;return B(K(this.signatureData),e=>{r+=e.length},()=>{const n=[];return 5!==this.version||this.signatureType!==F.signature.binary&&this.signatureType!==F.signature.text||(t?n.push(new Uint8Array(6)):n.push(e.writeHeader())),n.push(new Uint8Array([this.version,255])),5===this.version&&n.push(new Uint8Array(4)),n.push(O.writeNumber(r,4)),O.concat(n)})}toHash(e,t,r=!1){const n=this.toSign(e,t);return O.concat([this.salt||new Uint8Array,n,this.signatureData,this.calculateTrailer(t,r)])}async hash(e,t,r,n=!1){if(6===this.version&&this.salt.length!==Bs(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(e,t,n)),Me(this.hashAlgorithm,r)}async verify(e,t,r,n=new Date,i=!1,s=L){if(!this.issuerKeyID.equals(e.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=t===F.signature.binary||t===F.signature.text;if(!this[ms]||a){let n,s;if(this.hashed?s=await this.hashed:(n=this.toHash(t,r,i),s=await this.hash(t,r,n)),s=await P(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");if(this.params=await this.params,this[ms]=await async function(e,t,r,n,i,s){switch(e){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.rsaSign:{const{n:e,e:a}=n;return async function(e,t,r,n,i,s){if(t&&!O.isStream(t))if(O.getWebCrypto())try{return await async function(e,t,r,n,i){const s=Ye(n,i),a=await ze.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:e}},!1,["verify"]);return ze.verify("RSASSA-PKCS1-v1_5",a,r,t)}(F.read(F.webHash,e),t,r,n,i)}catch(e){O.printDebugError(e)}else if(O.getNodeCrypto())return async function(e,t,r,n,i){const s={key:Ye(n,i),format:"jwk",type:"pkcs1"},a=Ge.createVerify(F.read(F.hash,e));a.write(t),a.end();try{return a.verify(s,r)}catch(e){return!1}}(e,t,r,n,i);return async function(e,t,r,n,i){if(r=se(r),t=se(t),n=se(n),t>=r)throw Error("Signature size cannot exceed modulus size");const s=ge(oe(t,n,r),"be",ye(r)),a=He(e,i,ye(r));return O.equalsUint8Array(s,a)}(e,r,n,i,s)}(t,i,O.leftPad(r.s,e.length),e,a,s)}case F.publicKey.dsa:{const{g:e,p:t,q:i,y:a}=n,{r:o,s:c}=r;return async function(e,t,r,n,i,s,a,o){if(t=se(t),r=se(r),s=se(s),a=se(a),i=se(i),o=se(o),t<=kn||t>=a||r<=kn||r>=a)return O.printDebug("invalid DSA Signature"),!1;const c=ae(se(n.subarray(0,ye(a))),a),u=ue(r,a);if(u===kn)return O.printDebug("invalid DSA Signature"),!1;i=ae(i,s),o=ae(o,s);const h=ae(c*u,a),f=ae(t*u,a);return ae(ae(oe(i,h,s)*oe(o,f,s),s),a)===t}(0,o,c,s,e,t,i,a)}case F.publicKey.ecdsa:{const{oid:e,Q:a}=n,o=new qr(e).payloadSize;return an(e,t,{r:O.leftPad(r.r,o),s:O.leftPad(r.s,o)},i,a,s)}case F.publicKey.eddsaLegacy:{const{oid:e,Q:i}=n,a=new qr(e).payloadSize;return hn(e,t,{r:O.leftPad(r.r,a),s:O.leftPad(r.s,a)},0,i,s)}case F.publicKey.ed25519:case F.publicKey.ed448:{const{A:i}=n;return lt(e,t,r,0,i,s)}default:throw Error("Unknown signature algorithm.")}}(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,e.publicParams,n,s),!this[ms])throw Error("Signature verification failed")}const o=O.normalizeDate(n);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+F.read(F.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[F.signature.binary,F.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+F.read(F.hash,this.hashAlgorithm).toUpperCase());if(this.unknownSubpackets.forEach(({type:e,critical:t})=>{if(t)throw Error("Unknown critical signature subpacket type "+e)}),this.rawNotations.forEach(({name:e,critical:t})=>{if(t&&s.knownNotations.indexOf(e)<0)throw Error("Unknown critical notation: "+e)}),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(e=new Date){const t=O.normalizeDate(e);return null!==t&&!(this.created<=t&&t<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function vs(e,t,r){const n=[];return n.push(et(r.length+1)),n.push(new Uint8Array([(t?128:0)|e])),n.push(r),O.concat(n)}function Bs(e){switch(e){case F.hash.sha256:return 16;case F.hash.sha384:return 24;case F.hash.sha512:return 32;case F.hash.sha224:case F.hash.sha3_256:return 16;case F.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class Is{static get tag(){return F.packet.onePassSignature}static fromSignaturePacket(e,t){const r=new Is;return r.version=6===e.version?6:3,r.signatureType=e.signatureType,r.hashAlgorithm=e.hashAlgorithm,r.publicKeyAlgorithm=e.publicKeyAlgorithm,r.issuerKeyID=e.issuerKeyID,r.salt=e.salt,r.issuerFingerprint=e.issuerFingerprint,r.flags=t?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new at(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=e[t++],this.hashAlgorithm=e[t++],this.publicKeyAlgorithm=e[t++],6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r,this.issuerFingerprint=e.subarray(t,t+32),t+=32,this.issuerKeyID=new ws,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new ws,this.issuerKeyID.read(e.subarray(t,t+8)),t+=8;return this.flags=e[t++],this}write(){const e=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?e.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):e.push(this.issuerKeyID.write()),e.push(new Uint8Array([this.flags])),O.concatUint8Array(e)}calculateTrailer(...e){return Q(async()=>Es.prototype.calculateTrailer.apply(await this.correspondingSig,e))}async verify(){const e=await this.correspondingSig;if(!e||e.constructor.tag!==F.packet.signature)throw Error("Corresponding signature packet missing");if(e.signatureType!==this.signatureType||e.hashAlgorithm!==this.hashAlgorithm||e.publicKeyAlgorithm!==this.publicKeyAlgorithm||!e.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===e.version||6===this.version&&6!==e.version||6===this.version&&!O.equalsUint8Array(e.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!O.equalsUint8Array(e.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return e.hashed=this.hashed,e.verify.apply(e,arguments)}}function Ss(e,t){if(!t[e]){let r;try{r=F.read(F.packet,e)}catch(t){throw new ot("Unknown packet type with tag: "+e)}throw Error("Packet not allowed in this context: "+r)}return new t[e]}Is.prototype.hash=Es.prototype.hash,Is.prototype.toHash=Es.prototype.toHash,Is.prototype.toSign=Es.prototype.toSign;class Ks extends Array{static async fromBinary(e,t,r=L,n=null,i=!1){const s=new Ks;return await s.read(e,t,r,n,i),s}async read(e,t,r=L,n=null,i=!1){let s;r.additionalAllowedPackets.length&&(s=O.constructAllowedPackets(r.additionalAllowedPackets),t={...t,...s}),this.stream=I(e,async(e,a)=>{const o=R(e),c=T(a);try{let a=O.isStream(e);for(;;){let u,h;if(await c.ready,await st(o,a,async e=>{try{if(e.tag===F.packet.marker||e.tag===F.packet.trust||e.tag===F.packet.padding)return;const i=Ss(e.tag,t);try{n?.recordPacket(e.tag,s)}catch(e){if(r.enforceGrammar)throw e;O.printDebugError(e)}i.packets=new Ks,i.fromStream=O.isStream(e.packet),h=i.fromStream;try{await i.read(e.packet,r)}catch(e){if(!(e instanceof at))throw O.wrapError(new ct(`Parsing ${i.constructor.name} failed`),e);throw e}await c.write(i)}catch(t){const n=t instanceof ot&&e.tag<=39,s=t instanceof at&&!(t instanceof ot)&&!r.ignoreUnsupportedPackets,a=t instanceof ct&&!r.ignoreMalformedPackets,o=it(e.tag);if(n||s||a||o||!(t instanceof ot||t instanceof at||t instanceof ct))i?u=t:await c.abort(t);else{const t=new ut(e.tag,e.packet);await c.write(t)}O.printDebugError(t)}}),h&&(a=null),u)throw await o.readToEnd(),u;const f=await o.peekBytes(2);if(!f||!f.length){try{n?.recordEnd()}catch(e){if(r.enforceGrammar)throw e;O.printDebugError(e)}return await c.ready,void await c.close()}}}catch(e){await c.abort(e)}});const a=R(this.stream);for(;;){const{done:e,value:t}=await a.read();if(e?this.stream=null:this.push(t),e||it(t.constructor.tag))break}a.releaseLock()}write(){const e=[];for(let t=0;t<this.length;t++){const r=this[t]instanceof ut?this[t].tag:this[t].constructor.tag,n=this[t].write();if(O.isStream(n)&&it(this[t].constructor.tag)){let t=[],i=0;const s=512;e.push(rt(r)),e.push(B(n,e=>{if(t.push(e),i+=e.length,i>=s){const e=Math.min(Math.log(i)/Math.LN2|0,30),r=2**e,n=O.concat([tt(e)].concat(t));return t=[n.subarray(1+r)],i=t[0].length,n.subarray(0,1+r)}},()=>O.concat([et(i)].concat(t))))}else{if(O.isStream(n)){let t=0;e.push(B(K(n),e=>{t+=e.length},()=>nt(r,t)))}else e.push(nt(r,n.length));e.push(n)}}return O.concat(e)}filterByTag(...e){const t=new Ks,r=e=>t=>e===t;for(let n=0;n<this.length;n++)e.some(r(this[n].constructor.tag))&&t.push(this[n]);return t}findPacket(e){return this.find(t=>t.constructor.tag===e)}indexOfTag(...e){const t=[],r=this,n=e=>t=>e===t;for(let i=0;i<this.length;i++)e.some(n(r[i].constructor.tag))&&t.push(i);return t}}class Cs extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,Cs),this.name="GrammarError"}}var Ds;!function(e){e[e.EmptyMessage=0]="EmptyMessage",e[e.PlaintextOrEncryptedData=1]="PlaintextOrEncryptedData",e[e.EncryptedSessionKeys=2]="EncryptedSessionKeys",e[e.StandaloneAdditionalAllowedData=3]="StandaloneAdditionalAllowedData"}(Ds||(Ds={}));class Us{constructor(){this.state=Ds.EmptyMessage,this.leadingOnePassSignatureCounter=0}recordPacket(e,t){switch(this.state){case Ds.EmptyMessage:case Ds.StandaloneAdditionalAllowedData:switch(e){case F.packet.literalData:case F.packet.compressedData:case F.packet.aeadEncryptedData:case F.packet.symEncryptedIntegrityProtectedData:case F.packet.symmetricallyEncryptedData:return void(this.state=Ds.PlaintextOrEncryptedData);case F.packet.signature:if(this.state===Ds.StandaloneAdditionalAllowedData&&--this.leadingOnePassSignatureCounter<0)throw new Cs("Trailing signature packet without OPS");return;case F.packet.onePassSignature:if(this.state===Ds.StandaloneAdditionalAllowedData)throw new Cs("OPS following StandaloneAdditionalAllowedData");return void this.leadingOnePassSignatureCounter++;case F.packet.publicKeyEncryptedSessionKey:case F.packet.symEncryptedSessionKey:return void(this.state=Ds.EncryptedSessionKeys);default:if(!t?.[e])throw new Cs(`Unexpected packet ${e} in state ${this.state}`);return void(this.state=Ds.StandaloneAdditionalAllowedData)}case Ds.PlaintextOrEncryptedData:if(e===F.packet.signature){if(--this.leadingOnePassSignatureCounter<0)throw new Cs("Trailing signature packet without OPS");return void(this.state=Ds.PlaintextOrEncryptedData)}if(!t?.[e])throw new Cs(`Unexpected packet ${e} in state ${this.state}`);return void(this.state=Ds.PlaintextOrEncryptedData);case Ds.EncryptedSessionKeys:switch(e){case F.packet.publicKeyEncryptedSessionKey:case F.packet.symEncryptedSessionKey:return void(this.state=Ds.EncryptedSessionKeys);case F.packet.symEncryptedIntegrityProtectedData:case F.packet.aeadEncryptedData:case F.packet.symmetricallyEncryptedData:return void(this.state=Ds.PlaintextOrEncryptedData);case F.packet.signature:if(--this.leadingOnePassSignatureCounter<0)throw new Cs("Trailing signature packet without OPS");return void(this.state=Ds.PlaintextOrEncryptedData);default:if(!t?.[e])throw new Cs(`Unexpected packet ${e} in state ${this.state}`);this.state=Ds.EncryptedSessionKeys}}}recordEnd(){switch(this.state){case Ds.EmptyMessage:case Ds.PlaintextOrEncryptedData:case Ds.EncryptedSessionKeys:case Ds.StandaloneAdditionalAllowedData:if(this.leadingOnePassSignatureCounter>0)throw new Cs("Missing trailing signature packets")}}}const Ps=O.constructAllowedPackets([As,Is,Es]);class xs{static get tag(){return F.packet.compressedData}constructor(e=L){this.packets=null,this.algorithm=e.preferredCompressionAlgorithm,this.compressed=null}async read(e,t=L){await S(e,async e=>{this.algorithm=await e.readByte(),this.compressed=e.remainder(),await this.decompress(t)})}write(){return null===this.compressed&&this.compress(),O.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(e=L){const t=F.read(F.compression,this.algorithm),r=Fs[t];if(!r)throw Error(t+" decompression not supported");this.packets=await Ks.fromBinary(await r(this.compressed),Ps,e,new Us)}compress(){const e=F.read(F.compression,this.algorithm),t=Ms[e];if(!t)throw Error(e+" compression not supported");this.compressed=t(this.packets.write())}}function Qs(e,t){return r=>{if(!O.isStream(r)||h(r))return Q(()=>P(r).then(e=>new Promise((r,n)=>{const i=new t,s=[];i.ondata=(e,t)=>{s.push(e),t&&r(O.concatUint8Array(s))};try{i.push(e,!0)}catch(e){n(e)}})));if(e)try{const t=e();return r.pipeThrough(t)}catch(e){if("TypeError"!==e.name)throw e}const n=r.getReader(),i=new t;return new ReadableStream({async start(e){for(i.ondata=async(t,r)=>{e.enqueue(t),r&&e.close()};;){const{done:e,value:t}=await n.read();if(e)return void i.push(new Uint8Array,!0);t.length&&i.push(t)}}})}}function Rs(){return async function(e){const{decode:t}=await Promise.resolve().then(function(){return Ay});return Q(async()=>t(await P(e)))}}const Ts=e=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(e)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(e))}),Ms={zip:Qs(Ts("deflate-raw").compressor,ls),zlib:Qs(Ts("deflate").compressor,gs)},Fs={uncompressed:e=>e,zip:Qs(Ts("deflate-raw").decompressor,ys),zlib:Qs(Ts("deflate").decompressor,ps),bzip2:Rs()},Ls=O.constructAllowedPackets([As,xs,Is,Es]);class Ns{static get tag(){return F.packet.symEncryptedIntegrityProtectedData}static fromObject({version:e,aeadAlgorithm:t}){if(1!==e&&2!==e)throw Error("Unsupported SEIPD version");const r=new Ns;return r.version=e,2===e&&(r.aeadAlgorithm=t),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(e){await S(e,async e=>{if(this.version=await e.readByte(),1!==this.version&&2!==this.version)throw new at(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte(),this.salt=await e.readBytes(32)),this.encrypted=e.remainder()})}write(){return 2===this.version?O.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):O.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(e,t,r=L){const{blockSize:n,keySize:i}=Ir(e);if(t.length!==i)throw Error("Unexpected session key size");let s=this.packets.write();if(h(s)&&(s=await P(s)),2===this.version)this.cipherAlgorithm=e,this.salt=de(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await Os(this,"encrypt",t,s);else{const r=await Tn(e),i=new Uint8Array([211,20]),a=O.concat([r,s,i]),o=await Me(F.hash.sha1,C(a)),c=O.concat([a,o]);this.encrypted=await Mn(e,t,c,new Uint8Array(n))}return!0}async decrypt(e,t,r=L){if(t.length!==Ir(e).keySize)throw Error("Unexpected session key size");let n,i=K(this.encrypted);h(i)&&(i=await P(i));let s=!1;if(2===this.version){if(this.cipherAlgorithm!==e)throw Error("Unexpected session key algorithm");n=await Os(this,"decrypt",t,i)}else{const{blockSize:a}=Ir(e),o=await Fn(e,t,i,new Uint8Array(a)),c=U(C(o),-20),u=U(o,0,-20),h=Promise.all([P(await Me(F.hash.sha1,C(u))),P(c)]).then(([e,t])=>{if(!O.equalsUint8Array(e,t))throw Error("Modification detected.");return new Uint8Array}),f=U(u,a+2);n=U(f,0,-2),n=b([n,Q(()=>h)]),O.isStream(i)&&r.allowUnauthenticatedStream?s=!0:n=await P(n)}return this.packets=await Ks.fromBinary(n,Ls,r,new Us,s),!0}}async function Os(e,t,r,n){const i=e instanceof Ns&&2===e.version,s=!i&&e.constructor.tag===F.packet.aeadEncryptedData;if(!i&&!s)throw Error("Unexpected packet type");const a=gi(e.aeadAlgorithm,s),o="decrypt"===t?a.tagLength:0,c="encrypt"===t?a.tagLength:0,u=2**(e.chunkSizeByte+6)+o,h=s?8:0,f=new ArrayBuffer(13+h),l=new Uint8Array(f,0,5+h),y=new Uint8Array(f),g=new DataView(f),p=new Uint8Array(f,5,8);l.set([192|e.constructor.tag,e.version,e.cipherAlgorithm,e.aeadAlgorithm,e.chunkSizeByte],0);let d,A,w=0,m=Promise.resolve(),b=0,E=0;if(i){const{keySize:t}=Ir(e.cipherAlgorithm),{ivLength:n}=a,i=new Uint8Array(f,0,5),s=await Dr(F.hash.sha256,r,e.salt,i,t+n);r=s.subarray(0,t),d=s.subarray(t),d.fill(0,d.length-8),A=new DataView(d.buffer,d.byteOffset,d.byteLength)}else d=e.iv;const v=await a(e.cipherAlgorithm,r);return I(n,async(r,n)=>{if("array"!==O.isStream(r)){const t=new TransformStream({},{highWaterMark:O.getHardwareConcurrency()*2**(e.chunkSizeByte+6),size:e=>e.length});k(t.readable,n),n=t.writable}const s=R(r),a=T(n);try{for(;;){let e=await s.readBytes(u+o)||new Uint8Array;const r=e.subarray(e.length-o);let n,f,k;if(e=e.subarray(0,e.length-o),i)k=d;else{k=d.slice();for(let e=0;e<8;e++)k[d.length-8+e]^=p[e]}if(!w||e.length?(s.unshift(r),n=v[t](e,k,l),n.catch(()=>{}),E+=e.length-o+c):(g.setInt32(5+h+4,b),n=v[t](r,k,y),n.catch(()=>{}),E+=c,f=!0),b+=e.length-o,m=m.then(()=>n).then(async e=>{await a.ready,await a.write(e),E-=e.length}).catch(e=>a.abort(e)),(f||E>a.desiredSize)&&await m,f){await a.close();break}i?A.setInt32(d.length-4,++w):g.setInt32(9,++w)}}catch(e){await a.ready.catch(()=>{}),await a.abort(e)}})}const Hs=O.constructAllowedPackets([As,xs,Is,Es]);class zs{static get tag(){return F.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=F.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(e){await S(e,async e=>{const t=await e.readByte();if(1!==t)throw new at(`Version ${t} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte();const r=gi(this.aeadAlgorithm,!0);this.iv=await e.readBytes(r.ivLength),this.encrypted=e.remainder()})}write(){return O.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(e,t,r=L){this.packets=await Ks.fromBinary(await Os(this,"decrypt",t,K(this.encrypted)),Hs,r,new Us)}async encrypt(e,t,r=L){this.cipherAlgorithm=e;const{ivLength:n}=gi(this.aeadAlgorithm,!0);this.iv=de(n),this.chunkSizeByte=r.aeadChunkSizeByte;const i=this.packets.write();this.encrypted=await Os(this,"encrypt",t,i)}}class Gs{static get tag(){return F.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new ws,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:e,encryptionKeyPacket:t,anonymousRecipient:r,sessionKey:n,sessionKeyAlgorithm:i}){const s=new Gs;if(3!==e&&6!==e)throw Error("Unsupported PKESK version");return s.version=e,6===e&&(s.publicKeyVersion=r?null:t.version,s.publicKeyFingerprint=r?null:t.getFingerprintBytes()),s.publicKeyID=r?ws.wildcard():t.getKeyID(),s.publicKeyAlgorithm=t.algorithm,s.sessionKey=n,s.sessionKeyAlgorithm=i,s}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new at(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=e[t++];if(r){this.publicKeyVersion=e[t++];const n=r-1;this.publicKeyFingerprint=e.subarray(t,t+n),t+=n,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=ws.wildcard()}else t+=this.publicKeyID.read(e.subarray(t,t+8));if(this.publicKeyAlgorithm=e[t++],this.encrypted=function(e,t){let r=0;switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:return{c:O.readMPI(t.subarray(r))};case F.publicKey.elgamal:{const e=O.readMPI(t.subarray(r));return r+=e.length+2,{c1:e,c2:O.readMPI(t.subarray(r))}}case F.publicKey.ecdh:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const n=new vn;return n.read(t.subarray(r)),{V:e,C:n}}case F.publicKey.x25519:case F.publicKey.x448:{const n=Un(e),i=O.readExactSubarray(t,r,r+n);r+=i.length;const s=new In;return s.read(t.subarray(r)),{ephemeralPublicKey:i,C:s}}default:throw new at("Unknown public key encryption algorithm.")}}(this.publicKeyAlgorithm,e.subarray(t)),this.publicKeyAlgorithm===F.publicKey.x25519||this.publicKeyAlgorithm===F.publicKey.x448)if(3===this.version)this.sessionKeyAlgorithm=F.write(F.symmetric,this.encrypted.C.algorithm);else if(null!==this.encrypted.C.algorithm)throw Error("Unexpected cleartext symmetric algorithm")}write(){const e=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(e.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),e.push(this.publicKeyFingerprint)):e.push(new Uint8Array([0])):e.push(this.publicKeyID.write()),e.push(new Uint8Array([this.publicKeyAlgorithm]),Kn(this.publicKeyAlgorithm,this.encrypted)),O.concatUint8Array(e)}async encrypt(e){const t=F.write(F.publicKey,this.publicKeyAlgorithm),r=3===this.version?this.sessionKeyAlgorithm:null,n=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),i=_s(this.version,t,r,this.sessionKey);this.encrypted=await async function(e,t,r,n,i){switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:{const{n:e,e:t}=r;return{c:await Ve(n,e,t)}}case F.publicKey.elgamal:{const{p:e,g:t,y:i}=r;return async function(e,t,r,n){t=se(t),r=se(r),n=se(n);const i=se(Ne(e,ye(t))),s=Ae(Je,t-Je);return{c1:ge(oe(r,s,t)),c2:ge(ae(oe(n,s,t)*i,t))}}(n,e,t,i)}case F.publicKey.ecdh:{const{oid:e,Q:t,kdfParams:s}=r,{publicKey:a,wrappedKey:o}=await dn(e,s,n,t,i);return{V:a,C:new vn(o)}}case F.publicKey.x25519:case F.publicKey.x448:{if(t&&!O.isAES(t))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:i}=r,{ephemeralPublicKey:s,wrappedKey:a}=await Qr(e,n,i);return{ephemeralPublicKey:s,C:In.fromObject({algorithm:t,wrappedKey:a})}}default:return[]}}(t,r,e.publicParams,i,n)}async decrypt(e,t){if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Decryption error");const r=t?_s(this.version,this.publicKeyAlgorithm,t.sessionKeyAlgorithm,t.sessionKey):null,n=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),i=await async function(e,t,r,n,i,s){switch(e){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:{const{c:e}=n,{n:i,e:a}=t,{d:o,p:c,q:u,u:h}=r;return async function(e,t,r,n,i,s,a,o){if(O.getNodeCrypto()&&!o)try{return await async function(e,t,r,n,i,s,a){const o={key:await qe(t,r,n,i,s,a),format:"jwk",type:"pkcs1",padding:Ge.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(Ge.privateDecrypt(o,e))}catch(e){throw Error("Decryption error")}}(e,t,r,n,i,s,a)}catch(e){O.printDebugError(e)}return async function(e,t,r,n,i,s,a,o){if(e=se(e),t=se(t),r=se(r),n=se(n),i=se(i),s=se(s),a=se(a),e>=t)throw Error("Data too large.");const c=ae(n,s-_e),u=ae(n,i-_e),h=Ae(BigInt(2),t),f=oe(ue(h,t),r,t),l=oe(e=ae(e*f,t),u,i);let y=ae(a*(oe(e,c,s)-l),s)*i+l;return y=ae(y*h,t),Oe(ge(y,"be",ye(t)),o)}(e,t,r,n,i,s,a,o)}(e,i,a,o,c,u,h,s)}case F.publicKey.elgamal:{const{c1:e,c2:i}=n;return async function(e,t,r,n,i){return e=se(e),t=se(t),r=se(r),Oe(ge(ae(ue(oe(e,n=se(n),r),r)*t,r),"be",ye(r)),i)}(e,i,t.p,r.x,s)}case F.publicKey.ecdh:{const{oid:e,Q:s,kdfParams:a}=t,{d:o}=r,{V:c,C:u}=n;return An(e,a,c,u.data,s,o,i)}case F.publicKey.x25519:case F.publicKey.x448:{const{A:i}=t,{k:s}=r,{ephemeralPublicKey:a,C:o}=n;if(null!==o.algorithm&&!O.isAES(o.algorithm))throw Error("AES session key expected");return Rr(e,a,o.wrappedKey,i,s)}default:throw Error("Unknown public key encryption algorithm.")}}(this.publicKeyAlgorithm,e.publicParams,e.privateParams,this.encrypted,n,r),{sessionKey:s,sessionKeyAlgorithm:a}=function(e,t,r,n){switch(t){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.elgamal:case F.publicKey.ecdh:{const t=r.subarray(0,r.length-2),i=r.subarray(r.length-2),s=O.writeChecksum(t.subarray(t.length%8)),a=s[0]===i[0]&s[1]===i[1],o=6===e?{sessionKeyAlgorithm:null,sessionKey:t}:{sessionKeyAlgorithm:t[0],sessionKey:t.subarray(1)};if(n){const t=a&o.sessionKeyAlgorithm===n.sessionKeyAlgorithm&o.sessionKey.length===n.sessionKey.length;return{sessionKey:O.selectUint8Array(t,o.sessionKey,n.sessionKey),sessionKeyAlgorithm:6===e?null:O.selectUint8(t,o.sessionKeyAlgorithm,n.sessionKeyAlgorithm)}}if(a&&(6===e||F.read(F.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case F.publicKey.x25519:case F.publicKey.x448:return{sessionKeyAlgorithm:null,sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,i,t);if(3===this.version){const e=this.publicKeyAlgorithm!==F.publicKey.x25519&&this.publicKeyAlgorithm!==F.publicKey.x448;if(this.sessionKeyAlgorithm=e?a:this.sessionKeyAlgorithm,s.length!==Ir(this.sessionKeyAlgorithm).keySize)throw Error("Unexpected session key size")}this.sessionKey=s}}function _s(e,t,r,n){switch(t){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.elgamal:case F.publicKey.ecdh:return O.concatUint8Array([new Uint8Array(6===e?[]:[r]),n,O.writeChecksum(n.subarray(n.length%8))]);case F.publicKey.x25519:case F.publicKey.x448:return n;default:throw Error("Unsupported public key algorithm")}}class js{static get tag(){return F.packet.symEncryptedSessionKey}constructor(e=L){this.version=e.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=null,this.aeadAlgorithm=F.write(F.aead,e.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new at(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&t++;const r=e[t++];this.version>=5&&(this.aeadAlgorithm=e[t++],6===this.version&&t++);const n=e[t++];if(this.s2k=ki(n),t+=this.s2k.read(e.subarray(t,e.length)),this.version>=5){const r=gi(this.aeadAlgorithm,!0);this.iv=e.subarray(t,t+=r.ivLength)}this.version>=5||t<e.length?(this.encrypted=e.subarray(t,e.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const e=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let t;const r=this.s2k.write();if(6===this.version){const n=r.length,i=3+n+this.iv.length;t=O.concatUint8Array([new Uint8Array([this.version,i,e,this.aeadAlgorithm,n]),r,this.iv,this.encrypted])}else 5===this.version?t=O.concatUint8Array([new Uint8Array([this.version,e,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(t=O.concatUint8Array([new Uint8Array([this.version,e]),r]),null!==this.encrypted&&(t=O.concatUint8Array([t,this.encrypted])));return t}async decrypt(e){const t=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:n}=Ir(t),i=await this.s2k.produceKey(e,n);if(this.version>=5){const e=gi(this.aeadAlgorithm,!0),r=new Uint8Array([192|js.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await Dr(F.hash.sha256,i,new Uint8Array,r,n):i,a=await e(t,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const e=await Fn(t,i,this.encrypted,new Uint8Array(r));if(this.sessionKeyAlgorithm=F.write(F.symmetric,e[0]),this.sessionKey=e.subarray(1,e.length),this.sessionKey.length!==Ir(this.sessionKeyAlgorithm).keySize)throw Error("Unexpected session key size")}else this.sessionKey=i}async encrypt(e,t=L){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=Ei(t),this.s2k.generateSalt();const{blockSize:n,keySize:i}=Ir(r),s=await this.s2k.produceKey(e,i);if(null===this.sessionKey&&(this.sessionKey=Cn(this.sessionKeyAlgorithm)),this.version>=5){const e=gi(this.aeadAlgorithm);this.iv=de(e.ivLength);const t=new Uint8Array([192|js.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),n=6===this.version?await Dr(F.hash.sha256,s,new Uint8Array,t,i):s,a=await e(r,n);this.encrypted=await a.encrypt(this.sessionKey,this.iv,t)}else{const e=O.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await Mn(r,s,e,new Uint8Array(n))}}}class Vs{static get tag(){return F.packet.publicKey}constructor(e=new Date,t=L){this.version=t.v6Keys?6:4,this.created=O.normalizeDate(e),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(e){const t=new Vs,{version:r,created:n,algorithm:i,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=n,t.algorithm=i,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}async read(e,t=L){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new at("Support for parsing v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4===this.version||5===this.version||6===this.version){this.created=O.readDate(e.subarray(r,r+4)),r+=4,this.algorithm=e[r++],this.version>=5&&(r+=4);const{read:t,publicParams:n}=function(e,t){let r=0;switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const n=O.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{n:e,e:n}}}case F.publicKey.dsa:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const n=O.readMPI(t.subarray(r));r+=n.length+2;const i=O.readMPI(t.subarray(r));r+=i.length+2;const s=O.readMPI(t.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:e,q:n,g:i,y:s}}}case F.publicKey.elgamal:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const n=O.readMPI(t.subarray(r));r+=n.length+2;const i=O.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{p:e,g:n,y:i}}}case F.publicKey.ecdsa:{const e=new We;r+=e.read(t),Dn(e);const n=O.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{oid:e,Q:n}}}case F.publicKey.eddsaLegacy:{const e=new We;if(r+=e.read(t),Dn(e),e.getName()!==F.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let n=O.readMPI(t.subarray(r));return r+=n.length+2,n=O.leftPad(n,33),{read:r,publicParams:{oid:e,Q:n}}}case F.publicKey.ecdh:{const e=new We;r+=e.read(t),Dn(e);const n=O.readMPI(t.subarray(r));r+=n.length+2;const i=new Bn;return r+=i.read(t.subarray(r)),{read:r,publicParams:{oid:e,Q:n,kdfParams:i}}}case F.publicKey.ed25519:case F.publicKey.ed448:case F.publicKey.x25519:case F.publicKey.x448:{const n=O.readExactSubarray(t,r,r+Un(e));return r+=n.length,{read:r,publicParams:{A:n}}}default:throw new at("Unknown public key encryption algorithm.")}}(this.algorithm,e.subarray(r));if(6===this.version&&n.oid&&(n.oid.getName()===F.curve.curve25519Legacy||n.oid.getName()===F.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");return this.publicParams=n,r+=t,await this.computeFingerprintAndKeyID(),r}throw new at(`Version ${this.version} of the key packet is unsupported.`)}write(){const e=[];e.push(new Uint8Array([this.version])),e.push(O.writeDate(this.created)),e.push(new Uint8Array([this.algorithm]));const t=Kn(this.algorithm,this.publicParams);return this.version>=5&&e.push(O.writeNumber(t.length,4)),e.push(t),O.concatUint8Array(e)}writeForHash(e){const t=this.writePublicKey(),r=149+e,n=e>=5?4:2;return O.concatUint8Array([new Uint8Array([r]),O.writeNumber(t.length,n),t])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new ws,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const e=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await Me(F.hash.sha256,e);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await Me(F.hash.sha1,e)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return O.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(e){return this.version===e.version&&O.equalsUint8Array(this.writePublicKey(),e.writePublicKey())}getAlgorithmInfo(){const e={};e.algorithm=F.read(F.publicKey,this.algorithm);const t=this.publicParams.n||this.publicParams.p;return t?e.bits=O.uint8ArrayBitLength(t):this.publicParams.oid&&(e.curve=this.publicParams.oid.getName()),e}}Vs.prototype.readPublicKey=Vs.prototype.read,Vs.prototype.writePublicKey=Vs.prototype.write;const qs=O.constructAllowedPackets([As,xs,Is,Es]);class Ys{static get tag(){return F.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(e){this.encrypted=e}write(){return this.encrypted}async decrypt(e,t,r=L){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:n}=Ir(e),i=await P(K(this.encrypted)),s=await Fn(e,t,i.subarray(n+2),i.subarray(2,n+2));this.packets=await Ks.fromBinary(s,qs,r)}async encrypt(e,t,r=L){const n=this.packets.write(),{blockSize:i}=Ir(e),s=await Tn(e),a=await Mn(e,t,s,new Uint8Array(i)),o=await Mn(e,t,n,a.subarray(2));this.encrypted=O.concat([a,o])}}class Zs{static get tag(){return F.packet.marker}read(e){return 80===e[0]&&71===e[1]&&80===e[2]}write(){return new Uint8Array([80,71,80])}}class Js extends Vs{static get tag(){return F.packet.publicSubkey}constructor(e,t){super(e,t)}static fromSecretSubkeyPacket(e){const t=new Js,{version:r,created:n,algorithm:i,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=n,t.algorithm=i,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}}class Xs{static get tag(){return F.packet.userAttribute}constructor(){this.attributes=[]}read(e){let t=0;for(;t<e.length;){const r=$e(e.subarray(t,e.length));t+=r.offset,this.attributes.push(O.uint8ArrayToString(e.subarray(t,t+r.len))),t+=r.len}}write(){const e=[];for(let t=0;t<this.attributes.length;t++)e.push(et(this.attributes[t].length)),e.push(O.stringToUint8Array(this.attributes[t]));return O.concatUint8Array(e)}equals(e){return!!(e&&e instanceof Xs)&&this.attributes.every(function(t,r){return t===e.attributes[r]})}}class Ws extends Vs{static get tag(){return F.packet.secretKey}constructor(e=new Date,t=L){super(e,t),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(e,t=L){let r=await this.readPublicKey(e,t);const n=r;this.s2kUsage=e[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=e[r++],253===this.s2kUsage&&(this.aead=e[r++]),6===this.version&&r++;const t=e[r++];if(this.s2k=ki(t),r+=this.s2k.read(e.subarray(r,e.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&t.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=e.subarray(r,r+Ir(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=e.subarray(r,r+gi(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(t){if(!this.s2kUsage)throw t;this.unparseableKeyMaterial=e.subarray(n),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=e.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let t;if(6===this.version)t=this.keyMaterial;else if(t=this.keyMaterial.subarray(0,-2),!O.equalsUint8Array(O.writeChecksum(t),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:e,privateParams:r}=Sn(this.algorithm,t,this.publicParams);if(e<t.length)throw Error("Error reading MPIs");this.privateParams=r}catch(e){if(e instanceof at)throw e;throw Error("Error reading MPIs")}}}write(){const e=this.writePublicKey();if(this.unparseableKeyMaterial)return O.concatUint8Array([e,this.unparseableKeyMaterial]);const t=[e];t.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const e=this.s2k.write();6===this.version&&r.push(e.length),r.push(...e)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&t.push(new Uint8Array([r.length])),t.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=Kn(this.algorithm,this.privateParams)),5===this.version&&t.push(O.writeNumber(this.keyMaterial.length,4)),t.push(this.keyMaterial),this.s2kUsage||6===this.version||t.push(O.writeChecksum(this.keyMaterial))),O.concatUint8Array(t)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(e=L){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=ki(F.s2k.gnu,e),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=F.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(e,t=L){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!e)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=Ei(t),this.s2k.generateSalt();const r=Kn(this.algorithm,this.privateParams);this.symmetric=F.symmetric.aes256;const{blockSize:n}=Ir(this.symmetric);if(t.aeadProtect){this.s2kUsage=253,this.aead=t.preferredAEADAlgorithm;const i=gi(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const s=rt(this.constructor.tag),a=await $s(this.version,this.s2k,e,this.symmetric,this.aead,s,this.isLegacyAEAD),o=await i(this.symmetric,a);this.iv=this.isLegacyAEAD?de(n):de(i.ivLength);const c=this.isLegacyAEAD?new Uint8Array:O.concatUint8Array([s,this.writePublicKey()]);this.keyMaterial=await o.encrypt(r,this.iv.subarray(0,i.ivLength),c)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const t=await $s(this.version,this.s2k,e,this.symmetric);this.iv=de(n),this.keyMaterial=await Mn(this.symmetric,t,O.concatUint8Array([r,await Me(F.hash.sha1,r)]),this.iv)}}async decrypt(e){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let t;const r=rt(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let n;if(t=await $s(this.version,this.s2k,e,this.symmetric,this.aead,r,this.isLegacyAEAD),253===this.s2kUsage){const i=gi(this.aead,!0),s=await i(this.symmetric,t);try{const e=this.isLegacyAEAD?new Uint8Array:O.concatUint8Array([r,this.writePublicKey()]);n=await s.decrypt(this.keyMaterial,this.iv.subarray(0,i.ivLength),e)}catch(e){if("Authentication tag mismatch"===e.message)throw Error("Incorrect key passphrase: "+e.message);throw e}}else{const e=await Fn(this.symmetric,t,this.keyMaterial,this.iv);n=e.subarray(0,-20);const r=await Me(F.hash.sha1,n);if(!O.equalsUint8Array(r,e.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:e}=Sn(this.algorithm,n,this.publicParams);this.privateParams=e}catch(e){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let e;try{e=await async function(e,t,r){if(!t||!r)throw Error("Missing key parameters");switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:{const{n:e,e:n}=t,{d:i,p:s,q:a,u:o}=r;return async function(e,t,r,n,i,s){if(e=se(e),(n=se(n))*(i=se(i))!==e)return!1;const a=BigInt(2);if(ae(n*(s=se(s)),i)!==BigInt(1))return!1;t=se(t),r=se(r);const o=Ae(a,a<<BigInt(Math.floor(le(e)/3))),c=o*r*t;return!(ae(c,n-_e)!==o||ae(c,i-_e)!==o)}(e,n,i,s,a,o)}case F.publicKey.dsa:{const{p:e,q:n,g:i,y:s}=t,{x:a}=r;return async function(e,t,r,n,i){if(e=se(e),t=se(t),r=se(r),n=se(n),r<=En||r>=e)return!1;if(ae(e-En,t)!==kn)return!1;if(oe(r,t,e)!==En)return!1;const s=BigInt(le(t));if(s<BigInt(150)||!be(t,null,32))return!1;i=se(i);const a=BigInt(2);return n===oe(r,t*Ae(a<<s-En,a<<s)+i,e)}(e,n,i,s,a)}case F.publicKey.elgamal:{const{p:e,g:n,y:i}=t,{x:s}=r;return async function(e,t,r,n){if(e=se(e),t=se(t),r=se(r),t<=Je||t>=e)return!1;const i=BigInt(le(e));if(i<BigInt(1023))return!1;if(oe(t,e-Je,e)!==Je)return!1;let s=t,a=BigInt(1);const o=BigInt(2),c=o<<BigInt(17);for(;a<c;){if(s=ae(s*t,e),s===Je)return!1;a++}n=se(n);const u=Ae(o<<i-Je,o<<i);return r===oe(t,(e-Je)*u+n,e)}(e,n,i,s)}case F.publicKey.ecdsa:case F.publicKey.ecdh:{const n=bn[F.read(F.publicKey,e)],{oid:i,Q:s}=t,{d:a}=r;return n.validateParams(i,s,a)}case F.publicKey.eddsaLegacy:{const{Q:e,oid:n}=t,{seed:i}=r;return fn(n,e,i)}case F.publicKey.ed25519:case F.publicKey.ed448:{const{A:n}=t,{seed:i}=r;return yt(e,n,i)}case F.publicKey.x25519:case F.publicKey.x448:{const{A:n}=t,{k:i}=r;return xr(e,n,i)}default:throw Error("Unknown public key algorithm.")}}(this.algorithm,this.publicParams,this.privateParams)}catch(t){e=!1}if(!e)throw Error("Key is invalid")}async generate(e,t){if(6===this.version&&(this.algorithm===F.publicKey.ecdh&&t===F.curve.curve25519Legacy||this.algorithm===F.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${t}. Generate a key of type 'curve25519' instead`);const{privateParams:r,publicParams:n}=await function(e,t,r){switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:return async function(e,t){if(t=BigInt(t),O.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:ge(t),hash:{name:"SHA-1"}},n=await ze.generateKey(r,!0,["sign","verify"]);return Ze(await ze.exportKey("jwk",n.privateKey),t)}if(O.getNodeCrypto()){const r={modulusLength:e,publicExponent:he(t),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},n=await new Promise((e,t)=>{Ge.generateKeyPair("rsa",r,(r,n,i)=>{r?t(r):e(i)})});return Ze(n,t)}let r,n,i;do{n=me(e-(e>>1),t,40),r=me(e>>1,t,40),i=r*n}while(le(i)!==e);const s=(r-_e)*(n-_e);return n<r&&([r,n]=[n,r]),{n:ge(i),e:ge(t),d:ge(ue(t,s)),p:ge(r),q:ge(n),u:ge(ue(r,n))}}(t,65537).then(({n:e,e:t,d:r,p:n,q:i,u:s})=>({privateParams:{d:r,p:n,q:i,u:s},publicParams:{n:e,e:t}}));case F.publicKey.ecdsa:return Yr(r).then(({oid:e,Q:t,secret:r})=>({privateParams:{d:r},publicParams:{oid:new We(e),Q:t}}));case F.publicKey.eddsaLegacy:return Yr(r).then(({oid:e,Q:t,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new We(e),Q:t}}));case F.publicKey.ecdh:return Yr(r).then(({oid:e,Q:t,secret:r,hash:n,cipher:i})=>({privateParams:{d:r},publicParams:{oid:new We(e),Q:t,kdfParams:new Bn({hash:n,cipher:i})}}));case F.publicKey.ed25519:case F.publicKey.ed448:return ht(e).then(({A:e,seed:t})=>({privateParams:{seed:t},publicParams:{A:e}}));case F.publicKey.x25519:case F.publicKey.x448:return Pr(e).then(({A:e,k:t})=>({privateParams:{k:t},publicParams:{A:e}}));case F.publicKey.dsa:case F.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}}(this.algorithm,e,t);this.privateParams=r,this.publicParams=n,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach(e=>{this.privateParams[e].fill(0),delete this.privateParams[e]}),this.privateParams=null,this.isEncrypted=!0)}}async function $s(e,t,r,n,i,s,a){if("argon2"===t.type&&!i)throw Error("Using Argon2 S2K without AEAD is not allowed");if("simple"===t.type&&6===e)throw Error("Using Simple S2K with version 6 keys is not allowed");const{keySize:o}=Ir(n),c=await t.produceKey(r,o);if(!i||5===e||a)return c;const u=O.concatUint8Array([s,new Uint8Array([e,n,i])]);return Dr(F.hash.sha256,c,new Uint8Array,u,o)}class ea{static get tag(){return F.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(e){if(O.isString(e)||e.name&&!O.isString(e.name)||e.email&&!O.isEmailAddress(e.email)||e.comment&&!O.isString(e.comment))throw Error("Invalid user ID format");const t=new ea;Object.assign(t,e);const r=[];return t.name&&r.push(t.name),t.comment&&r.push(`(${t.comment})`),t.email&&r.push(`<${t.email}>`),t.userID=r.join(" "),t}read(e,t=L){const r=O.decodeUTF8(e);if(r.length>t.maxUserIDLength)throw Error("User ID string is too long");const n=e=>/^[^\s@]+@[^\s@]+$/.test(e),i=r.indexOf("<"),s=r.lastIndexOf(">");if(-1!==i&&-1!==s&&s>i){const e=r.substring(i+1,s);if(n(e)){this.email=e;const t=r.substring(0,i).trim(),n=t.indexOf("("),s=t.lastIndexOf(")");-1!==n&&-1!==s&&s>n?(this.comment=t.substring(n+1,s).trim(),this.name=t.substring(0,n).trim()):(this.name=t,this.comment="")}}else n(r.trim())&&(this.email=r.trim(),this.name="",this.comment="");this.userID=r}write(){return O.encodeUTF8(this.userID)}equals(e){return e&&e.userID===this.userID}}class ta extends Ws{static get tag(){return F.packet.secretSubkey}constructor(e=new Date,t=L){super(e,t)}}class ra{static get tag(){return F.packet.trust}read(){throw new at("Trust packets are not supported")}write(){throw new at("Trust packets are not supported")}}class na{static get tag(){return F.packet.padding}constructor(){this.padding=null}read(e){}write(){return this.padding}async createPadding(e){this.padding=await de(e)}}const ia=O.constructAllowedPackets([Es]);class sa{constructor(e){this.packets=e||new Ks}write(){return this.packets.write()}armor(e=L){const t=this.packets.some(e=>e.constructor.tag===Es.tag&&6!==e.version);return re(F.armor.signature,this.write(),void 0,void 0,void 0,t,e)}getSigningKeyIDs(){return this.packets.map(e=>e.issuerKeyID)}}async function aa({armoredSignature:e,binarySignature:t,config:r,...n}){r={...L,...r};let i=e||t;if(!i)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(e&&!O.isString(e))throw Error("readSignature: options.armoredSignature must be a string");if(t&&!O.isUint8Array(t))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:e,data:t}=await te(i);if(e!==F.armor.signature)throw Error("Armored text not of type signature");i=t}const a=await Ks.fromBinary(i,ia,r);return new sa(a)}async function oa(e,t){const r=new ta(e.date,t);return r.packets=null,r.algorithm=F.write(F.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve),await r.computeFingerprintAndKeyID(),r}async function ca(e,t){const r=new Ws(e.date,t);return r.packets=null,r.algorithm=F.write(F.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.config),await r.computeFingerprintAndKeyID(),r}async function ua(e,t,r,n,i=new Date,s){let a,o;for(let c=e.length-1;c>=0;c--)try{(!a||e[c].created>=a.created)&&(await e[c].verify(t,r,n,i,void 0,s),a=e[c])}catch(e){o=e}if(!a)throw O.wrapError(`Could not find valid ${F.read(F.signature,r)} signature in key ${t.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,(e,t,r)=>t+" "+r.toLowerCase()),o);return a}function ha(e,t,r=new Date){const n=O.normalizeDate(r);if(null!==n){const r=pa(e,t);return!(e.created<=n&&n<r)}return!1}async function fa(e,t,r,n){const i={};i.key=t,i.bind=e;const s={signatureType:F.signature.subkeyBinding};return r.sign?(s.keyFlags=[F.keyFlags.signData],s.embeddedSignature=await la(i,[],e,{signatureType:F.signature.keyBinding},r.date,void 0,void 0,void 0,n)):s.keyFlags=[F.keyFlags.encryptCommunication|F.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1),await la(i,[],t,s,r.date,void 0,void 0,void 0,n)}async function la(e,t,r,n,i,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const u=new Es;return Object.assign(u,n),u.publicKeyAlgorithm=r.algorithm,u.hashAlgorithm=await async function(e,t,r=new Date,n=[],i){const s=F.hash.sha256,a=i.preferredHashAlgorithm,o=await Promise.all(e.map(async(e,t)=>(await e.getPrimarySelfSignature(r,n[t],i)).preferredHashAlgorithms||[])),c=new Map;for(const e of o)for(const t of e)try{const e=F.write(F.hash,t);c.set(e,c.has(e)?c.get(e)+1:1)}catch{}const u=t=>0===e.length||c.get(t)===e.length||t===s,h=()=>{if(0===c.size)return s;const e=Array.from(c.keys()).filter(e=>u(e)).sort((e,t)=>Fe(e)-Fe(t))[0];return Fe(e)>=Fe(s)?e:s};if(new Set([F.publicKey.ecdsa,F.publicKey.eddsaLegacy,F.publicKey.ed25519,F.publicKey.ed448]).has(t.algorithm)){const e=function(e,t){switch(e){case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:return Zr(t);case F.publicKey.ed25519:case F.publicKey.ed448:return pt(e);default:throw Error("Unknown elliptic signing algo")}}(t.algorithm,t.publicParams.oid),r=u(a),n=Fe(a)>=Fe(e);if(r&&n)return a;{const t=h();return Fe(t)>=Fe(e)?t:e}}return u(a)?a:h()}(t,r,i,s,c),u.rawNotations=[...a],await u.sign(r,e,i,o,c),u}async function ya(e,t,r,n=new Date,i){(e=e[r])&&(t[r].length?await Promise.all(e.map(async function(e){e.isExpired(n)||i&&!await i(e)||t[r].some(function(t){return O.equalsUint8Array(t.writeParams(),e.writeParams())})||t[r].push(e)})):t[r]=e)}async function ga(e,t,r,n,i,s,a=new Date,o){s=s||e;const c=[];return await Promise.all(n.map(async function(e){try{if(!i||e.issuerKeyID.equals(i.issuerKeyID)){const n=![F.reasonForRevocation.keyRetired,F.reasonForRevocation.keySuperseded,F.reasonForRevocation.userIDInvalid].includes(e.reasonForRevocationFlag);await e.verify(s,t,r,n?null:a,!1,o),c.push(e.issuerKeyID)}}catch(e){}})),i?(i.revoked=!!c.some(e=>e.equals(i.issuerKeyID))||i.revoked||!1,i.revoked):c.length>0}function pa(e,t){let r;return!1===t.keyNeverExpires&&(r=e.created.getTime()+1e3*t.keyExpirationTime),r?new Date(r):1/0}function da(e,t={}){switch(e.type=e.type||t.type,e.curve=e.curve||t.curve,e.rsaBits=e.rsaBits||t.rsaBits,e.keyExpirationTime=void 0!==e.keyExpirationTime?e.keyExpirationTime:t.keyExpirationTime,e.passphrase=O.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e.sign=e.sign||!1,e.type){case"ecc":try{e.curve=F.write(F.curve,e.curve)}catch(e){throw Error("Unknown curve")}e.curve!==F.curve.ed25519Legacy&&e.curve!==F.curve.curve25519Legacy&&"ed25519"!==e.curve&&"curve25519"!==e.curve||(e.curve=e.sign?F.curve.ed25519Legacy:F.curve.curve25519Legacy),e.sign?e.algorithm=e.curve===F.curve.ed25519Legacy?F.publicKey.eddsaLegacy:F.publicKey.ecdsa:e.algorithm=F.publicKey.ecdh;break;case"curve25519":e.algorithm=e.sign?F.publicKey.ed25519:F.publicKey.x25519;break;case"curve448":e.algorithm=e.sign?F.publicKey.ed448:F.publicKey.x448;break;case"rsa":e.algorithm=F.publicKey.rsaEncryptSign;break;default:throw Error("Unsupported key type "+e.type)}return e}function Aa(e,t,r){switch(e.algorithm){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:case F.publicKey.dsa:case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:case F.publicKey.ed25519:case F.publicKey.ed448:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&F.keyFlags.signData);default:return!1}}function wa(e,t,r){switch(e.algorithm){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.elgamal:case F.publicKey.ecdh:case F.publicKey.x25519:case F.publicKey.x448:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&F.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&F.keyFlags.encryptStorage);default:return!1}}function ma(e,t,r){if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(e.algorithm){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.elgamal:case F.publicKey.ecdh:case F.publicKey.x25519:case F.publicKey.x448:return!((t.keyFlags&&!(t.keyFlags[0]&F.keyFlags.signData)||!r.allowInsecureDecryptionWithSigningKeys)&&t.keyFlags&&!(t.keyFlags[0]&F.keyFlags.encryptCommunication)&&!(t.keyFlags[0]&F.keyFlags.encryptStorage));default:return!1}}function ba(e,t){const r=F.write(F.publicKey,e.algorithm),n=e.getAlgorithmInfo();if(t.rejectPublicKeyAlgorithms.has(r))throw Error(n.algorithm+" keys are considered too weak.");switch(r){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:case F.publicKey.rsaEncrypt:if(n.bits<t.minRSABits)throw Error(`RSA keys shorter than ${t.minRSABits} bits are considered too weak.`);break;case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:case F.publicKey.ecdh:if(t.rejectCurves.has(n.curve))throw Error(`Support for ${n.algorithm} keys using curve ${n.curve} is disabled.`)}}class ka{constructor(e,t){this.userID=e.constructor.tag===F.packet.userID?e:null,this.userAttribute=e.constructor.tag===F.packet.userAttribute?e:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new Ks;return e.push(this.userID||this.userAttribute),e.push(...this.revocationSignatures),e.push(...this.selfCertifications),e.push(...this.otherCertifications),e}clone(){const e=new ka(this.userID||this.userAttribute,this.mainKey);return e.selfCertifications=[...this.selfCertifications],e.otherCertifications=[...this.otherCertifications],e.revocationSignatures=[...this.revocationSignatures],e}async certify(e,t,r){const n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n},s=new ka(i.userID||i.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(e.map(async function(e){if(!e.isPrivate())throw Error("Need private key for signing");if(e.hasSameFingerprintAs(n))throw Error("The user's own key can only be used for self-certifications");const s=await e.getSigningKey(void 0,t,void 0,r);return la(i,[e],s.keyPacket,{signatureType:F.signature.certGeneric,keyFlags:[F.keyFlags.certifyKeys|F.keyFlags.signData]},t,void 0,void 0,void 0,r)})),await s.update(this,t,r),s}async isRevoked(e,t,r=new Date,n=L){const i=this.mainKey.keyPacket;return ga(i,F.signature.certRevocation,{key:i,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,e,t,r,n)}async verifyCertificate(e,t,r=new Date,n){const i=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=e,c=t.filter(e=>e.getKeys(o).length>0);return 0===c.length?null:(await Promise.all(c.map(async t=>{const s=await t.getSigningKey(o,e.created,void 0,n);if(e.revoked||await i.isRevoked(e,s.keyPacket,r,n))throw Error("User certificate is revoked");try{await e.verify(s.keyPacket,F.signature.certGeneric,a,r,void 0,n)}catch(e){throw O.wrapError("User certificate is invalid",e)}})),!0)}async verifyAllCertifications(e,t=new Date,r){const n=this,i=this.selfCertifications.concat(this.otherCertifications);return Promise.all(i.map(async i=>({keyID:i.issuerKeyID,valid:await n.verifyCertificate(i,e,t,r).catch(()=>!1)})))}async verify(e=new Date,t){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,e,t))throw Error("Self-certification is revoked");try{await s.verify(n,F.signature.certGeneric,i,e,void 0,t)}catch(e){throw O.wrapError("Self-certification is invalid",e)}return!0}catch(e){s=e}throw s}async update(e,t,r){const n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n};await ya(e,this,"selfCertifications",t,async function(e){try{return await e.verify(n,F.signature.certGeneric,i,t,!1,r),!0}catch(e){return!1}}),await ya(e,this,"otherCertifications",t),await ya(e,this,"revocationSignatures",t,function(e){return ga(n,F.signature.certRevocation,i,[e],void 0,void 0,t,r)})}async revoke(e,{flag:t=F.reasonForRevocation.noReason,string:r=""}={},n=new Date,i=L){const s={userID:this.userID,userAttribute:this.userAttribute,key:e},a=new ka(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await la(s,[],e,{signatureType:F.signature.certRevocation,reasonForRevocationFlag:F.write(F.reasonForRevocation,t),reasonForRevocationString:r},n,void 0,void 0,!1,i)),await a.update(this),a}}class Ea{constructor(e,t){this.keyPacket=e,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new Ks;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.bindingSignatures),e}clone(){const e=new Ea(this.keyPacket,this.mainKey);return e.bindingSignatures=[...this.bindingSignatures],e.revocationSignatures=[...this.revocationSignatures],e}async isRevoked(e,t,r=new Date,n=L){const i=this.mainKey.keyPacket;return ga(i,F.signature.subkeyRevocation,{key:i,bind:this.keyPacket},this.revocationSignatures,e,t,r,n)}async verify(e=new Date,t=L){const r=this.mainKey.keyPacket,n={key:r,bind:this.keyPacket},i=await ua(this.bindingSignatures,r,F.signature.subkeyBinding,n,e,t);if(i.revoked||await this.isRevoked(i,null,e,t))throw Error("Subkey is revoked");if(ha(this.keyPacket,i,e))throw Error("Subkey is expired");return i}async getExpirationTime(e=new Date,t=L){const r=this.mainKey.keyPacket,n={key:r,bind:this.keyPacket};let i;try{i=await ua(this.bindingSignatures,r,F.signature.subkeyBinding,n,e,t)}catch(e){return null}const s=pa(this.keyPacket,i),a=i.getExpirationTime();return s<a?s:a}async update(e,t=new Date,r=L){const n=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(e))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===F.packet.publicSubkey&&e.keyPacket.constructor.tag===F.packet.secretSubkey&&(this.keyPacket=e.keyPacket);const i=this,s={key:n,bind:i.keyPacket};await ya(e,this,"bindingSignatures",t,async function(e){for(let t=0;t<i.bindingSignatures.length;t++)if(i.bindingSignatures[t].issuerKeyID.equals(e.issuerKeyID))return e.created>i.bindingSignatures[t].created&&(i.bindingSignatures[t]=e),!1;try{return await e.verify(n,F.signature.subkeyBinding,s,t,void 0,r),!0}catch(e){return!1}}),await ya(e,this,"revocationSignatures",t,function(e){return ga(n,F.signature.subkeyRevocation,s,[e],void 0,void 0,t,r)})}async revoke(e,{flag:t=F.reasonForRevocation.noReason,string:r=""}={},n=new Date,i=L){const s={key:e,bind:this.keyPacket},a=new Ea(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await la(s,[],e,{signatureType:F.signature.subkeyRevocation,reasonForRevocationFlag:F.write(F.reasonForRevocation,t),reasonForRevocationString:r},n,void 0,void 0,!1,i)),await a.update(this),a}hasSameFingerprintAs(e){return this.keyPacket.hasSameFingerprintAs(e.keyPacket||e)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach(e=>{Ea.prototype[e]=function(){return this.keyPacket[e]()}});const va=O.constructAllowedPackets([Es]),Ba=new Set([F.packet.publicKey,F.packet.privateKey]),Ia=new Set([F.packet.publicKey,F.packet.privateKey,F.packet.publicSubkey,F.packet.privateSubkey]);class Sa{packetListToStructure(e,t=new Set){let r,n,i,s;for(const a of e){if(a instanceof ut){Ia.has(a.tag)&&!s&&(s=Ba.has(a.tag)?Ba:Ia);continue}const e=a.constructor.tag;if(s){if(!s.has(e))continue;s=null}if(t.has(e))throw Error("Unexpected packet type: "+e);switch(e){case F.packet.publicKey:case F.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,n=this.getKeyID(),!n)throw Error("Missing Key ID");break;case F.packet.userID:case F.packet.userAttribute:r=new ka(a,this),this.users.push(r);break;case F.packet.publicSubkey:case F.packet.secretSubkey:r=null,i=new Ea(a,this),this.subkeys.push(i);break;case F.packet.signature:switch(a.signatureType){case F.signature.certGeneric:case F.signature.certPersona:case F.signature.certCasual:case F.signature.certPositive:if(!r){O.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(n)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case F.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case F.signature.key:this.directSignatures.push(a);break;case F.signature.subkeyBinding:if(!i){O.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}i.bindingSignatures.push(a);break;case F.signature.keyRevocation:this.revocationSignatures.push(a);break;case F.signature.subkeyRevocation:if(!i){O.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}i.revocationSignatures.push(a)}}}}toPacketList(){const e=new Ks;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.directSignatures),this.users.map(t=>e.push(...t.toPacketList())),this.subkeys.map(t=>e.push(...t.toPacketList())),e}clone(e=!1){const t=new this.constructor(this.toPacketList());return e&&t.getKeys().forEach(e=>{if(e.keyPacket=Object.create(Object.getPrototypeOf(e.keyPacket),Object.getOwnPropertyDescriptors(e.keyPacket)),!e.keyPacket.isDecrypted())return;const t={};Object.keys(e.keyPacket.privateParams).forEach(r=>{t[r]=new Uint8Array(e.keyPacket.privateParams[r])}),e.keyPacket.privateParams=t}),t}getSubkeys(e=null){return this.subkeys.filter(t=>!e||t.getKeyID().equals(e,!0))}getKeys(e=null){const t=[];return e&&!this.getKeyID().equals(e,!0)||t.push(this),t.concat(this.getSubkeys(e))}getKeyIDs(){return this.getKeys().map(e=>e.getKeyID())}getUserIDs(){return this.users.map(e=>e.userID?e.userID.userID:null).filter(e=>null!==e)}write(){return this.toPacketList().write()}async getSigningKey(e=null,t=new Date,r={},n=L){await this.verifyPrimaryKey(t,r,n);const i=this.keyPacket;try{ba(i,n)}catch(e){throw O.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort((e,t)=>t.keyPacket.created-e.keyPacket.created||t.keyPacket.algorithm-e.keyPacket.algorithm);let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,n);const e={key:i,bind:r.keyPacket},s=await ua(r.bindingSignatures,i,F.signature.subkeyBinding,e,t,n);if(!Aa(r.keyPacket,s,n))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await ua([s.embeddedSignature],r.keyPacket,F.signature.keyBinding,e,t,n),ba(r.keyPacket,n),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,n);if((!e||i.getKeyID().equals(e))&&Aa(i,s,n))return ba(i,n),this}catch(e){a=e}throw O.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(e,t=new Date,r={},n=L){await this.verifyPrimaryKey(t,r,n);const i=this.keyPacket;try{ba(i,n)}catch(e){throw O.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort((e,t)=>t.keyPacket.created-e.keyPacket.created||t.keyPacket.algorithm-e.keyPacket.algorithm);let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,n);const e={key:i,bind:r.keyPacket},s=await ua(r.bindingSignatures,i,F.signature.subkeyBinding,e,t,n);if(wa(r.keyPacket,s,n))return ba(r.keyPacket,n),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,n);if((!e||i.getKeyID().equals(e))&&wa(i,s,n))return ba(i,n),this}catch(e){a=e}throw O.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(e,t,r=new Date,n=L){return ga(this.keyPacket,F.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,e,t,r,n)}async verifyPrimaryKey(e=new Date,t={},r=L){const n=this.keyPacket;if(await this.isRevoked(null,null,e,r))throw Error("Primary key is revoked");if(ha(n,await this.getPrimarySelfSignature(e,t,r),e))throw Error("Primary key is expired");if(6!==n.version){const t=await ua(this.directSignatures,n,F.signature.key,{key:n},e,r).catch(()=>{});if(t&&ha(n,t,e))throw Error("Primary key is expired")}}async getExpirationTime(e,t=L){let r;try{const n=await this.getPrimarySelfSignature(null,e,t),i=pa(this.keyPacket,n),s=n.getExpirationTime(),a=6!==this.keyPacket.version&&await ua(this.directSignatures,this.keyPacket,F.signature.key,{key:this.keyPacket},null,t).catch(()=>{});if(a){const e=pa(this.keyPacket,a);r=Math.min(i,s,e)}else r=i<s?i:s}catch(e){r=null}return O.normalizeDate(r)}async getPrimarySelfSignature(e=new Date,t={},r=L){const n=this.keyPacket;if(6===n.version)return ua(this.directSignatures,n,F.signature.key,{key:n},e,r);const{selfCertification:i}=await this.getPrimaryUser(e,t,r);return i}async getPrimaryUser(e=new Date,t={},r=L){const n=this.keyPacket,i=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==t.name&&s.userID.name!==t.name||void 0!==t.email&&s.userID.email!==t.email||void 0!==t.comment&&s.userID.comment!==t.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:n},c=await ua(s.selfCertifications,n,F.signature.certGeneric,o,e,r);i.push({index:a,user:s,selfCertification:c})}catch(e){s=e}if(!i.length)throw s||Error("Could not find primary user");await Promise.all(i.map(async function(t){return t.selfCertification.revoked||t.user.isRevoked(t.selfCertification,null,e,r)}));const a=i.sort(function(e,t){const r=e.selfCertification,n=t.selfCertification;return n.revoked-r.revoked||r.isPrimaryUserID-n.isPrimaryUserID||r.created-n.created}).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,e,r))throw Error("Primary user is revoked");return a}async update(e,t=new Date,r=L){if(!this.hasSameFingerprintAs(e))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&e.isPrivate()){if(this.subkeys.length!==e.subkeys.length||!this.subkeys.every(t=>e.subkeys.some(e=>t.hasSameFingerprintAs(e))))throw Error("Cannot update public key with private key if subkeys mismatch");return e.update(this,r)}const n=this.clone();return await ya(e,n,"revocationSignatures",t,i=>ga(n.keyPacket,F.signature.keyRevocation,n,[i],null,e.keyPacket,t,r)),await ya(e,n,"directSignatures",t),await Promise.all(e.users.map(async e=>{const i=n.users.filter(t=>e.userID&&e.userID.equals(t.userID)||e.userAttribute&&e.userAttribute.equals(t.userAttribute));if(i.length>0)await Promise.all(i.map(n=>n.update(e,t,r)));else{const t=e.clone();t.mainKey=n,n.users.push(t)}})),await Promise.all(e.subkeys.map(async e=>{const i=n.subkeys.filter(t=>t.hasSameFingerprintAs(e));if(i.length>0)await Promise.all(i.map(n=>n.update(e,t,r)));else{const t=e.clone();t.mainKey=n,n.subkeys.push(t)}})),n}async getRevocationCertificate(e=new Date,t=L){const r={key:this.keyPacket},n=await ua(this.revocationSignatures,this.keyPacket,F.signature.keyRevocation,r,e,t),i=new Ks;i.push(n);const s=6!==this.keyPacket.version;return re(F.armor.publicKey,i.write(),null,null,"This is a revocation certificate",s,t)}async applyRevocationCertificate(e,t=new Date,r=L){const n=await te(e),i=(await Ks.fromBinary(n.data,va,r)).findPacket(F.packet.signature);if(!i||i.signatureType!==F.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!i.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await i.verify(this.keyPacket,F.signature.keyRevocation,{key:this.keyPacket},t,void 0,r)}catch(e){throw O.wrapError("Could not verify revocation signature",e)}const s=this.clone();return s.revocationSignatures.push(i),s}async signPrimaryUser(e,t,r,n=L){const{index:i,user:s}=await this.getPrimaryUser(t,r,n),a=await s.certify(e,t,n),o=this.clone();return o.users[i]=a,o}async signAllUsers(e,t=new Date,r=L){const n=this.clone();return n.users=await Promise.all(this.users.map(function(n){return n.certify(e,t,r)})),n}async verifyPrimaryUser(e,t=new Date,r,n=L){const i=this.keyPacket,{user:s}=await this.getPrimaryUser(t,r,n);return e?await s.verifyAllCertifications(e,t,n):[{keyID:i.getKeyID(),valid:await s.verify(t,n).catch(()=>!1)}]}async verifyAllUsers(e,t=new Date,r=L){const n=this.keyPacket,i=[];return await Promise.all(this.users.map(async s=>{const a=e?await s.verifyAllCertifications(e,t,r):[{keyID:n.getKeyID(),valid:await s.verify(t,r).catch(()=>!1)}];i.push(...a.map(e=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:e.keyID,valid:e.valid})))})),i}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach(e=>{Sa.prototype[e]=Ea.prototype[e]});class Ka extends Sa{constructor(e){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],e&&(this.packetListToStructure(e,new Set([F.packet.secretKey,F.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(e=L){const t=6!==this.keyPacket.version;return re(F.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}}class Ca extends Ka{constructor(e){if(super(),this.packetListToStructure(e,new Set([F.packet.publicKey,F.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const e=new Ks,t=this.toPacketList();for(const r of t)switch(r.constructor.tag){case F.packet.secretKey:{const t=Vs.fromSecretKeyPacket(r);e.push(t);break}case F.packet.secretSubkey:{const t=Js.fromSecretSubkeyPacket(r);e.push(t);break}default:e.push(r)}return new Ka(e)}armor(e=L){const t=6!==this.keyPacket.version;return re(F.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}async getDecryptionKeys(e,t=new Date,r={},n=L){const i=this.keyPacket,s=[];let a=null;for(let r=0;r<this.subkeys.length;r++)if(!e||this.subkeys[r].getKeyID().equals(e,!0)){if(this.subkeys[r].keyPacket.isDummy()){a=a||Error("Gnu-dummy key packets cannot be used for decryption");continue}try{const e={key:i,bind:this.subkeys[r].keyPacket},a=await ua(this.subkeys[r].bindingSignatures,i,F.signature.subkeyBinding,e,t,n);ma(this.subkeys[r].keyPacket,a,n)&&s.push(this.subkeys[r])}catch(e){a=e}}const o=await this.getPrimarySelfSignature(t,r,n);if(e&&!i.getKeyID().equals(e,!0)||!ma(i,o,n)||(i.isDummy()?a=a||Error("Gnu-dummy key packets cannot be used for decryption"):s.push(this)),0===s.length)throw a||Error("No decryption key packets found");return s}isDecrypted(){return this.getKeys().some(({keyPacket:e})=>e.isDecrypted())}async validate(e=L){if(!this.isPrivate())throw Error("Cannot validate a public key");let t;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...e,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(t=r.keyPacket)}else t=this.keyPacket;if(t)return t.validate();{const e=this.getKeys();if(e.map(e=>e.keyPacket.isDummy()).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(e.map(async e=>e.keyPacket.validate()))}}clearPrivateParams(){this.getKeys().forEach(({keyPacket:e})=>{e.isDecrypted()&&e.clearPrivateParams()})}async revoke({flag:e=F.reasonForRevocation.noReason,string:t=""}={},r=new Date,n=L){if(!this.isPrivate())throw Error("Need private key for revoking");const i={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await la(i,[],this.keyPacket,{signatureType:F.signature.keyRevocation,reasonForRevocationFlag:F.write(F.reasonForRevocation,e),reasonForRevocationString:t},r,void 0,void 0,void 0,n)),s}async addSubkey(e={}){const t={...L,...e.config};if(e.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(e.rsaBits<t.minRSABits)throw Error(`rsaBits should be at least ${t.minRSABits}, got: ${e.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const n=r.getAlgorithmInfo();n.type=function(e){switch(F.write(F.publicKey,e)){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:case F.publicKey.dsa:return"rsa";case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:return"ecc";case F.publicKey.ed25519:return"curve25519";case F.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(n.algorithm),n.rsaBits=n.bits||4096,n.curve=n.curve||"curve25519Legacy",e=da(e,n);const i=await oa(e,{...t,v6Keys:6===this.keyPacket.version});ba(i,t);const s=await fa(i,r,e,t),a=this.toPacketList();return a.push(i,s),new Ca(a)}}const Da=O.constructAllowedPackets([Vs,Js,Ws,ta,ea,Xs,Es]);function Ua(e){for(const t of e)switch(t.constructor.tag){case F.packet.secretKey:return new Ca(e);case F.packet.publicKey:return new Ka(e)}throw Error("No key packet found")}async function Pa(e,t,r,n){r.passphrase&&await e.encrypt(r.passphrase,n),await Promise.all(t.map(async function(e,t){const i=r.subkeys[t].passphrase;i&&await e.encrypt(i,n)}));const i=new Ks;function s(e,t){return[t,...e.filter(e=>e!==t)]}function a(){const e={};e.keyFlags=[F.keyFlags.certifyKeys|F.keyFlags.signData];const t=s([F.symmetric.aes256,F.symmetric.aes128],n.preferredSymmetricAlgorithm);if(e.preferredSymmetricAlgorithms=t,n.aeadProtect){const r=s([F.aead.gcm,F.aead.eax,F.aead.ocb],n.preferredAEADAlgorithm);e.preferredCipherSuites=r.flatMap(e=>t.map(t=>[t,e]))}return e.preferredHashAlgorithms=s([F.hash.sha512,F.hash.sha256,F.hash.sha3_512,F.hash.sha3_256],n.preferredHashAlgorithm),e.preferredCompressionAlgorithms=s([F.compression.uncompressed,F.compression.zlib,F.compression.zip],n.preferredCompressionAlgorithm),e.features=[0],e.features[0]|=F.features.modificationDetection,n.aeadProtect&&(e.features[0]|=F.features.seipdv2),r.keyExpirationTime>0&&(e.keyExpirationTime=r.keyExpirationTime,e.keyNeverExpires=!1),e}if(i.push(e),6===e.version){const t={key:e},s=a();s.signatureType=F.signature.key;const o=await la(t,[],e,s,r.date,void 0,void 0,void 0,n);i.push(o)}await Promise.all(r.userIDs.map(async function(t,i){const s=ea.fromObject(t),o={userID:s,key:e},c=6!==e.version?a():{};return c.signatureType=F.signature.certPositive,0===i&&(c.isPrimaryUserID=!0),{userIDPacket:s,signaturePacket:await la(o,[],e,c,r.date,void 0,void 0,void 0,n)}})).then(e=>{e.forEach(({userIDPacket:e,signaturePacket:t})=>{i.push(e),i.push(t)})}),await Promise.all(t.map(async function(t,i){const s=r.subkeys[i];return{secretSubkeyPacket:t,subkeySignaturePacket:await fa(t,e,s,n)}})).then(e=>{e.forEach(({secretSubkeyPacket:e,subkeySignaturePacket:t})=>{i.push(e),i.push(t)})});const o={key:e};return i.push(await la(o,[],e,{signatureType:F.signature.keyRevocation,reasonForRevocationFlag:F.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,n)),r.passphrase&&e.clearPrivateParams(),await Promise.all(t.map(async function(e,t){r.subkeys[t].passphrase&&e.clearPrivateParams()})),new Ca(i)}async function xa({armoredKey:e,binaryKey:t,config:r,...n}){if(r={...L,...r},!e&&!t)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!O.isString(e))throw Error("readKey: options.armoredKey must be a string");if(t&&!O.isUint8Array(t))throw Error("readKey: options.binaryKey must be a Uint8Array");const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));let s;if(e){const{type:t,data:r}=await te(e);if(t!==F.armor.publicKey&&t!==F.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=t;const a=await Ks.fromBinary(s,Da,r),o=a.indexOfTag(F.packet.publicKey,F.packet.secretKey);if(0===o.length)throw Error("No key packet found");return Ua(a.slice(o[0],o[1]))}async function Qa({armoredKey:e,binaryKey:t,config:r,...n}){if(r={...L,...r},!e&&!t)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!O.isString(e))throw Error("readPrivateKey: options.armoredKey must be a string");if(t&&!O.isUint8Array(t))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));let s;if(e){const{type:t,data:r}=await te(e);if(t!==F.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=t;const a=await Ks.fromBinary(s,Da,r),o=a.indexOfTag(F.packet.publicKey,F.packet.secretKey);for(let e=0;e<o.length;e++){if(a[o[e]].constructor.tag===F.packet.publicKey)continue;const t=a.slice(o[e],o[e+1]);return new Ca(t)}throw Error("No secret key packet found")}async function Ra({armoredKeys:e,binaryKeys:t,config:r,...n}){r={...L,...r};let i=e||t;if(!i)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!O.isString(e))throw Error("readKeys: options.armoredKeys must be a string");if(t&&!O.isUint8Array(t))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:t,data:r}=await te(e);if(t!==F.armor.publicKey&&t!==F.armor.privateKey)throw Error("Armored text not of type key");i=r}const a=[],o=await Ks.fromBinary(i,Da,r),c=o.indexOfTag(F.packet.publicKey,F.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let e=0;e<c.length;e++){const t=Ua(o.slice(c[e],c[e+1]));a.push(t)}return a}async function Ta({armoredKeys:e,binaryKeys:t,config:r}){r={...L,...r};let n=e||t;if(!n)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!O.isString(e))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(t&&!O.isUint8Array(t))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(e){const{type:t,data:r}=await te(e);if(t!==F.armor.privateKey)throw Error("Armored text not of type private key");n=r}const i=[],s=await Ks.fromBinary(n,Da,r),a=s.indexOfTag(F.packet.publicKey,F.packet.secretKey);for(let e=0;e<a.length;e++){if(s[a[e]].constructor.tag===F.packet.publicKey)continue;const t=s.slice(a[e],a[e+1]),r=new Ca(t);i.push(r)}if(0===i.length)throw Error("No secret key packet found");return i}const Ma=O.constructAllowedPackets([As,xs,zs,Ns,Ys,Gs,js,Is,Es]),Fa=O.constructAllowedPackets([js]),La=O.constructAllowedPackets([Es]);class Na{constructor(e){this.packets=e||new Ks}getEncryptionKeyIDs(){const e=[];return this.packets.filterByTag(F.packet.publicKeyEncryptedSessionKey).forEach(function(t){e.push(t.publicKeyID)}),e}getSigningKeyIDs(){const e=this.unwrapCompressed(),t=e.packets.filterByTag(F.packet.onePassSignature);return t.length>0?t.map(e=>e.issuerKeyID):e.packets.filterByTag(F.packet.signature).map(e=>e.issuerKeyID)}async decrypt(e,t,r,n=new Date,i=L){const s=this.packets.filterByTag(F.packet.symmetricallyEncryptedData,F.packet.symEncryptedIntegrityProtectedData,F.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(e,t,o,n,i);let u=null;const h=Promise.all(c.map(async({algorithm:e,data:t})=>{if(!O.isUint8Array(t)||!a.cipherAlgorithm&&!O.isString(e))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||F.write(F.symmetric,e);await a.decrypt(r,t,i)}catch(e){O.printDebugError(e),u=e}}));if(x(a.encrypted),a.encrypted=null,await h,!a.packets||!a.packets.length)throw u||Error("Decryption failed.");const f=new Na(a.packets);return a.packets=new Ks,f}async decryptSessionKeys(e,t,r,n=new Date,i=L){let s,a=[];if(t){const e=this.packets.filterByTag(F.packet.symEncryptedSessionKey);if(0===e.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(t.map(async function(t,r){let n;n=r?await Ks.fromBinary(e.write(),Fa,i):e,await Promise.all(n.map(async function(e){try{await e.decrypt(t),a.push(e)}catch(e){O.printDebugError(e),e instanceof pi&&(s=e)}}))}))}else{if(!e)throw Error("No key or password specified.");{const t=this.packets.filterByTag(F.packet.publicKeyEncryptedSessionKey);if(0===t.length)throw Error("No public key encrypted session key packet found.");await Promise.all(t.map(async function(t){await Promise.all(e.map(async function(e){let o;try{o=(await e.getDecryptionKeys(t.publicKeyID,null,void 0,i)).map(e=>e.keyPacket)}catch(e){return void(s=e)}let c=[F.symmetric.aes256,F.symmetric.aes128,F.symmetric.tripledes,F.symmetric.cast5];try{const t=await e.getPrimarySelfSignature(n,void 0,i);t.preferredSymmetricAlgorithms&&(c=c.concat(t.preferredSymmetricAlgorithms))}catch(e){}await Promise.all(o.map(async function(e){if(!e.isDecrypted())throw Error("Decryption key is not decrypted.");if(!i.constantTimePKCS1Decryption||t.publicKeyAlgorithm!==F.publicKey.rsaEncrypt&&t.publicKeyAlgorithm!==F.publicKey.rsaEncryptSign&&t.publicKeyAlgorithm!==F.publicKey.rsaSign&&t.publicKeyAlgorithm!==F.publicKey.elgamal)try{await t.decrypt(e);const n=r||t.sessionKeyAlgorithm;if(n&&!c.includes(F.write(F.symmetric,n)))throw Error("A non-preferred symmetric algorithm was used.");a.push(t)}catch(e){O.printDebugError(e),s=e}else{const n=t.write();await Promise.all((r?[r]:Array.from(i.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map(async t=>{const r=new Gs;r.read(n);const i={sessionKeyAlgorithm:t,sessionKey:Cn(t)};try{await r.decrypt(e,i),a.push(r)}catch(e){O.printDebugError(e),s=e}}))}}))})),x(t.encrypted),t.encrypted=null}))}}if(a.length>0){if(a.length>1){const e=new Set;a=a.filter(t=>{const r=t.sessionKeyAlgorithm+O.uint8ArrayToString(t.sessionKey);return!e.has(r)&&(e.add(r),!0)})}return a.map(e=>({data:e.sessionKey,algorithm:e.sessionKeyAlgorithm&&F.read(F.symmetric,e.sessionKeyAlgorithm)}))}throw s||Error("Session key decryption failed.")}getLiteralData(){const e=this.unwrapCompressed().packets.findPacket(F.packet.literalData);return e&&e.getBytes()||null}getFilename(){const e=this.unwrapCompressed().packets.findPacket(F.packet.literalData);return e&&e.getFilename()||null}getText(){const e=this.unwrapCompressed().packets.findPacket(F.packet.literalData);return e?e.getText():null}static async generateSessionKey(e=[],t=new Date,r=[],n=L){const{symmetricAlgo:i,aeadAlgo:s}=await async function(e=[],t=new Date,r=[],n=L){const i=await Promise.all(e.map((e,i)=>e.getPrimarySelfSignature(t,r[i],n)));if(e.length?i.every(e=>e.features&&e.features[0]&F.features.seipdv2):n.aeadProtect){const e={symmetricAlgo:F.symmetric.aes128,aeadAlgo:F.aead.ocb},t=[{symmetricAlgo:n.preferredSymmetricAlgorithm,aeadAlgo:n.preferredAEADAlgorithm},{symmetricAlgo:n.preferredSymmetricAlgorithm,aeadAlgo:F.aead.ocb},{symmetricAlgo:F.symmetric.aes128,aeadAlgo:n.preferredAEADAlgorithm}];for(const e of t)if(i.every(t=>t.preferredCipherSuites&&t.preferredCipherSuites.some(t=>t[0]===e.symmetricAlgo&&t[1]===e.aeadAlgo)))return e;return e}const s=F.symmetric.aes128,a=n.preferredSymmetricAlgorithm;return{symmetricAlgo:i.every(e=>e.preferredSymmetricAlgorithms&&e.preferredSymmetricAlgorithms.includes(a))?a:s,aeadAlgo:void 0}}(e,t,r,n),a=F.read(F.symmetric,i),o=s?F.read(F.aead,s):void 0;return await Promise.all(e.map(e=>e.getEncryptionKey().catch(()=>null).then(e=>{if(e&&(e.keyPacket.algorithm===F.publicKey.x25519||e.keyPacket.algorithm===F.publicKey.x448)&&!o&&!O.isAES(i))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")}))),{data:Cn(i),algorithm:a,aeadAlgorithm:o}}async encrypt(e,t,r,n=!1,i=[],s=new Date,a=[],o=L){if(r){if(!O.isUint8Array(r.data)||!O.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(e&&e.length)r=await Na.generateSessionKey(e,s,a,o);else{if(!t||!t.length)throw Error("No keys, passwords, or session key provided.");r=await Na.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:u,aeadAlgorithm:h}=r,f=await Na.encryptSessionKey(c,u,h,e,t,n,i,s,a,o),l=Ns.fromObject({version:h?2:1,aeadAlgorithm:h?F.write(F.aead,h):null});l.packets=this.packets;const y=F.write(F.symmetric,u);return await l.encrypt(y,c,o),f.packets.push(l),l.packets=new Ks,f}static async encryptSessionKey(e,t,r,n,i,s=!1,a=[],o=new Date,c=[],u=L){const h=new Ks,f=F.write(F.symmetric,t),l=r&&F.write(F.aead,r);if(n){const t=await Promise.all(n.map(async function(t,r){const n=await t.getEncryptionKey(a[r],o,c,u),i=Gs.fromObject({version:l?6:3,encryptionKeyPacket:n.keyPacket,anonymousRecipient:s,sessionKey:e,sessionKeyAlgorithm:f});return await i.encrypt(n.keyPacket),delete i.sessionKey,i}));h.push(...t)}if(i){const t=async function(e,t){try{return await e.decrypt(t),1}catch(e){return 0}},r=(e,t)=>e+t,n=async function(e,s,a,o){const c=new js(u);return c.sessionKey=e,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,u),u.passwordCollisionCheck&&1!==(await Promise.all(i.map(e=>t(c,e)))).reduce(r)?n(e,s,o):(delete c.sessionKey,c)},s=await Promise.all(i.map(t=>n(e,f,l,t)));h.push(...s)}return new Na(h)}async sign(e=[],t=[],r=null,n=[],i=new Date,s=[],a=[],o=[],c=L){const u=new Ks,h=this.packets.findPacket(F.packet.literalData);if(!h)throw Error("No literal data packet to sign.");const f=await Oa(h,e,t,r,n,i,s,a,o,!1,c),l=f.map((e,t)=>Is.fromSignaturePacket(e,0===t)).reverse();return u.push(...l),u.push(h),u.push(...f),new Na(u)}compress(e,t=L){if(e===F.compression.uncompressed)return this;const r=new xs(t);r.algorithm=e,r.packets=this.packets;const n=new Ks;return n.push(r),new Na(n)}async signDetached(e=[],t=[],r=null,n=[],i=[],s=new Date,a=[],o=[],c=L){const u=this.packets.findPacket(F.packet.literalData);if(!u)throw Error("No literal data packet to sign.");return new sa(await Oa(u,e,t,r,n,i,s,a,o,!0,c))}async verify(e,t=new Date,r=L){const n=this.unwrapCompressed(),i=n.packets.filterByTag(F.packet.literalData);if(1!==i.length)throw Error("Can only verify message with one literal data packet.");let s=n.packets;h(s.stream)&&(s=s.concat(await P(s.stream,e=>e||[])));const a=s.filterByTag(F.packet.onePassSignature).reverse(),o=s.filterByTag(F.packet.signature);return a.length&&!o.length&&O.isStream(s.stream)&&!h(s.stream)?(await Promise.all(a.map(async e=>{e.correspondingSig=new Promise((t,r)=>{e.correspondingSigResolve=t,e.correspondingSigReject=r}),e.signatureData=Q(async()=>(await e.correspondingSig).signatureData),e.hashed=P(await e.hash(e.signatureType,i[0],void 0,!1)),e.hashed.catch(()=>{})})),s.stream=I(s.stream,async(e,t)=>{const r=R(e),n=T(t);try{for(let e=0;e<a.length;e++){const{value:t}=await r.read();a[e].correspondingSigResolve(t)}await r.readToEnd(),await n.ready,await n.close()}catch(e){a.forEach(t=>{t.correspondingSigReject(e)}),await n.abort(e)}}),Ha(a,i,e,t,!1,r)):Ha(o,i,e,t,!1,r)}verifyDetached(e,t,r=new Date,n=L){const i=this.unwrapCompressed().packets.filterByTag(F.packet.literalData);if(1!==i.length)throw Error("Can only verify message with one literal data packet.");return Ha(e.packets.filterByTag(F.packet.signature),i,t,r,!0,n)}unwrapCompressed(){const e=this.packets.filterByTag(F.packet.compressedData);return e.length?new Na(e[0].packets):this}async appendSignature(e,t=L){await this.packets.read(O.isUint8Array(e)?e:(await te(e)).data,La,t)}write(){return this.packets.write()}armor(e=L){const t=this.packets[this.packets.length-1],r=t.constructor.tag===Ns.tag?2!==t.version:this.packets.some(e=>e.constructor.tag===Es.tag&&6!==e.version);return re(F.armor.message,this.write(),null,null,null,r,e)}}async function Oa(e,t,r=[],n=null,i=[],s=new Date,a=[],o=[],c=[],u=!1,h=L){const f=new Ks,l=null===e.text?F.signature.binary:F.signature.text;if(await Promise.all(t.map(async(t,n)=>{const f=a[n];if(!t.isPrivate())throw Error("Need private key for signing");const y=await t.getSigningKey(i[n],s,f,h);return la(e,r.length?r:[t],y.keyPacket,{signatureType:l},s,o,c,u,h)})).then(e=>{f.push(...e)}),n){const e=n.packets.filterByTag(F.packet.signature);f.push(...e)}return f}async function Ha(e,t,r,n=new Date,i=!1,s=L){return Promise.all(e.filter(function(e){return["text","binary"].includes(F.read(F.signature,e.signatureType))}).map(async function(e){return async function(e,t,r,n=new Date,i=!1,s=L){let a,o;for(const t of r){const r=t.getKeys(e.issuerKeyID);if(r.length>0){a=t,o=r[0];break}}const c=e instanceof Is?e.correspondingSig:e,u={keyID:e.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+e.issuerKeyID.toHex());await e.verify(o.keyPacket,e.signatureType,t[0],n,i,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(e){if(!s.allowInsecureVerificationWithReformattedKeys||!e.message.match(/Signature creation time is in the future/))throw e;await a.getSigningKey(o.getKeyID(),n,void 0,s)}return!0})(),signature:(async()=>{const e=await c,t=new Ks;return e&&t.push(e),new sa(t)})()};return u.signature.catch(()=>{}),u.verified.catch(()=>{}),u}(e,t,r,n,i,s)}))}async function za({armoredMessage:e,binaryMessage:t,config:r,...n}){r={...L,...r};let i=e||t;if(!i)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(e&&!O.isString(e)&&!O.isStream(e))throw Error("readMessage: options.armoredMessage must be a string or stream");if(t&&!O.isUint8Array(t)&&!O.isStream(t))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=O.isStream(i);if(e){const{type:e,data:t}=await te(i);if(e!==F.armor.message)throw Error("Armored text not of type message");i=t}const o=await Ks.fromBinary(i,Ma,r,new Us),c=new Na(o);return c.fromStream=a,c}async function Ga({text:e,binary:t,filename:r,date:n=new Date,format:i=(void 0!==e?"utf8":"binary"),...s}){const a=void 0!==e?e:t;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(e&&!O.isString(e)&&!O.isStream(e))throw Error("createMessage: options.text must be a string or stream");if(t&&!O.isUint8Array(t)&&!O.isStream(t))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=O.isStream(a),u=new As(n);void 0!==e?u.setText(a,F.write(F.literal,i)):u.setBytes(a,F.write(F.literal,i)),void 0!==r&&u.setFilename(r);const h=new Ks;h.push(u);const f=new Na(h);return f.fromStream=c,f}const _a=O.constructAllowedPackets([Es]);class ja{constructor(e,t){if(this.text=O.removeTrailingSpaces(e).replace(/\r?\n/g,"\r\n"),t&&!(t instanceof sa))throw Error("Invalid signature input");this.signature=t||new sa(new Ks)}getSigningKeyIDs(){const e=[];return this.signature.packets.forEach(function(t){e.push(t.issuerKeyID)}),e}async sign(e,t=[],r=null,n=[],i=new Date,s=[],a=[],o=[],c=L){const u=new As;u.setText(this.text);const h=new sa(await Oa(u,e,t,r,n,i,s,a,o,!0,c));return new ja(this.text,h)}verify(e,t=new Date,r=L){const n=this.signature.packets.filterByTag(F.packet.signature),i=new As;return i.setText(this.text),Ha(n,[i],e,t,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(e=L){const t=this.signature.packets.some(e=>6!==e.version),r={hash:t?Array.from(new Set(this.signature.packets.map(e=>F.read(F.hash,e.hashAlgorithm).toUpperCase()))).join():null,text:this.text,data:this.signature.packets.write()};return re(F.armor.signed,r,void 0,void 0,void 0,t,e)}}async function Va({cleartextMessage:e,config:t,...r}){if(t={...L,...t},!e)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!O.isString(e))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const n=Object.keys(r);if(n.length>0)throw Error("Unknown option: "+n.join(", "));const i=await te(e);if(i.type!==F.armor.signed)throw Error("No cleartext signed message.");const s=await Ks.fromBinary(i.data,_a,t);!function(e,t){const r=[];if(e.forEach(e=>{const t=e.match(/^Hash: (.+)$/);if(!t)throw Error('Only "Hash" header allowed in cleartext signed message');{const e=t[1].replace(/\s/g,"").split(",").map(e=>{try{return F.write(F.hash,e.toLowerCase())}catch(t){throw Error("Unknown hash algorithm in armor header: "+e.toLowerCase())}});r.push(...e)}}),r.length&&!function(e){const r=e=>t=>e.hashAlgorithm===t;for(let n=0;n<t.length;n++)if(t[n].constructor.tag===F.packet.signature&&!e.some(r(t[n])))return!1;return!0}(r))throw Error("Hash algorithm mismatch in armor header and signature")}(i.headers,s);const a=new sa(s);return new ja(i.text,a)}async function qa({text:e,...t}){if(!e)throw Error("createCleartextMessage: must pass options object containing `text`");if(!O.isString(e))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(t);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new ja(e)}async function Ya({userIDs:e=[],passphrase:t,type:r,curve:n,rsaBits:i=4096,keyExpirationTime:s=0,date:a=new Date,subkeys:o=[{}],format:c="armored",config:u,...h}){ho(u={...L,...u}),r||n?(r=r||"ecc",n=n||"curve25519Legacy"):(r=u.v6Keys?"curve25519":"ecc",n="curve25519Legacy"),e=fo(e);const f=Object.keys(h);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(0===e.length&&!u.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&i<u.minRSABits)throw Error(`rsaBits should be at least ${u.minRSABits}, got: ${i}`);const l={userIDs:e,passphrase:t,type:r,rsaBits:i,curve:n,keyExpirationTime:s,date:a,subkeys:o};try{const{key:e,revocationCertificate:t}=await async function(e,t){e.sign=!0,(e=da(e)).subkeys=e.subkeys.map((t,r)=>da(e.subkeys[r],e));let r=[ca(e,t)];r=r.concat(e.subkeys.map(e=>oa(e,t)));const n=await Promise.all(r),i=await Pa(n[0],n.slice(1),e,t),s=await i.getRevocationCertificate(e.date,t);return i.revocationSignatures=[],{key:i,revocationCertificate:s}}(l,u);return e.getKeys().forEach(({keyPacket:e})=>ba(e,u)),{privateKey:go(e,c,u),publicKey:go(e.toPublic(),c,u),revocationCertificate:t}}catch(e){throw O.wrapError("Error generating keypair",e)}}async function Za({privateKey:e,userIDs:t=[],passphrase:r,keyExpirationTime:n=0,date:i,format:s="armored",config:a,...o}){ho(a={...L,...a}),t=fo(t);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===t.length&&6!==e.keyPacket.version)throw Error("UserIDs are required for V4 keys");const u={privateKey:e,userIDs:t,passphrase:r,keyExpirationTime:n,date:i};try{const{key:e,revocationCertificate:t}=await async function(e,t){e=o(e);const{privateKey:r}=e;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every(({keyPacket:e})=>e.isDecrypted()))throw Error("Key is not decrypted");const n=r.keyPacket;e.subkeys||(e.subkeys=await Promise.all(r.subkeys.map(async e=>{const r=e.keyPacket,i={key:n,bind:r},s=await ua(e.bindingSignatures,n,F.signature.subkeyBinding,i,null,t).catch(()=>({}));return{sign:s.keyFlags&&s.keyFlags[0]&F.keyFlags.signData}})));const i=r.subkeys.map(e=>e.keyPacket);if(e.subkeys.length!==i.length)throw Error("Number of subkey options does not match number of subkeys");e.subkeys=e.subkeys.map(t=>o(t,e));const s=await Pa(n,i,e,t),a=await s.getRevocationCertificate(e.date,t);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(e,t={}){return e.keyExpirationTime=e.keyExpirationTime||t.keyExpirationTime,e.passphrase=O.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e}}(u,a);return{privateKey:go(e,s,a),publicKey:go(e.toPublic(),s,a),revocationCertificate:t}}catch(e){throw O.wrapError("Error reformatting keypair",e)}}async function Ja({key:e,revocationCertificate:t,reasonForRevocation:r,date:n=new Date,format:i="armored",config:s,...a}){ho(s={...L,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=t?await e.applyRevocationCertificate(t,n,s):await e.revoke(r,n,s);return a.isPrivate()?{privateKey:go(a,i,s),publicKey:go(a.toPublic(),i,s)}:{privateKey:null,publicKey:go(a,i,s)}}catch(e){throw O.wrapError("Error revoking key",e)}}async function Xa({privateKey:e,passphrase:t,config:r,...n}){ho(r={...L,...r});const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));if(!e.isPrivate())throw Error("Cannot decrypt a public key");const s=e.clone(!0),a=O.isArray(t)?t:[t];try{return await Promise.all(s.getKeys().map(e=>O.anyPromise(a.map(t=>e.keyPacket.decrypt(t))))),await s.validate(r),s}catch(e){throw s.clearPrivateParams(),O.wrapError("Error decrypting private key",e)}}async function Wa({privateKey:e,passphrase:t,config:r,...n}){ho(r={...L,...r});const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));if(!e.isPrivate())throw Error("Cannot encrypt a public key");const s=e.clone(!0),a=s.getKeys(),o=O.isArray(t)?t:Array(a.length).fill(t);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map(async(e,t)=>{const{keyPacket:n}=e;await n.encrypt(o[t],r),n.clearPrivateParams()})),s}catch(e){throw s.clearPrivateParams(),O.wrapError("Error encrypting private key",e)}}async function $a({message:e,encryptionKeys:t,signingKeys:r,passwords:n,sessionKey:i,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:u=[],date:h=new Date,signingUserIDs:f=[],encryptionUserIDs:l=[],signatureNotations:y=[],config:g,...p}){if(ho(g={...L,...g}),ao(e),co(s),t=fo(t),r=fo(r),n=fo(n),c=fo(c),u=fo(u),f=fo(f),l=fo(l),y=fo(y),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const d=Object.keys(p);if(d.length>0)throw Error("Unknown option: "+d.join(", "));r||(r=[]);try{if((r.length||a)&&(e=await e.sign(r,t,a,c,h,f,u,y,g)),e=e.compress(await async function(e=[],t=new Date,r=[],n=L){const i=F.compression.uncompressed,s=n.preferredCompressionAlgorithm,a=await Promise.all(e.map(async function(e,i){const a=(await e.getPrimarySelfSignature(t,r[i],n)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0}));return a.every(Boolean)?s:i}(t,h,l,g),g),e=await e.encrypt(t,n,i,o,u,h,l,g),"object"===s)return e;const p="armored"===s?e.armor(g):e.write();return await lo(p)}catch(e){throw O.wrapError("Error encrypting message",e)}}async function eo({message:e,decryptionKeys:t,passwords:r,sessionKeys:n,verificationKeys:i,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:u,...h}){if(ho(u={...L,...u}),ao(e),i=fo(i),t=fo(t),r=fo(r),n=fo(n),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(h.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const f=Object.keys(h);if(f.length>0)throw Error("Unknown option: "+f.join(", "));try{const h=await e.decrypt(t,r,n,c,u);i||(i=[]);const f={};if(f.signatures=o?await h.verifyDetached(o,i,c,u):await h.verify(i,c,u),f.data="binary"===a?h.getLiteralData():h.getText(),f.filename=h.getFilename(),yo(f,e,...new Set([h,h.unwrapCompressed()])),s){if(0===i.length)throw Error("Verification keys are required to verify message signatures");if(0===f.signatures.length)throw Error("Message is not signed");f.data=b([f.data,Q(async()=>(await O.anyPromise(f.signatures.map(e=>e.verified)),"binary"===a?new Uint8Array:""))])}return f.data=await lo(f.data),f}catch(e){throw O.wrapError("Error decrypting message",e)}}async function to({message:e,signingKeys:t,recipientKeys:r=[],format:n="armored",detached:i=!1,signingKeyIDs:s=[],date:a=new Date,signingUserIDs:o=[],recipientUserIDs:c=[],signatureNotations:u=[],config:h,...f}){if(ho(h={...L,...h}),oo(e),co(n),t=fo(t),s=fo(s),o=fo(o),r=fo(r),c=fo(c),u=fo(u),f.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==f.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const l=Object.keys(f);if(l.length>0)throw Error("Unknown option: "+l.join(", "));if(e instanceof ja&&"binary"===n)throw Error("Cannot return signed cleartext message in binary format");if(e instanceof ja&&i)throw Error("Cannot detach-sign a cleartext message");if(!t||0===t.length)throw Error("No signing keys provided");try{let f;return f=i?await e.signDetached(t,r,void 0,s,a,o,c,u,h):await e.sign(t,r,void 0,s,a,o,c,u,h),"object"===n?f:(f="armored"===n?f.armor(h):f.write(),i&&(f=I(e.packets.write(),async(e,t)=>{await Promise.all([k(f,t),P(e).catch(()=>{})])})),await lo(f))}catch(e){throw O.wrapError("Error signing message",e)}}async function ro({message:e,verificationKeys:t,expectSigned:r=!1,format:n="utf8",signature:i=null,date:s=new Date,config:a,...o}){if(ho(a={...L,...a}),oo(e),t=fo(t),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(e instanceof ja&&"binary"===n)throw Error("Can't return cleartext message data as binary");if(e instanceof ja&&i)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=i?await e.verifyDetached(i,t,s,a):await e.verify(t,s,a),o.data="binary"===n?e.getLiteralData():e.getText(),e.fromStream&&!i&&yo(o,...new Set([e,e.unwrapCompressed()])),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=b([o.data,Q(async()=>(await O.anyPromise(o.signatures.map(e=>e.verified)),"binary"===n?new Uint8Array:""))])}return o.data=await lo(o.data),o}catch(e){throw O.wrapError("Error verifying signed message",e)}}async function no({encryptionKeys:e,date:t=new Date,encryptionUserIDs:r=[],config:n,...i}){if(ho(n={...L,...n}),e=fo(e),r=fo(r),i.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await Na.generateSessionKey(e,t,r,n)}catch(e){throw O.wrapError("Error generating session key",e)}}async function io({data:e,algorithm:t,aeadAlgorithm:r,encryptionKeys:n,passwords:i,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:u=[],config:h,...f}){if(ho(h={...L,...h}),function(e){if(!O.isUint8Array(e))throw Error("Parameter [data] must be of type Uint8Array")}(e),function(e){if(!O.isString(e))throw Error("Parameter [algorithm] must be of type String")}(t),co(s),n=fo(n),i=fo(i),o=fo(o),u=fo(u),f.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const l=Object.keys(f);if(l.length>0)throw Error("Unknown option: "+l.join(", "));if(!(n&&0!==n.length||i&&0!==i.length))throw Error("No encryption keys or passwords provided.");try{return go(await Na.encryptSessionKey(e,t,r,n,i,a,o,c,u,h),s,h)}catch(e){throw O.wrapError("Error encrypting session key",e)}}async function so({message:e,decryptionKeys:t,passwords:r,date:n=new Date,config:i,...s}){if(ho(i={...L,...i}),ao(e),t=fo(t),r=fo(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await e.decryptSessionKeys(t,r,void 0,n,i)}catch(e){throw O.wrapError("Error decrypting session keys",e)}}function ao(e){if(!(e instanceof Na))throw Error("Parameter [message] needs to be of type Message")}function oo(e){if(!(e instanceof ja||e instanceof Na))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function co(e){if("armored"!==e&&"binary"!==e&&"object"!==e)throw Error("Unsupported format "+e)}const uo=Object.keys(L).length;function ho(e){const t=Object.keys(e);if(t.length!==uo)for(const e of t)if(void 0===L[e])throw Error("Unknown config property: "+e)}function fo(e){return e&&!O.isArray(e)&&(e=[e]),e}async function lo(e){return"array"===O.isStream(e)?P(e):e}function yo(e,t,...r){e.data=I(t.packets.stream,async(t,n)=>{await k(e.data,n,{preventClose:!0});const i=T(n);try{await P(t,e=>e),await Promise.all(r.map(e=>P(e.packets.stream,e=>e))),await i.close()}catch(e){await i.abort(e)}})}function go(e,t,r){switch(t){case"object":return e;case"armored":return e.armor(r);case"binary":return e.write();default:throw Error("Unsupported format "+t)}}const po="object"==typeof n&&"crypto"in n?n.crypto:void 0;function Ao(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&"Uint8Array"===e.constructor.name}function wo(e){if(!Number.isSafeInteger(e)||e<0)throw Error("positive integer expected, got "+e)}function mo(e,...t){if(!Ao(e))throw Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw Error("Uint8Array expected of length "+t+", got length="+e.length)}function bo(e){if("function"!=typeof e||"function"!=typeof e.create)throw Error("Hash should be wrapped by utils.createHasher");wo(e.outputLen),wo(e.blockLen)}function ko(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Eo(e,t){mo(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}function vo(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Bo(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Io(e,t){return e<<32-t|e>>>t}function So(e,t){return e<<t|e>>>32-t>>>0}const Ko=(()=>68===new Uint8Array(new Uint32Array([287454020]).buffer)[0])()?e=>e:function(e){for(let r=0;r<e.length;r++)e[r]=(t=e[r])<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255;var t;return e},Co=(()=>"function"==typeof Uint8Array.from([]).toHex&&"function"==typeof Uint8Array.fromHex)(),Do=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Uo(e){if(mo(e),Co)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=Do[e[r]];return t}function Po(e){return e>=48&&e<=57?e-48:e>=65&&e<=70?e-55:e>=97&&e<=102?e-87:void 0}function xo(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);if(Co)return Uint8Array.fromHex(e);const t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);const n=new Uint8Array(r);for(let t=0,i=0;t<r;t++,i+=2){const r=Po(e.charCodeAt(i)),s=Po(e.charCodeAt(i+1));if(void 0===r||void 0===s){const t=e[i]+e[i+1];throw Error('hex string expected, got non-hex character "'+t+'" at index '+i)}n[t]=16*r+s}return n}function Qo(e){return"string"==typeof e&&(e=function(e){if("string"!=typeof e)throw Error("string expected");return new Uint8Array((new TextEncoder).encode(e))}(e)),mo(e),e}function Ro(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];mo(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}class To{}function Mo(e){const t=t=>e().update(Qo(t)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}const Fo=Mo;function Lo(e=32){if(po&&"function"==typeof po.getRandomValues)return po.getRandomValues(new Uint8Array(e));if(po&&"function"==typeof po.randomBytes)return Uint8Array.from(po.randomBytes(e));throw Error("crypto.getRandomValues must be defined")}const No=BigInt(0),Oo=BigInt(1);function Ho(e,t=""){if("boolean"!=typeof e)throw Error((t&&`"${t}"`)+"expected boolean, got type="+typeof e);return e}function zo(e,t,r=""){const n=Ao(e),i=e?.length,s=void 0!==t;if(!n||s&&i!==t)throw Error((r&&`"${r}" `)+"expected Uint8Array"+(s?" of length "+t:"")+", got "+(n?"length="+i:"type="+typeof e));return e}function Go(e){const t=e.toString(16);return 1&t.length?"0"+t:t}function _o(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);return""===e?No:BigInt("0x"+e)}function jo(e){return _o(Uo(e))}function Vo(e){return mo(e),_o(Uo(Uint8Array.from(e).reverse()))}function qo(e,t){return xo(e.toString(16).padStart(2*t,"0"))}function Yo(e,t){return qo(e,t).reverse()}function Zo(e,t,r){let n;if("string"==typeof t)try{n=xo(t)}catch(t){throw Error(e+" must be hex string or Uint8Array, cause: "+t)}else{if(!Ao(t))throw Error(e+" must be hex string or Uint8Array");n=Uint8Array.from(t)}const i=n.length;if("number"==typeof r&&i!==r)throw Error(e+" of length "+r+" expected, got "+i);return n}function Jo(e){return Uint8Array.from(e)}const Xo=e=>"bigint"==typeof e&&No<=e;function Wo(e,t,r,n){if(!function(e,t,r){return Xo(e)&&Xo(t)&&Xo(r)&&t<=e&&e<r}(t,r,n))throw Error("expected valid "+e+": "+r+" <= n < "+n+", got "+t)}function $o(e){let t;for(t=0;e>No;e>>=Oo,t+=1);return t}const ec=e=>(Oo<<BigInt(e))-Oo;function tc(e,t,r={}){if(!e||"object"!=typeof e)throw Error("expected valid options object");function n(t,r,n){const i=e[t];if(n&&void 0===i)return;const s=typeof i;if(s!==r||null===i)throw Error(`param "${t}" is invalid: expected ${r}, got ${s}`)}Object.entries(t).forEach(([e,t])=>n(e,t,!1)),Object.entries(r).forEach(([e,t])=>n(e,t,!0))}function rc(e){const t=new WeakMap;return(r,...n)=>{const i=t.get(r);if(void 0!==i)return i;const s=e(r,...n);return t.set(r,s),s}}const nc=BigInt(0),ic=BigInt(1),sc=BigInt(2),ac=BigInt(3),oc=BigInt(4),cc=BigInt(5),uc=BigInt(7),hc=BigInt(8),fc=BigInt(9),lc=BigInt(16);function yc(e,t){const r=e%t;return r>=nc?r:t+r}function gc(e,t,r){let n=e;for(;t-- >nc;)n*=n,n%=r;return n}function pc(e,t){if(e===nc)throw Error("invert: expected non-zero number");if(t<=nc)throw Error("invert: expected positive modulus, got "+t);let r=yc(e,t),n=t,i=nc,s=ic;for(;r!==nc;){const e=n%r,t=i-s*(n/r);n=r,r=e,i=s,s=t}if(n!==ic)throw Error("invert: does not exist");return yc(i,t)}function dc(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function Ac(e,t){const r=(e.ORDER+ic)/oc,n=e.pow(t,r);return dc(e,n,t),n}function wc(e,t){const r=(e.ORDER-cc)/hc,n=e.mul(t,sc),i=e.pow(n,r),s=e.mul(t,i),a=e.mul(e.mul(s,sc),i),o=e.mul(s,e.sub(a,e.ONE));return dc(e,o,t),o}function mc(e){if(e<ac)throw Error("sqrt is not defined for small field");let t=e-ic,r=0;for(;t%sc===nc;)t/=sc,r++;let n=sc;const i=Bc(e);for(;1===Ec(i,n);)if(n++>1e3)throw Error("Cannot find square root: probably non-prime P");if(1===r)return Ac;let s=i.pow(n,t);const a=(t+ic)/sc;return function(e,n){if(e.is0(n))return n;if(1!==Ec(e,n))throw Error("Cannot find square root");let i=r,o=e.mul(e.ONE,s),c=e.pow(n,t),u=e.pow(n,a);for(;!e.eql(c,e.ONE);){if(e.is0(c))return e.ZERO;let t=1,r=e.sqr(c);for(;!e.eql(r,e.ONE);)if(t++,r=e.sqr(r),t===i)throw Error("Cannot find square root");const n=ic<<BigInt(i-t-1),s=e.pow(o,n);i=t,o=e.sqr(s),c=e.mul(c,o),u=e.mul(u,s)}return u}}const bc=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function kc(e,t,r=!1){const n=Array(t.length).fill(r?e.ZERO:void 0),i=t.reduce((t,r,i)=>e.is0(r)?t:(n[i]=t,e.mul(t,r)),e.ONE),s=e.inv(i);return t.reduceRight((t,r,i)=>e.is0(r)?t:(n[i]=e.mul(t,n[i]),e.mul(t,r)),s),n}function Ec(e,t){const r=(e.ORDER-ic)/sc,n=e.pow(t,r),i=e.eql(n,e.ONE),s=e.eql(n,e.ZERO),a=e.eql(n,e.neg(e.ONE));if(!i&&!s&&!a)throw Error("invalid Legendre symbol result");return i?1:s?0:-1}function vc(e,t){void 0!==t&&wo(t);const r=void 0!==t?t:e.toString(2).length;return{nBitLength:r,nByteLength:Math.ceil(r/8)}}function Bc(e,t,r=!1,n={}){if(e<=nc)throw Error("invalid field: expected ORDER > 0, got "+e);let i,s,a,o=!1;if("object"==typeof t&&null!=t){if(n.sqrt||r)throw Error("cannot specify opts in two arguments");const e=t;e.BITS&&(i=e.BITS),e.sqrt&&(s=e.sqrt),"boolean"==typeof e.isLE&&(r=e.isLE),"boolean"==typeof e.modFromBytes&&(o=e.modFromBytes),a=e.allowedLengths}else"number"==typeof t&&(i=t),n.sqrt&&(s=n.sqrt);const{nBitLength:c,nByteLength:u}=vc(e,i);if(u>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");let h;const f=Object.freeze({ORDER:e,isLE:r,BITS:c,BYTES:u,MASK:ec(c),ZERO:nc,ONE:ic,allowedLengths:a,create:t=>yc(t,e),isValid:t=>{if("bigint"!=typeof t)throw Error("invalid field element: expected bigint, got "+typeof t);return nc<=t&&t<e},is0:e=>e===nc,isValidNot0:e=>!f.is0(e)&&f.isValid(e),isOdd:e=>(e&ic)===ic,neg:t=>yc(-t,e),eql:(e,t)=>e===t,sqr:t=>yc(t*t,e),add:(t,r)=>yc(t+r,e),sub:(t,r)=>yc(t-r,e),mul:(t,r)=>yc(t*r,e),pow:(e,t)=>function(e,t,r){if(r<nc)throw Error("invalid exponent, negatives unsupported");if(r===nc)return e.ONE;if(r===ic)return t;let n=e.ONE,i=t;for(;r>nc;)r&ic&&(n=e.mul(n,i)),i=e.sqr(i),r>>=ic;return n}(f,e,t),div:(t,r)=>yc(t*pc(r,e),e),sqrN:e=>e*e,addN:(e,t)=>e+t,subN:(e,t)=>e-t,mulN:(e,t)=>e*t,inv:t=>pc(t,e),sqrt:s||(t=>(h||(h=function(e){return e%oc===ac?Ac:e%hc===cc?wc:e%lc===fc?function(e){const t=Bc(e),r=mc(e),n=r(t,t.neg(t.ONE)),i=r(t,n),s=r(t,t.neg(n)),a=(e+uc)/lc;return(e,t)=>{let r=e.pow(t,a),o=e.mul(r,n);const c=e.mul(r,i),u=e.mul(r,s),h=e.eql(e.sqr(o),t),f=e.eql(e.sqr(c),t);r=e.cmov(r,o,h),o=e.cmov(u,c,f);const l=e.eql(e.sqr(o),t),y=e.cmov(r,o,l);return dc(e,y,t),y}}(e):mc(e)}(e)),h(f,t))),toBytes:e=>r?Yo(e,u):qo(e,u),fromBytes:(t,n=!0)=>{if(a){if(!a.includes(t.length)||t.length>u)throw Error("Field.fromBytes: expected "+a+" bytes, got "+t.length);const e=new Uint8Array(u);e.set(t,r?0:e.length-t.length),t=e}if(t.length!==u)throw Error("Field.fromBytes: expected "+u+" bytes, got "+t.length);let i=r?Vo(t):jo(t);if(o&&(i=yc(i,e)),!n&&!f.isValid(i))throw Error("invalid field element: outside of range 0..ORDER");return i},invertBatch:e=>kc(f,e),cmov:(e,t,r)=>r?t:e});return Object.freeze(f)}function Ic(e){if("bigint"!=typeof e)throw Error("field order must be bigint");const t=e.toString(2).length;return Math.ceil(t/8)}function Sc(e){const t=Ic(e);return t+Math.ceil(t/2)}function Kc(e,t,r){return e&t^~e&r}function Cc(e,t,r){return e&t^e&r^t&r}class Dc extends To{constructor(e,t,r,n){super(),this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=n,this.buffer=new Uint8Array(e),this.view=Bo(this.buffer)}update(e){ko(this),mo(e=Qo(e));const{view:t,buffer:r,blockLen:n}=this,i=e.length;for(let s=0;s<i;){const a=Math.min(n-this.pos,i-s);if(a!==n)r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===n&&(this.process(t,0),this.pos=0);else{const t=Bo(e);for(;n<=i-s;s+=n)this.process(t,s)}}return this.length+=e.length,this.roundClean(),this}digestInto(e){ko(this),Eo(e,this),this.finished=!0;const{buffer:t,view:r,blockLen:n,isLE:i}=this;let{pos:s}=this;t[s++]=128,vo(this.buffer.subarray(s)),this.padOffset>n-s&&(this.process(r,0),s=0);for(let e=s;e<n;e++)t[e]=0;!function(e,t,r,n){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,n);const i=BigInt(32),s=BigInt(4294967295),a=Number(r>>i&s),o=Number(r&s),c=n?4:0,u=n?0:4;e.setUint32(t+c,a,n),e.setUint32(t+u,o,n)}(r,n-8,BigInt(8*this.length),i),this.process(r,0);const a=Bo(e),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,u=this.get();if(c>u.length)throw Error("_sha2: outputLen bigger than state");for(let e=0;e<c;e++)a.setUint32(4*e,u[e],i)}digest(){const{buffer:e,outputLen:t}=this;this.digestInto(e);const r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());const{blockLen:t,buffer:r,length:n,finished:i,destroyed:s,pos:a}=this;return e.destroyed=s,e.finished=i,e.length=n,e.pos=a,n%t&&e.buffer.set(r),e}clone(){return this._cloneInto()}}const Uc=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Pc=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),xc=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),Qc=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]),Rc=BigInt(2**32-1),Tc=BigInt(32);function Mc(e,t=!1){return t?{h:Number(e&Rc),l:Number(e>>Tc&Rc)}:{h:0|Number(e>>Tc&Rc),l:0|Number(e&Rc)}}function Fc(e,t=!1){const r=e.length;let n=new Uint32Array(r),i=new Uint32Array(r);for(let s=0;s<r;s++){const{h:r,l:a}=Mc(e[s],t);[n[s],i[s]]=[r,a]}return[n,i]}const Lc=(e,t,r)=>e>>>r,Nc=(e,t,r)=>e<<32-r|t>>>r,Oc=(e,t,r)=>e>>>r|t<<32-r,Hc=(e,t,r)=>e<<32-r|t>>>r,zc=(e,t,r)=>e<<64-r|t>>>r-32,Gc=(e,t,r)=>e>>>r-32|t<<64-r;function _c(e,t,r,n){const i=(t>>>0)+(n>>>0);return{h:e+r+(i/2**32|0)|0,l:0|i}}const jc=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),Vc=(e,t,r,n)=>t+r+n+(e/2**32|0)|0,qc=(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),Yc=(e,t,r,n,i)=>t+r+n+i+(e/2**32|0)|0,Zc=(e,t,r,n,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(i>>>0),Jc=(e,t,r,n,i,s)=>t+r+n+i+s+(e/2**32|0)|0,Xc=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Wc=new Uint32Array(64);class $c extends Dc{constructor(e=32){super(64,e,8,!1),this.A=0|Uc[0],this.B=0|Uc[1],this.C=0|Uc[2],this.D=0|Uc[3],this.E=0|Uc[4],this.F=0|Uc[5],this.G=0|Uc[6],this.H=0|Uc[7]}get(){const{A:e,B:t,C:r,D:n,E:i,F:s,G:a,H:o}=this;return[e,t,r,n,i,s,a,o]}set(e,t,r,n,i,s,a,o){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n,this.E=0|i,this.F=0|s,this.G=0|a,this.H=0|o}process(e,t){for(let r=0;r<16;r++,t+=4)Wc[r]=e.getUint32(t,!1);for(let e=16;e<64;e++){const t=Wc[e-15],r=Wc[e-2],n=Io(t,7)^Io(t,18)^t>>>3,i=Io(r,17)^Io(r,19)^r>>>10;Wc[e]=i+Wc[e-7]+n+Wc[e-16]|0}let{A:r,B:n,C:i,D:s,E:a,F:o,G:c,H:u}=this;for(let e=0;e<64;e++){const t=u+(Io(a,6)^Io(a,11)^Io(a,25))+Kc(a,o,c)+Xc[e]+Wc[e]|0,h=(Io(r,2)^Io(r,13)^Io(r,22))+Cc(r,n,i)|0;u=c,c=o,o=a,a=s+t|0,s=i,i=n,n=r,r=t+h|0}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,u=u+this.H|0,this.set(r,n,i,s,a,o,c,u)}roundClean(){vo(Wc)}destroy(){this.set(0,0,0,0,0,0,0,0),vo(this.buffer)}}class eu extends $c{constructor(){super(28),this.A=0|Pc[0],this.B=0|Pc[1],this.C=0|Pc[2],this.D=0|Pc[3],this.E=0|Pc[4],this.F=0|Pc[5],this.G=0|Pc[6],this.H=0|Pc[7]}}const tu=(()=>Fc(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(e=>BigInt(e))))(),ru=(()=>tu[0])(),nu=(()=>tu[1])(),iu=new Uint32Array(80),su=new Uint32Array(80);class au extends Dc{constructor(e=64){super(128,e,16,!1),this.Ah=0|Qc[0],this.Al=0|Qc[1],this.Bh=0|Qc[2],this.Bl=0|Qc[3],this.Ch=0|Qc[4],this.Cl=0|Qc[5],this.Dh=0|Qc[6],this.Dl=0|Qc[7],this.Eh=0|Qc[8],this.El=0|Qc[9],this.Fh=0|Qc[10],this.Fl=0|Qc[11],this.Gh=0|Qc[12],this.Gl=0|Qc[13],this.Hh=0|Qc[14],this.Hl=0|Qc[15]}get(){const{Ah:e,Al:t,Bh:r,Bl:n,Ch:i,Cl:s,Dh:a,Dl:o,Eh:c,El:u,Fh:h,Fl:f,Gh:l,Gl:y,Hh:g,Hl:p}=this;return[e,t,r,n,i,s,a,o,c,u,h,f,l,y,g,p]}set(e,t,r,n,i,s,a,o,c,u,h,f,l,y,g,p){this.Ah=0|e,this.Al=0|t,this.Bh=0|r,this.Bl=0|n,this.Ch=0|i,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|u,this.Fh=0|h,this.Fl=0|f,this.Gh=0|l,this.Gl=0|y,this.Hh=0|g,this.Hl=0|p}process(e,t){for(let r=0;r<16;r++,t+=4)iu[r]=e.getUint32(t),su[r]=e.getUint32(t+=4);for(let e=16;e<80;e++){const t=0|iu[e-15],r=0|su[e-15],n=Oc(t,r,1)^Oc(t,r,8)^Lc(t,0,7),i=Hc(t,r,1)^Hc(t,r,8)^Nc(t,r,7),s=0|iu[e-2],a=0|su[e-2],o=Oc(s,a,19)^zc(s,a,61)^Lc(s,0,6),c=Hc(s,a,19)^Gc(s,a,61)^Nc(s,a,6),u=qc(i,c,su[e-7],su[e-16]),h=Yc(u,n,o,iu[e-7],iu[e-16]);iu[e]=0|h,su[e]=0|u}let{Ah:r,Al:n,Bh:i,Bl:s,Ch:a,Cl:o,Dh:c,Dl:u,Eh:h,El:f,Fh:l,Fl:y,Gh:g,Gl:p,Hh:d,Hl:A}=this;for(let e=0;e<80;e++){const t=Oc(h,f,14)^Oc(h,f,18)^zc(h,f,41),w=Hc(h,f,14)^Hc(h,f,18)^Gc(h,f,41),m=h&l^~h&g,b=Zc(A,w,f&y^~f&p,nu[e],su[e]),k=Jc(b,d,t,m,ru[e],iu[e]),E=0|b,v=Oc(r,n,28)^zc(r,n,34)^zc(r,n,39),B=Hc(r,n,28)^Gc(r,n,34)^Gc(r,n,39),I=r&i^r&a^i&a,S=n&s^n&o^s&o;d=0|g,A=0|p,g=0|l,p=0|y,l=0|h,y=0|f,({h,l:f}=_c(0|c,0|u,0|k,0|E)),c=0|a,u=0|o,a=0|i,o=0|s,i=0|r,s=0|n;const K=jc(E,B,S);r=Vc(K,k,v,I),n=0|K}({h:r,l:n}=_c(0|this.Ah,0|this.Al,0|r,0|n)),({h:i,l:s}=_c(0|this.Bh,0|this.Bl,0|i,0|s)),({h:a,l:o}=_c(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:u}=_c(0|this.Dh,0|this.Dl,0|c,0|u)),({h,l:f}=_c(0|this.Eh,0|this.El,0|h,0|f)),({h:l,l:y}=_c(0|this.Fh,0|this.Fl,0|l,0|y)),({h:g,l:p}=_c(0|this.Gh,0|this.Gl,0|g,0|p)),({h:d,l:A}=_c(0|this.Hh,0|this.Hl,0|d,0|A)),this.set(r,n,i,s,a,o,c,u,h,f,l,y,g,p,d,A)}roundClean(){vo(iu,su)}destroy(){vo(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class ou extends au{constructor(){super(48),this.Ah=0|xc[0],this.Al=0|xc[1],this.Bh=0|xc[2],this.Bl=0|xc[3],this.Ch=0|xc[4],this.Cl=0|xc[5],this.Dh=0|xc[6],this.Dl=0|xc[7],this.Eh=0|xc[8],this.El=0|xc[9],this.Fh=0|xc[10],this.Fl=0|xc[11],this.Gh=0|xc[12],this.Gl=0|xc[13],this.Hh=0|xc[14],this.Hl=0|xc[15]}}const cu=Mo(()=>new $c),uu=Mo(()=>new eu),hu=Mo(()=>new au),fu=Mo(()=>new ou);class lu extends To{constructor(e,t){super(),this.finished=!1,this.destroyed=!1,bo(e);const r=Qo(t);if(this.iHash=e.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const n=this.blockLen,i=new Uint8Array(n);i.set(r.length>n?e.create().update(r).digest():r);for(let e=0;e<i.length;e++)i[e]^=54;this.iHash.update(i),this.oHash=e.create();for(let e=0;e<i.length;e++)i[e]^=106;this.oHash.update(i),vo(i)}update(e){return ko(this),this.iHash.update(e),this}digestInto(e){ko(this),mo(e,this.outputLen),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){const e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));const{oHash:t,iHash:r,finished:n,destroyed:i,blockLen:s,outputLen:a}=this;return e.finished=n,e.destroyed=i,e.blockLen=s,e.outputLen=a,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const yu=(e,t,r)=>new lu(e,t).update(r).digest();yu.create=(e,t)=>new lu(e,t);const gu=BigInt(0),pu=BigInt(1);function du(e,t){const r=t.negate();return e?r:t}function Au(e,t){const r=kc(e.Fp,t.map(e=>e.Z));return t.map((t,n)=>e.fromAffine(t.toAffine(r[n])))}function wu(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function mu(e,t){wu(e,t);const r=2**e;return{windows:Math.ceil(t/e)+1,windowSize:2**(e-1),mask:ec(e),maxNumber:r,shiftBy:BigInt(e)}}function bu(e,t,r){const{windowSize:n,mask:i,maxNumber:s,shiftBy:a}=r;let o=Number(e&i),c=e>>a;o>n&&(o-=s,c+=pu);const u=t*n;return{nextN:c,offset:u+Math.abs(o)-1,isZero:0===o,isNeg:o<0,isNegF:t%2!=0,offsetF:u}}const ku=new WeakMap,Eu=new WeakMap;function vu(e){return Eu.get(e)||1}function Bu(e){if(e!==gu)throw Error("invalid wNAF")}class Iu{constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let n=e;for(;t>gu;)t&pu&&(r=r.add(n)),n=n.double(),t>>=pu;return r}precomputeWindow(e,t){const{windows:r,windowSize:n}=mu(t,this.bits),i=[];let s=e,a=s;for(let e=0;e<r;e++){a=s,i.push(a);for(let e=1;e<n;e++)a=a.add(s),i.push(a);s=a.double()}return i}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let n=this.ZERO,i=this.BASE;const s=mu(e,this.bits);for(let e=0;e<s.windows;e++){const{nextN:a,offset:o,isZero:c,isNeg:u,isNegF:h,offsetF:f}=bu(r,e,s);r=a,c?i=i.add(du(h,t[f])):n=n.add(du(u,t[o]))}return Bu(r),{p:n,f:i}}wNAFUnsafe(e,t,r,n=this.ZERO){const i=mu(e,this.bits);for(let e=0;e<i.windows&&r!==gu;e++){const{nextN:s,offset:a,isZero:o,isNeg:c}=bu(r,e,i);if(r=s,!o){const e=t[a];n=n.add(c?e.negate():e)}}return Bu(r),n}getPrecomputes(e,t,r){let n=ku.get(t);return n||(n=this.precomputeWindow(t,e),1!==e&&("function"==typeof r&&(n=r(n)),ku.set(t,n))),n}cached(e,t,r){const n=vu(e);return this.wNAF(n,this.getPrecomputes(n,e,r),t)}unsafe(e,t,r,n){const i=vu(e);return 1===i?this._unsafeLadder(e,t,n):this.wNAFUnsafe(i,this.getPrecomputes(i,e,r),t,n)}createCache(e,t){wu(t,this.bits),Eu.set(e,t),ku.delete(e)}hasCache(e){return 1!==vu(e)}}function Su(e,t,r,n){!function(e,t){if(!Array.isArray(e))throw Error("array expected");e.forEach((e,r)=>{if(!(e instanceof t))throw Error("invalid point at index "+r)})}(r,e),function(e,t){if(!Array.isArray(e))throw Error("array of scalars expected");e.forEach((e,r)=>{if(!t.isValid(e))throw Error("invalid scalar at index "+r)})}(n,t);const i=r.length,s=n.length;if(i!==s)throw Error("arrays of points and scalars must have equal length");const a=e.ZERO,o=$o(BigInt(i));let c=1;o>12?c=o-3:o>4?c=o-2:o>0&&(c=2);const u=ec(c),h=Array(Number(u)+1).fill(a);let f=a;for(let e=Math.floor((t.BITS-1)/c)*c;e>=0;e-=c){h.fill(a);for(let t=0;t<s;t++){const i=n[t],s=Number(i>>BigInt(e)&u);h[s]=h[s].add(r[t])}let t=a;for(let e=h.length-1,r=a;e>0;e--)r=r.add(h[e]),t=t.add(r);if(f=f.add(t),0!==e)for(let e=0;e<c;e++)f=f.double()}return f}function Ku(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return function(e){tc(e,bc.reduce((e,t)=>(e[t]="function",e),{ORDER:"bigint",MASK:"bigint",BYTES:"number",BITS:"number"}))}(t),t}return Bc(e,{isLE:r})}function Cu(e,t,r={},n){if(void 0===n&&(n="edwards"===e),!t||"object"!=typeof t)throw Error(`expected valid ${e} CURVE object`);for(const e of["p","n","h"]){const r=t[e];if(!("bigint"==typeof r&&r>gu))throw Error(`CURVE.${e} must be positive bigint`)}const i=Ku(t.p,r.Fp,n),s=Ku(t.n,r.Fn,n),a=["Gx","Gy","a","weierstrass"===e?"b":"d"];for(const e of a)if(!i.isValid(t[e]))throw Error(`CURVE.${e} must be valid field element of CURVE.Fp`);return{CURVE:t=Object.freeze(Object.assign({},t)),Fp:i,Fn:s}}const Du=(e,t)=>(e+(e>=0?t:-t)/Tu)/t;function Uu(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function Pu(e,t){const r={};for(let n of Object.keys(t))r[n]=void 0===e[n]?t[n]:e[n];return Ho(r.lowS,"lowS"),Ho(r.prehash,"prehash"),void 0!==r.format&&Uu(r.format),r}const xu={Err:class extends Error{constructor(e=""){super(e)}},_tlv:{encode:(e,t)=>{const{Err:r}=xu;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(1&t.length)throw new r("tlv.encode: unpadded data");const n=t.length/2,i=Go(n);if(i.length/2&128)throw new r("tlv.encode: long form length too big");const s=n>127?Go(i.length/2|128):"";return Go(e)+s+i+t},decode(e,t){const{Err:r}=xu;let n=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[n++]!==e)throw new r("tlv.decode: wrong tlv");const i=t[n++];let s=0;if(128&i){const e=127&i;if(!e)throw new r("tlv.decode(long): indefinite length not supported");if(e>4)throw new r("tlv.decode(long): byte length is too big");const a=t.subarray(n,n+e);if(a.length!==e)throw new r("tlv.decode: length bytes not complete");if(0===a[0])throw new r("tlv.decode(long): zero leftmost byte");for(const e of a)s=s<<8|e;if(n+=e,s<128)throw new r("tlv.decode(long): not minimal encoding")}else s=i;const a=t.subarray(n,n+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(n+s)}}},_int:{encode(e){const{Err:t}=xu;if(e<Qu)throw new t("integer: negative integers are not allowed");let r=Go(e);if(8&Number.parseInt(r[0],16)&&(r="00"+r),1&r.length)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){const{Err:t}=xu;if(128&e[0])throw new t("invalid signature integer: negative");if(0===e[0]&&!(128&e[1]))throw new t("invalid signature integer: unnecessary leading zero");return jo(e)}},toSig(e){const{Err:t,_int:r,_tlv:n}=xu,i=Zo("signature",e),{v:s,l:a}=n.decode(48,i);if(a.length)throw new t("invalid signature: left bytes after parsing");const{v:o,l:c}=n.decode(2,s),{v:u,l:h}=n.decode(2,c);if(h.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(o),s:r.decode(u)}},hexFromSig(e){const{_tlv:t,_int:r}=xu,n=t.encode(2,r.encode(e.r))+t.encode(2,r.encode(e.s));return t.encode(48,n)}},Qu=BigInt(0),Ru=BigInt(1),Tu=BigInt(2),Mu=BigInt(3),Fu=BigInt(4);function Lu(e,t){const{BYTES:r}=e;let n;if("bigint"==typeof t)n=t;else{let i=Zo("private key",t);try{n=e.fromBytes(i)}catch(e){throw Error(`invalid private key: expected ui8a of size ${r}, got ${typeof t}`)}}if(!e.isValidNot0(n))throw Error("invalid private key: out of range [1..N-1]");return n}function Nu(e){return Uint8Array.of(e?2:3)}function Ou(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function Hu(e){const{CURVE:t,curveOpts:r,hash:n,ecdsaOpts:i}=function(e){const{CURVE:t,curveOpts:r}=function(e){const t={a:e.a,b:e.b,p:e.Fp.ORDER,n:e.n,h:e.h,Gx:e.Gx,Gy:e.Gy},r=e.Fp;let n=e.allowedPrivateKeyLengths?Array.from(new Set(e.allowedPrivateKeyLengths.map(e=>Math.ceil(e/2)))):void 0;return{CURVE:t,curveOpts:{Fp:r,Fn:Bc(t.n,{BITS:e.nBitLength,allowedLengths:n,modFromBytes:e.wrapPrivateKey}),allowInfinityPoint:e.allowInfinityPoint,endo:e.endo,isTorsionFree:e.isTorsionFree,clearCofactor:e.clearCofactor,fromBytes:e.fromBytes,toBytes:e.toBytes}}}(e),n={hmac:e.hmac,randomBytes:e.randomBytes,lowS:e.lowS,bits2int:e.bits2int,bits2int_modN:e.bits2int_modN};return{CURVE:t,curveOpts:r,hash:e.hash,ecdsaOpts:n}}(e);return function(e,t){const r=t.Point;return Object.assign({},t,{ProjectivePoint:r,CURVE:Object.assign({},e,vc(r.Fn.ORDER,r.Fn.BITS))})}(e,function(e,t,r={}){bo(t),tc(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"});const n=r.randomBytes||Lo,i=r.hmac||((e,...r)=>yu(t,e,Ro(...r))),{Fp:s,Fn:a}=e,{ORDER:o,BITS:c}=a,{keygen:u,getPublicKey:h,getSharedSecret:f,utils:l,lengths:y}=function(e,t={}){const{Fn:r}=e,n=t.randomBytes||Lo,i=Object.assign(Ou(e.Fp,r),{seed:Sc(r.ORDER)});function s(e){try{return!!Lu(r,e)}catch(e){return!1}}function a(e=n(i.seed)){return function(e,t,r=!1){const n=e.length,i=Ic(t),s=Sc(t);if(n<16||n<s||n>1024)throw Error("expected "+s+"-1024 bytes of input, got "+n);const a=yc(r?Vo(e):jo(e),t-ic)+ic;return r?Yo(a,i):qo(a,i)}(zo(e,i.seed,"seed"),r.ORDER)}function o(t,n=!0){return e.BASE.multiply(Lu(r,t)).toBytes(n)}function c(t){if("bigint"==typeof t)return!1;if(t instanceof e)return!0;const{secretKey:n,publicKey:s,publicKeyUncompressed:a}=i;if(r.allowedLengths||n===s)return;const o=Zo("key",t).length;return o===s||o===a}const u={isValidSecretKey:s,isValidPublicKey:function(t,r){const{publicKey:n,publicKeyUncompressed:s}=i;try{const i=t.length;return!(!0===r&&i!==n||!1===r&&i!==s||!e.fromBytes(t))}catch(e){return!1}},randomSecretKey:a,isValidPrivateKey:s,randomPrivateKey:a,normPrivateKeyToScalar:e=>Lu(r,e),precompute:(t=8,r=e.BASE)=>r.precompute(t,!1)};return Object.freeze({getPublicKey:o,getSharedSecret:function(t,n,i=!0){if(!0===c(t))throw Error("first arg must be private key");if(!1===c(n))throw Error("second arg must be public key");const s=Lu(r,t);return e.fromHex(n).multiply(s).toBytes(i)},keygen:function(e){const t=a(e);return{secretKey:t,publicKey:o(t)}},Point:e,utils:u,lengths:i})}(e,r),g={prehash:!1,lowS:"boolean"==typeof r.lowS&&r.lowS,format:void 0,extraEntropy:!1},p="compact";function d(e){return e>o>>Ru}function A(e,t){if(!a.isValidNot0(t))throw Error(`invalid signature ${e}: out of range 1..Point.Fn.ORDER`);return t}class w{constructor(e,t,r){this.r=A("r",e),this.s=A("s",t),null!=r&&(this.recovery=r),Object.freeze(this)}static fromBytes(e,t=p){let r;if(function(e,t){Uu(t);const r=y.signature;zo(e,"compact"===t?r:"recovered"===t?r+1:void 0,t+" signature")}(e,t),"der"===t){const{r:t,s:r}=xu.toSig(zo(e));return new w(t,r)}"recovered"===t&&(r=e[0],t="compact",e=e.subarray(1));const n=a.BYTES,i=e.subarray(0,n),s=e.subarray(n,2*n);return new w(a.fromBytes(i),a.fromBytes(s),r)}static fromHex(e,t){return this.fromBytes(xo(e),t)}addRecoveryBit(e){return new w(this.r,this.s,e)}recoverPublicKey(t){const r=s.ORDER,{r:n,s:i,recovery:c}=this;if(null==c||![0,1,2,3].includes(c))throw Error("recovery id invalid");if(o*Tu<r&&c>1)throw Error("recovery id is ambiguous for h>1 curve");const u=2===c||3===c?n+o:n;if(!s.isValid(u))throw Error("recovery id 2 or 3 invalid");const h=s.toBytes(u),f=e.fromBytes(Ro(Nu(!(1&c)),h)),l=a.inv(u),y=b(Zo("msgHash",t)),g=a.create(-y*l),p=a.create(i*l),d=e.BASE.multiplyUnsafe(g).add(f.multiplyUnsafe(p));if(d.is0())throw Error("point at infinify");return d.assertValidity(),d}hasHighS(){return d(this.s)}toBytes(e=p){if(Uu(e),"der"===e)return xo(xu.hexFromSig(this));const t=a.toBytes(this.r),r=a.toBytes(this.s);if("recovered"===e){if(null==this.recovery)throw Error("recovery bit must be present");return Ro(Uint8Array.of(this.recovery),t,r)}return Ro(t,r)}toHex(e){return Uo(this.toBytes(e))}assertValidity(){}static fromCompact(e){return w.fromBytes(Zo("sig",e),"compact")}static fromDER(e){return w.fromBytes(Zo("sig",e),"der")}normalizeS(){return this.hasHighS()?new w(this.r,a.neg(this.s),this.recovery):this}toDERRawBytes(){return this.toBytes("der")}toDERHex(){return Uo(this.toBytes("der"))}toCompactRawBytes(){return this.toBytes("compact")}toCompactHex(){return Uo(this.toBytes("compact"))}}const m=r.bits2int||function(e){if(e.length>8192)throw Error("input is too large");const t=jo(e),r=8*e.length-c;return r>0?t>>BigInt(r):t},b=r.bits2int_modN||function(e){return a.create(m(e))},k=ec(c);function E(e){return Wo("num < 2^"+c,e,Qu,k),a.toBytes(e)}function v(e,r){return zo(e,void 0,"message"),r?zo(t(e),void 0,"prehashed message"):e}return Object.freeze({keygen:u,getPublicKey:h,getSharedSecret:f,utils:l,lengths:y,Point:e,sign:function(r,s,o={}){r=Zo("message",r);const{seed:c,k2sig:u}=function(t,r,i){if(["recovered","canonical"].some(e=>e in i))throw Error("sign() legacy options not supported");const{lowS:s,prehash:o,extraEntropy:c}=Pu(i,g);t=v(t,o);const u=b(t),h=Lu(a,r),f=[E(h),E(u)];if(null!=c&&!1!==c){const e=!0===c?n(y.secretKey):c;f.push(Zo("extraEntropy",e))}const l=Ro(...f),p=u;return{seed:l,k2sig:function(t){const r=m(t);if(!a.isValidNot0(r))return;const n=a.inv(r),i=e.BASE.multiply(r).toAffine(),o=a.create(i.x);if(o===Qu)return;const c=a.create(n*a.create(p+o*h));if(c===Qu)return;let u=(i.x===o?0:2)|Number(i.y&Ru),f=c;return s&&d(c)&&(f=a.neg(c),u^=1),new w(o,f,u)}}}(r,s,o),h=function(e,t,r){if("number"!=typeof e||e<2)throw Error("hashLen must be a number");if("number"!=typeof t||t<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");const n=e=>new Uint8Array(e),i=e=>Uint8Array.of(e);let s=n(e),a=n(e),o=0;const c=()=>{s.fill(1),a.fill(0),o=0},u=(...e)=>r(a,s,...e),h=(e=n(0))=>{a=u(i(0),e),s=u(),0!==e.length&&(a=u(i(1),e),s=u())},f=()=>{if(o++>=1e3)throw Error("drbg: tried 1000 values");let e=0;const r=[];for(;e<t;){s=u();const t=s.slice();r.push(t),e+=s.length}return Ro(...r)};return(e,t)=>{let r;for(c(),h(e);!(r=t(f()));)h();return c(),r}}(t.outputLen,a.BYTES,i);return h(c,u)},verify:function(t,r,n,i={}){const{lowS:s,prehash:o,format:c}=Pu(i,g);if(n=Zo("publicKey",n),r=v(Zo("message",r),o),"strict"in i)throw Error("options.strict was renamed to lowS");const u=void 0===c?function(e){let t;const r="string"==typeof e||Ao(e),n=!r&&null!==e&&"object"==typeof e&&"bigint"==typeof e.r&&"bigint"==typeof e.s;if(!r&&!n)throw Error("invalid signature, expected Uint8Array, hex string or Signature instance");if(n)t=new w(e.r,e.s);else if(r){try{t=w.fromBytes(Zo("sig",e),"der")}catch(e){if(!(e instanceof xu.Err))throw e}if(!t)try{t=w.fromBytes(Zo("sig",e),"compact")}catch(e){return!1}}return t||!1}(t):w.fromBytes(Zo("sig",t),c);if(!1===u)return!1;try{const t=e.fromBytes(n);if(s&&u.hasHighS())return!1;const{r:i,s:o}=u,c=b(r),h=a.inv(o),f=a.create(c*h),l=a.create(i*h),y=e.BASE.multiplyUnsafe(f).add(t.multiplyUnsafe(l));return!y.is0()&&a.create(y.x)===i}catch(e){return!1}},recoverPublicKey:function(e,t,r={}){const{prehash:n}=Pu(r,g);return t=v(t,n),w.fromBytes(e,"recovered").recoverPublicKey(t).toBytes()},Signature:w,hash:t})}(function(e,t={}){const r=Cu("weierstrass",e,t),{Fp:n,Fn:i}=r;let s=r.CURVE;const{h:a,n:o}=s;tc(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object",wrapPrivateKey:"boolean"});const{endo:c}=t;if(c&&(!n.is0(s.a)||"bigint"!=typeof c.beta||!Array.isArray(c.basises)))throw Error('invalid endo: expected "beta": bigint and "basises": array');const u=Ou(n,i);function h(){if(!n.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}const f=t.toBytes||function(e,t,r){const{x:i,y:s}=t.toAffine(),a=n.toBytes(i);return Ho(r,"isCompressed"),r?(h(),Ro(Nu(!n.isOdd(s)),a)):Ro(Uint8Array.of(4),a,n.toBytes(s))},l=t.fromBytes||function(e){zo(e,void 0,"Point");const{publicKey:t,publicKeyUncompressed:r}=u,i=e.length,s=e[0],a=e.subarray(1);if(i!==t||2!==s&&3!==s){if(i===r&&4===s){const e=n.BYTES,t=n.fromBytes(a.subarray(0,e)),r=n.fromBytes(a.subarray(e,2*e));if(!g(t,r))throw Error("bad point: is not on curve");return{x:t,y:r}}throw Error(`bad point: got length ${i}, expected compressed=${t} or uncompressed=${r}`)}{const t=n.fromBytes(a);if(!n.isValid(t))throw Error("bad point: is not on curve, wrong x");const r=y(t);let i;try{i=n.sqrt(r)}catch(e){const t=e instanceof Error?": "+e.message:"";throw Error("bad point: is not on curve, sqrt error"+t)}return h(),!(1&~s)!==n.isOdd(i)&&(i=n.neg(i)),{x:t,y:i}}};function y(e){const t=n.sqr(e),r=n.mul(t,e);return n.add(n.add(r,n.mul(e,s.a)),s.b)}function g(e,t){const r=n.sqr(t),i=y(e);return n.eql(r,i)}if(!g(s.Gx,s.Gy))throw Error("bad curve params: generator point");const p=n.mul(n.pow(s.a,Mu),Fu),d=n.mul(n.sqr(s.b),BigInt(27));if(n.is0(n.add(p,d)))throw Error("bad curve params: a or b");function A(e,t,r=!1){if(!n.isValid(t)||r&&n.is0(t))throw Error("bad point coordinate "+e);return t}function w(e){if(!(e instanceof v))throw Error("ProjectivePoint expected")}function m(e){if(!c||!c.basises)throw Error("no endo");return function(e,t,r){const[[n,i],[s,a]]=t,o=Du(a*e,r),c=Du(-i*e,r);let u=e-o*n-c*s,h=-o*i-c*a;const f=u<Qu,l=h<Qu;f&&(u=-u),l&&(h=-h);const y=ec(Math.ceil($o(r)/2))+Ru;if(u<Qu||u>=y||h<Qu||h>=y)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:f,k1:u,k2neg:l,k2:h}}(e,c.basises,i.ORDER)}const b=rc((e,t)=>{const{X:r,Y:i,Z:s}=e;if(n.eql(s,n.ONE))return{x:r,y:i};const a=e.is0();null==t&&(t=a?n.ONE:n.inv(s));const o=n.mul(r,t),c=n.mul(i,t),u=n.mul(s,t);if(a)return{x:n.ZERO,y:n.ZERO};if(!n.eql(u,n.ONE))throw Error("invZ was invalid");return{x:o,y:c}}),k=rc(e=>{if(e.is0()){if(t.allowInfinityPoint&&!n.is0(e.Y))return;throw Error("bad point: ZERO")}const{x:r,y:i}=e.toAffine();if(!n.isValid(r)||!n.isValid(i))throw Error("bad point: x or y not field elements");if(!g(r,i))throw Error("bad point: equation left != right");if(!e.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function E(e,t,r,i,s){return r=new v(n.mul(r.X,e),r.Y,r.Z),t=du(i,t),r=du(s,r),t.add(r)}class v{constructor(e,t,r){this.X=A("x",e),this.Y=A("y",t,!0),this.Z=A("z",r),Object.freeze(this)}static CURVE(){return s}static fromAffine(e){const{x:t,y:r}=e||{};if(!e||!n.isValid(t)||!n.isValid(r))throw Error("invalid affine point");if(e instanceof v)throw Error("projective point not allowed");return n.is0(t)&&n.is0(r)?v.ZERO:new v(t,r,n.ONE)}static fromBytes(e){const t=v.fromAffine(l(zo(e,void 0,"point")));return t.assertValidity(),t}static fromHex(e){return v.fromBytes(Zo("pointHex",e))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(e=8,t=!0){return I.createCache(this,e),t||this.multiply(Mu),this}assertValidity(){k(this)}hasEvenY(){const{y:e}=this.toAffine();if(!n.isOdd)throw Error("Field doesn't support isOdd");return!n.isOdd(e)}equals(e){w(e);const{X:t,Y:r,Z:i}=this,{X:s,Y:a,Z:o}=e,c=n.eql(n.mul(t,o),n.mul(s,i)),u=n.eql(n.mul(r,o),n.mul(a,i));return c&&u}negate(){return new v(this.X,n.neg(this.Y),this.Z)}double(){const{a:e,b:t}=s,r=n.mul(t,Mu),{X:i,Y:a,Z:o}=this;let c=n.ZERO,u=n.ZERO,h=n.ZERO,f=n.mul(i,i),l=n.mul(a,a),y=n.mul(o,o),g=n.mul(i,a);return g=n.add(g,g),h=n.mul(i,o),h=n.add(h,h),c=n.mul(e,h),u=n.mul(r,y),u=n.add(c,u),c=n.sub(l,u),u=n.add(l,u),u=n.mul(c,u),c=n.mul(g,c),h=n.mul(r,h),y=n.mul(e,y),g=n.sub(f,y),g=n.mul(e,g),g=n.add(g,h),h=n.add(f,f),f=n.add(h,f),f=n.add(f,y),f=n.mul(f,g),u=n.add(u,f),y=n.mul(a,o),y=n.add(y,y),f=n.mul(y,g),c=n.sub(c,f),h=n.mul(y,l),h=n.add(h,h),h=n.add(h,h),new v(c,u,h)}add(e){w(e);const{X:t,Y:r,Z:i}=this,{X:a,Y:o,Z:c}=e;let u=n.ZERO,h=n.ZERO,f=n.ZERO;const l=s.a,y=n.mul(s.b,Mu);let g=n.mul(t,a),p=n.mul(r,o),d=n.mul(i,c),A=n.add(t,r),m=n.add(a,o);A=n.mul(A,m),m=n.add(g,p),A=n.sub(A,m),m=n.add(t,i);let b=n.add(a,c);return m=n.mul(m,b),b=n.add(g,d),m=n.sub(m,b),b=n.add(r,i),u=n.add(o,c),b=n.mul(b,u),u=n.add(p,d),b=n.sub(b,u),f=n.mul(l,m),u=n.mul(y,d),f=n.add(u,f),u=n.sub(p,f),f=n.add(p,f),h=n.mul(u,f),p=n.add(g,g),p=n.add(p,g),d=n.mul(l,d),m=n.mul(y,m),p=n.add(p,d),d=n.sub(g,d),d=n.mul(l,d),m=n.add(m,d),g=n.mul(p,m),h=n.add(h,g),g=n.mul(b,m),u=n.mul(A,u),u=n.sub(u,g),g=n.mul(A,p),f=n.mul(b,f),f=n.add(f,g),new v(u,h,f)}subtract(e){return this.add(e.negate())}is0(){return this.equals(v.ZERO)}multiply(e){const{endo:r}=t;if(!i.isValidNot0(e))throw Error("invalid scalar: out of range");let n,s;const a=e=>I.cached(this,e,e=>Au(v,e));if(r){const{k1neg:t,k1:i,k2neg:o,k2:c}=m(e),{p:u,f:h}=a(i),{p:f,f:l}=a(c);s=h.add(l),n=E(r.beta,u,f,t,o)}else{const{p:t,f:r}=a(e);n=t,s=r}return Au(v,[n,s])[0]}multiplyUnsafe(e){const{endo:r}=t,n=this;if(!i.isValid(e))throw Error("invalid scalar: out of range");if(e===Qu||n.is0())return v.ZERO;if(e===Ru)return n;if(I.hasCache(this))return this.multiply(e);if(r){const{k1neg:t,k1:i,k2neg:s,k2:a}=m(e),{p1:o,p2:c}=function(e,t,r,n){let i=t,s=e.ZERO,a=e.ZERO;for(;r>gu||n>gu;)r&pu&&(s=s.add(i)),n&pu&&(a=a.add(i)),i=i.double(),r>>=pu,n>>=pu;return{p1:s,p2:a}}(v,n,i,a);return E(r.beta,o,c,t,s)}return I.unsafe(n,e)}multiplyAndAddUnsafe(e,t,r){const n=this.multiplyUnsafe(t).add(e.multiplyUnsafe(r));return n.is0()?void 0:n}toAffine(e){return b(this,e)}isTorsionFree(){const{isTorsionFree:e}=t;return a===Ru||(e?e(v,this):I.unsafe(this,o).is0())}clearCofactor(){const{clearCofactor:e}=t;return a===Ru?this:e?e(v,this):this.multiplyUnsafe(a)}isSmallOrder(){return this.multiplyUnsafe(a).is0()}toBytes(e=!0){return Ho(e,"isCompressed"),this.assertValidity(),f(v,this,e)}toHex(e=!0){return Uo(this.toBytes(e))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}get px(){return this.X}get py(){return this.X}get pz(){return this.Z}toRawBytes(e=!0){return this.toBytes(e)}_setWindowSize(e){this.precompute(e)}static normalizeZ(e){return Au(v,e)}static msm(e,t){return Su(v,i,e,t)}static fromPrivateKey(e){return v.BASE.multiply(Lu(i,e))}}v.BASE=new v(s.Gx,s.Gy,n.ONE),v.ZERO=new v(n.ZERO,n.ONE,n.ZERO),v.Fp=n,v.Fn=i;const B=i.BITS,I=new Iu(v,t.endo?Math.ceil(B/2):B);return v.BASE.precompute(8),v}(t,r),n,i))}function zu(e,t){const r=t=>Hu({...e,hash:t});return{...r(t),create:r}}const Gu={p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")},_u={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")},ju={p:BigInt("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),n:BigInt("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),h:BigInt(1),a:BigInt("0x1fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffc"),b:BigInt("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Gx:BigInt("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:BigInt("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650")},Vu=Bc(Gu.p),qu=Bc(_u.p),Yu=Bc(ju.p),Zu=zu({...Gu,Fp:Vu,lowS:!1},cu),Ju=zu({..._u,Fp:qu,lowS:!1},fu),Xu=zu({...ju,Fp:Yu,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},hu),Wu=BigInt(0),$u=BigInt(1),eh=BigInt(2),th=BigInt(7),rh=BigInt(256),nh=BigInt(113),ih=[],sh=[],ah=[];for(let e=0,t=$u,r=1,n=0;e<24;e++){[r,n]=[n,(2*r+3*n)%5],ih.push(2*(5*n+r)),sh.push((e+1)*(e+2)/2%64);let i=Wu;for(let e=0;e<7;e++)t=(t<<$u^(t>>th)*nh)%rh,t&eh&&(i^=$u<<($u<<BigInt(e))-$u);ah.push(i)}const oh=Fc(ah,!0),ch=oh[0],uh=oh[1],hh=(e,t,r)=>r>32?((e,t,r)=>t<<r-32|e>>>64-r)(e,t,r):((e,t,r)=>e<<r|t>>>32-r)(e,t,r),fh=(e,t,r)=>r>32?((e,t,r)=>e<<r-32|t>>>64-r)(e,t,r):((e,t,r)=>t<<r|e>>>32-r)(e,t,r);class lh extends To{constructor(e,t,r,n=!1,i=24){if(super(),this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,this.enableXOF=!1,this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=n,this.rounds=i,wo(r),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}clone(){return this._cloneInto()}keccak(){Ko(this.state32),function(e,t=24){const r=new Uint32Array(10);for(let n=24-t;n<24;n++){for(let t=0;t<10;t++)r[t]=e[t]^e[t+10]^e[t+20]^e[t+30]^e[t+40];for(let t=0;t<10;t+=2){const n=(t+8)%10,i=(t+2)%10,s=r[i],a=r[i+1],o=hh(s,a,1)^r[n],c=fh(s,a,1)^r[n+1];for(let r=0;r<50;r+=10)e[t+r]^=o,e[t+r+1]^=c}let t=e[2],i=e[3];for(let r=0;r<24;r++){const n=sh[r],s=hh(t,i,n),a=fh(t,i,n),o=ih[r];t=e[o],i=e[o+1],e[o]=s,e[o+1]=a}for(let t=0;t<50;t+=10){for(let n=0;n<10;n++)r[n]=e[t+n];for(let n=0;n<10;n++)e[t+n]^=~r[(n+2)%10]&r[(n+4)%10]}e[0]^=ch[n],e[1]^=uh[n]}vo(r)}(this.state32,this.rounds),Ko(this.state32),this.posOut=0,this.pos=0}update(e){ko(this),mo(e=Qo(e));const{blockLen:t,state:r}=this,n=e.length;for(let i=0;i<n;){const s=Math.min(t-this.pos,n-i);for(let t=0;t<s;t++)r[this.pos++]^=e[i++];this.pos===t&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:e,suffix:t,pos:r,blockLen:n}=this;e[r]^=t,128&t&&r===n-1&&this.keccak(),e[n-1]^=128,this.keccak()}writeInto(e){ko(this,!1),mo(e),this.finish();const t=this.state,{blockLen:r}=this;for(let n=0,i=e.length;n<i;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,i-n);e.set(t.subarray(this.posOut,this.posOut+s),n),this.posOut+=s,n+=s}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return wo(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Eo(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,vo(this.state)}_cloneInto(e){const{blockLen:t,suffix:r,outputLen:n,rounds:i,enableXOF:s}=this;return e||(e=new lh(t,r,n,s,i)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=i,e.suffix=r,e.outputLen=n,e.enableXOF=s,e.destroyed=this.destroyed,e}}const yh=(e,t,r)=>Mo(()=>new lh(t,e,r)),gh=(()=>yh(6,136,32))(),ph=(()=>yh(6,72,64))(),dh=(()=>function(e){const t=(t,r)=>e(r).update(Qo(t)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=t=>e(t),t}((e={})=>new lh(136,31,void 0===e.dkLen?32:e.dkLen,!0)))(),Ah=BigInt(0),wh=BigInt(1),mh=BigInt(2),bh=BigInt(8);function kh(e,t={}){const r=Cu("edwards",e,t,t.FpFnLE),{Fp:n,Fn:i}=r;let s=r.CURVE;const{h:a}=s;tc(t,{},{uvRatio:"function"});const o=mh<<BigInt(8*i.BYTES)-wh,c=e=>n.create(e),u=t.uvRatio||((e,t)=>{try{return{isValid:!0,value:n.sqrt(n.div(e,t))}}catch(e){return{isValid:!1,value:Ah}}});if(!function(e,t,r,n){const i=e.sqr(r),s=e.sqr(n),a=e.add(e.mul(t.a,i),s),o=e.add(e.ONE,e.mul(t.d,e.mul(i,s)));return e.eql(a,o)}(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function h(e,t,r=!1){return Wo("coordinate "+e,t,r?wh:Ah,o),t}function f(e){if(!(e instanceof g))throw Error("ExtendedPoint expected")}const l=rc((e,t)=>{const{X:r,Y:i,Z:s}=e,a=e.is0();null==t&&(t=a?bh:n.inv(s));const o=c(r*t),u=c(i*t),h=n.mul(s,t);if(a)return{x:Ah,y:wh};if(h!==wh)throw Error("invZ was invalid");return{x:o,y:u}}),y=rc(e=>{const{a:t,d:r}=s;if(e.is0())throw Error("bad point: ZERO");const{X:n,Y:i,Z:a,T:o}=e,u=c(n*n),h=c(i*i),f=c(a*a),l=c(f*f),y=c(u*t);if(c(f*c(y+h))!==c(l+c(r*c(u*h))))throw Error("bad point: equation left != right (1)");if(c(n*i)!==c(a*o))throw Error("bad point: equation left != right (2)");return!0});class g{constructor(e,t,r,n){this.X=h("x",e),this.Y=h("y",t),this.Z=h("z",r,!0),this.T=h("t",n),Object.freeze(this)}static CURVE(){return s}static fromAffine(e){if(e instanceof g)throw Error("extended point not allowed");const{x:t,y:r}=e||{};return h("x",t),h("y",r),new g(t,r,wh,c(t*r))}static fromBytes(e,t=!1){const r=n.BYTES,{a:i,d:a}=s;e=Jo(zo(e,r,"point")),Ho(t,"zip215");const h=Jo(e),f=e[r-1];h[r-1]=-129&f;const l=Vo(h),y=t?o:n.ORDER;Wo("point.y",l,Ah,y);const p=c(l*l),d=c(p-wh),A=c(a*p-i);let{isValid:w,value:m}=u(d,A);if(!w)throw Error("bad point: invalid y coordinate");const b=(m&wh)===wh,k=!!(128&f);if(!t&&m===Ah&&k)throw Error("bad point: x=0 and x_0=1");return k!==b&&(m=c(-m)),g.fromAffine({x:m,y:l})}static fromHex(e,t=!1){return g.fromBytes(Zo("point",e),t)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(e=8,t=!0){return p.createCache(this,e),t||this.multiply(mh),this}assertValidity(){y(this)}equals(e){f(e);const{X:t,Y:r,Z:n}=this,{X:i,Y:s,Z:a}=e,o=c(t*a),u=c(i*n),h=c(r*a),l=c(s*n);return o===u&&h===l}is0(){return this.equals(g.ZERO)}negate(){return new g(c(-this.X),this.Y,this.Z,c(-this.T))}double(){const{a:e}=s,{X:t,Y:r,Z:n}=this,i=c(t*t),a=c(r*r),o=c(mh*c(n*n)),u=c(e*i),h=t+r,f=c(c(h*h)-i-a),l=u+a,y=l-o,p=u-a,d=c(f*y),A=c(l*p),w=c(f*p),m=c(y*l);return new g(d,A,m,w)}add(e){f(e);const{a:t,d:r}=s,{X:n,Y:i,Z:a,T:o}=this,{X:u,Y:h,Z:l,T:y}=e,p=c(n*u),d=c(i*h),A=c(o*r*y),w=c(a*l),m=c((n+i)*(u+h)-p-d),b=w-A,k=w+A,E=c(d-t*p),v=c(m*b),B=c(k*E),I=c(m*E),S=c(b*k);return new g(v,B,S,I)}subtract(e){return this.add(e.negate())}multiply(e){if(!i.isValidNot0(e))throw Error("invalid scalar: expected 1 <= sc < curve.n");const{p:t,f:r}=p.cached(this,e,e=>Au(g,e));return Au(g,[t,r])[0]}multiplyUnsafe(e,t=g.ZERO){if(!i.isValid(e))throw Error("invalid scalar: expected 0 <= sc < curve.n");return e===Ah?g.ZERO:this.is0()||e===wh?this:p.unsafe(this,e,e=>Au(g,e),t)}isSmallOrder(){return this.multiplyUnsafe(a).is0()}isTorsionFree(){return p.unsafe(this,s.n).is0()}toAffine(e){return l(this,e)}clearCofactor(){return a===wh?this:this.multiplyUnsafe(a)}toBytes(){const{x:e,y:t}=this.toAffine(),r=n.toBytes(t);return r[r.length-1]|=e&wh?128:0,r}toHex(){return Uo(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}get ex(){return this.X}get ey(){return this.Y}get ez(){return this.Z}get et(){return this.T}static normalizeZ(e){return Au(g,e)}static msm(e,t){return Su(g,i,e,t)}_setWindowSize(e){this.precompute(e)}toRawBytes(){return this.toBytes()}}g.BASE=new g(s.Gx,s.Gy,wh,c(s.Gx*s.Gy)),g.ZERO=new g(Ah,wh,wh,Ah),g.Fp=n,g.Fn=i;const p=new Iu(g,i.BITS);return g.BASE.precompute(8),g}const Eh=BigInt(0),vh=BigInt(1),Bh=BigInt(2),Ih={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),n:BigInt("0x3fffffffffffffffffffffffffffffffffffffffffffffffffffffff7cca23e9c44edb49aed63690216cc2728dc58f552378c292ab5844f3"),h:BigInt(4),a:BigInt(1),d:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffffffffffffffffffffffffffffffffffffffffffffffff6756"),Gx:BigInt("0x4f1970c66bed0ded221d15a622bf36da9e146570470f1767ea6de324a3d3a46412ae1af72ab66511433b80e18b00938e2626a82bc70cc05e"),Gy:BigInt("0x693f46716eb6bc248876203756c9c7624bea73736ca3984087789c1e05a0c2d73ad3ff1ce67c39c4fdbd132c4ed7c8ad9808795bf230fa14")},Sh=Object.assign({},Ih,{d:BigInt("0xd78b4bdc7f0daf19f24f38c29373a2ccad46157242a50f37809b1da3412a12e79ccc9c81264cfe9ad080997058fb61c4243cc32dbaa156b9"),Gx:BigInt("0x79a70b2b70400553ae7c9df416c792c61128751ac92969240c25a07d728bdc93e21f7787ed6972249de732f38496cd11698713093e9c04fc"),Gy:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffff80000000000000000000000000000000000000000000000000000001")}),Kh=Mo(()=>dh.create({dkLen:114})),Ch=BigInt(1),Dh=BigInt(2),Uh=BigInt(3);BigInt(4);const Ph=BigInt(11),xh=BigInt(22),Qh=BigInt(44),Rh=BigInt(88),Th=BigInt(223);function Mh(e){const t=Ih.p,r=e*e*e%t,n=r*r*e%t,i=gc(n,Uh,t)*n%t,s=gc(i,Uh,t)*n%t,a=gc(s,Dh,t)*r%t,o=gc(a,Ph,t)*a%t,c=gc(o,xh,t)*o%t,u=gc(c,Qh,t)*c%t,h=gc(u,Rh,t)*u%t,f=gc(h,Qh,t)*c%t,l=gc(f,Dh,t)*r%t,y=gc(l,Ch,t)*e%t;return gc(y,Th,t)*l%t}function Fh(e){return e[0]&=252,e[55]|=128,e[56]=0,e}function Lh(e,t){const r=Ih.p,n=yc(e*e*t,r),i=yc(n*e,r),s=yc(i*n*t,r),a=yc(i*Mh(s),r),o=yc(a*a,r);return{isValid:yc(o*t,r)===e,value:a}}const Nh=(()=>Bc(Ih.p,{BITS:456,isLE:!0}))(),Oh=(()=>Bc(Ih.n,{BITS:456,isLE:!0}))();function Hh(e,t,r){if(t.length>255)throw Error("context must be smaller than 255, got: "+t.length);return Ro((n="SigEd448",Uint8Array.from(n,(e,t)=>{const r=e.charCodeAt(0);if(1!==e.length||r>127)throw Error(`string contains non-ASCII character "${n[t]}" with code ${r} at position ${t}`);return r})),new Uint8Array([r?1:0,t.length]),t,e);var n}const zh=function(e){const{CURVE:t,curveOpts:r,hash:n,eddsaOpts:i}=function(e){const t={a:e.a,d:e.d,p:e.Fp.ORDER,n:e.n,h:e.h,Gx:e.Gx,Gy:e.Gy},r={Fp:e.Fp,Fn:Bc(t.n,e.nBitLength,!0),uvRatio:e.uvRatio},n={randomBytes:e.randomBytes,adjustScalarBytes:e.adjustScalarBytes,domain:e.domain,prehash:e.prehash,mapToCurve:e.mapToCurve};return{CURVE:t,curveOpts:r,hash:e.hash,eddsaOpts:n}}(e);return function(e,t){const r=t.Point;return Object.assign({},t,{ExtendedPoint:r,CURVE:e,nBitLength:r.Fn.BITS,nByteLength:r.Fn.BYTES})}(e,function(e,t,r={}){if("function"!=typeof t)throw Error('"hash" function param is required');tc(r,{},{adjustScalarBytes:"function",randomBytes:"function",domain:"function",prehash:"function",mapToCurve:"function"});const{prehash:n}=r,{BASE:i,Fp:s,Fn:a}=e,o=r.randomBytes||Lo,c=r.adjustScalarBytes||(e=>e),u=r.domain||((e,t,r)=>{if(Ho(r,"phflag"),t.length||r)throw Error("Contexts/pre-hash are not supported");return e});function h(e){return a.create(Vo(e))}function f(e){const{head:r,prefix:n,scalar:s}=function(e){const r=d.secretKey;e=Zo("private key",e,r);const n=Zo("hashed private key",t(e),2*r),i=c(n.slice(0,r));return{head:i,prefix:n.slice(r,2*r),scalar:h(i)}}(e),a=i.multiply(s),o=a.toBytes();return{head:r,prefix:n,scalar:s,point:a,pointBytes:o}}function l(e){return f(e).pointBytes}function y(e=Uint8Array.of(),...r){const i=Ro(...r);return h(t(u(i,Zo("context",e),!!n)))}const g={zip215:!0},p=s.BYTES,d={secretKey:p,publicKey:p,signature:2*p,seed:p};function A(e=o(d.seed)){return zo(e,d.seed,"seed")}const w={getExtendedPublicKey:f,randomSecretKey:A,isValidSecretKey:function(e){return Ao(e)&&e.length===a.BYTES},isValidPublicKey:function(t,r){try{return!!e.fromBytes(t,r)}catch(e){return!1}},toMontgomery(t){const{y:r}=e.fromBytes(t),n=d.publicKey,i=32===n;if(!i&&57!==n)throw Error("only defined for 25519 and 448");const a=i?s.div(wh+r,wh-r):s.div(r-wh,r+wh);return s.toBytes(a)},toMontgomeryPriv(e){const r=d.secretKey;zo(e,r);const n=t(e.subarray(0,r));return c(n).subarray(0,r)},randomPrivateKey:A,precompute:(t=8,r=e.BASE)=>r.precompute(t,!1)};return Object.freeze({keygen:function(e){const t=w.randomSecretKey(e);return{secretKey:t,publicKey:l(t)}},getPublicKey:l,sign:function(e,t,r={}){e=Zo("message",e),n&&(e=n(e));const{prefix:s,scalar:o,pointBytes:c}=f(t),u=y(r.context,s,e),h=i.multiply(u).toBytes(),l=y(r.context,h,c,e),g=a.create(u+l*o);if(!a.isValid(g))throw Error("sign failed: invalid s");return zo(Ro(h,a.toBytes(g)),d.signature,"result")},verify:function(t,r,s,a=g){const{context:o,zip215:c}=a,u=d.signature;t=Zo("signature",t,u),r=Zo("message",r),s=Zo("publicKey",s,d.publicKey),void 0!==c&&Ho(c,"zip215"),n&&(r=n(r));const h=u/2,f=t.subarray(0,h),l=Vo(t.subarray(h,u));let p,A,w;try{p=e.fromBytes(s,c),A=e.fromBytes(f,c),w=i.multiplyUnsafe(l)}catch(e){return!1}if(!c&&p.isSmallOrder())return!1;const m=y(o,A.toBytes(),p.toBytes(),r);return A.add(p.multiplyUnsafe(m)).subtract(w).clearCofactor().is0()},utils:w,Point:e,lengths:d})}(kh(t,r),n,i))}((()=>({...Ih,Fp:Nh,Fn:Oh,nBitLength:Oh.BITS,hash:Kh,adjustScalarBytes:Fh,domain:Hh,uvRatio:Lh}))());kh(Sh);const Gh=(()=>{const e=Ih.p;return function(e){const t=(tc(r=e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...r}));var r;const{P:n,type:i,adjustScalarBytes:s,powPminus2:a,randomBytes:o}=t,c="x25519"===i;if(!c&&"x448"!==i)throw Error("invalid type");const u=o||Lo,h=c?255:448,f=c?32:56,l=c?BigInt(9):BigInt(5),y=c?BigInt(121665):BigInt(39081),g=c?Bh**BigInt(254):Bh**BigInt(447),p=c?BigInt(8)*Bh**BigInt(251)-vh:BigInt(4)*Bh**BigInt(445)-vh,d=g+p+vh,A=e=>yc(e,n),w=m(l);function m(e){return Yo(A(e),f)}function b(e,t){const r=function(e,t){Wo("u",e,Eh,n),Wo("scalar",t,g,d);const r=t,i=e;let s=vh,o=Eh,c=e,u=vh,f=Eh;for(let e=BigInt(h-1);e>=Eh;e--){const t=r>>e&vh;f^=t,({x_2:s,x_3:c}=E(f,s,c)),({x_2:o,x_3:u}=E(f,o,u)),f=t;const n=s+o,a=A(n*n),h=s-o,l=A(h*h),g=a-l,p=c+u,d=A((c-u)*n),w=A(p*h),m=d+w,b=d-w;c=A(m*m),u=A(i*A(b*b)),s=A(a*l),o=A(g*(a+A(y*g)))}({x_2:s,x_3:c}=E(f,s,c)),({x_2:o,x_3:u}=E(f,o,u));const l=a(o);return A(s*l)}(function(e){const t=Zo("u coordinate",e,f);return c&&(t[31]&=127),A(Vo(t))}(t),function(e){return Vo(s(Zo("scalar",e,f)))}(e));if(r===Eh)throw Error("invalid private or public key received");return m(r)}function k(e){return b(e,w)}function E(e,t,r){const n=A(e*(t-r));return{x_2:t=A(t-n),x_3:r=A(r+n)}}const v={secretKey:f,publicKey:f,seed:f},B=(e=u(f))=>(mo(e,v.seed),e);return{keygen:function(e){const t=B(e);return{secretKey:t,publicKey:k(t)}},getSharedSecret:(e,t)=>b(e,t),getPublicKey:e=>k(e),scalarMult:b,scalarMultBase:k,utils:{randomSecretKey:B,randomPrivateKey:B},GuBytes:w.slice(),lengths:v}}({P:e,type:"x448",powPminus2:t=>yc(gc(Mh(t),Dh,e)*t,e),adjustScalarBytes:Fh})})(),_h={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),n:BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),h:BigInt(1),a:BigInt(0),b:BigInt(7),Gx:BigInt("0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798"),Gy:BigInt("0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8")},jh={beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),basises:[[BigInt("0x3086d221a7d46bcde86c90e49284eb15"),-BigInt("0xe4437ed6010e88286f547fa90abfe4c3")],[BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),BigInt("0x3086d221a7d46bcde86c90e49284eb15")]]},Vh=BigInt(2),qh=Bc(_h.p,{sqrt:function(e){const t=_h.p,r=BigInt(3),n=BigInt(6),i=BigInt(11),s=BigInt(22),a=BigInt(23),o=BigInt(44),c=BigInt(88),u=e*e*e%t,h=u*u*e%t,f=gc(h,r,t)*h%t,l=gc(f,r,t)*h%t,y=gc(l,Vh,t)*u%t,g=gc(y,i,t)*y%t,p=gc(g,s,t)*g%t,d=gc(p,o,t)*p%t,A=gc(d,c,t)*d%t,w=gc(A,o,t)*p%t,m=gc(w,r,t)*h%t,b=gc(m,a,t)*g%t,k=gc(b,n,t)*u%t,E=gc(k,Vh,t);if(!qh.eql(qh.sqr(E),e))throw Error("Cannot find square root");return E}}),Yh=zu({..._h,Fp:qh,lowS:!0,endo:jh},cu),Zh=cu,Jh=uu,Xh=Bc(BigInt("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),Wh=zu({a:Xh.create(BigInt("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:BigInt("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:Xh,n:BigInt("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:BigInt("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:BigInt("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:BigInt(1),lowS:!1},Zh),$h=hu,ef=fu,tf=Bc(BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),rf=zu({a:tf.create(BigInt("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:BigInt("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:tf,n:BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:BigInt("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:BigInt("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:BigInt(1),lowS:!1},ef),nf=Bc(BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),sf=zu({a:nf.create(BigInt("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:BigInt("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:nf,n:BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:BigInt("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:BigInt("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:BigInt(1),lowS:!1},$h),af=new Map(Object.entries({nistP256:Zu,nistP384:Ju,nistP521:Xu,brainpoolP256r1:Wh,brainpoolP384r1:rf,brainpoolP512r1:sf,secp256k1:Yh,x448:Gh,ed448:zh}));var of=Object.freeze({__proto__:null,nobleCurves:af});const cf=Uint32Array.from([1732584193,4023233417,2562383102,271733878,3285377520]),uf=new Uint32Array(80);class hf extends Dc{constructor(){super(64,20,8,!1),this.A=0|cf[0],this.B=0|cf[1],this.C=0|cf[2],this.D=0|cf[3],this.E=0|cf[4]}get(){const{A:e,B:t,C:r,D:n,E:i}=this;return[e,t,r,n,i]}set(e,t,r,n,i){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n,this.E=0|i}process(e,t){for(let r=0;r<16;r++,t+=4)uf[r]=e.getUint32(t,!1);for(let e=16;e<80;e++)uf[e]=So(uf[e-3]^uf[e-8]^uf[e-14]^uf[e-16],1);let{A:r,B:n,C:i,D:s,E:a}=this;for(let e=0;e<80;e++){let t,o;e<20?(t=Kc(n,i,s),o=1518500249):e<40?(t=n^i^s,o=1859775393):e<60?(t=Cc(n,i,s),o=2400959708):(t=n^i^s,o=3395469782);const c=So(r,5)+t+a+o+uf[e]|0;a=s,s=i,i=So(n,30),n=r,r=c}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,n,i,s,a)}roundClean(){vo(uf)}destroy(){this.set(0,0,0,0,0),vo(this.buffer)}}const ff=Mo(()=>new hf),lf=Uint8Array.from([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),yf=(()=>Uint8Array.from(Array(16).fill(0).map((e,t)=>t)))(),gf=(()=>yf.map(e=>(9*e+5)%16))(),pf=(()=>{const e=[[yf],[gf]];for(let t=0;t<4;t++)for(let r of e)r.push(r[t].map(e=>lf[e]));return e})(),df=(()=>pf[0])(),Af=(()=>pf[1])(),wf=[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map(e=>Uint8Array.from(e)),mf=df.map((e,t)=>e.map(e=>wf[t][e])),bf=Af.map((e,t)=>e.map(e=>wf[t][e])),kf=Uint32Array.from([0,1518500249,1859775393,2400959708,2840853838]),Ef=Uint32Array.from([1352829926,1548603684,1836072691,2053994217,0]);function vf(e,t,r,n){return 0===e?t^r^n:1===e?t&r|~t&n:2===e?(t|~r)^n:3===e?t&n|r&~n:t^(r|~n)}const Bf=new Uint32Array(16);class If extends Dc{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:e,h1:t,h2:r,h3:n,h4:i}=this;return[e,t,r,n,i]}set(e,t,r,n,i){this.h0=0|e,this.h1=0|t,this.h2=0|r,this.h3=0|n,this.h4=0|i}process(e,t){for(let r=0;r<16;r++,t+=4)Bf[r]=e.getUint32(t,!0);let r=0|this.h0,n=r,i=0|this.h1,s=i,a=0|this.h2,o=a,c=0|this.h3,u=c,h=0|this.h4,f=h;for(let e=0;e<5;e++){const t=4-e,l=kf[e],y=Ef[e],g=df[e],p=Af[e],d=mf[e],A=bf[e];for(let t=0;t<16;t++){const n=So(r+vf(e,i,a,c)+Bf[g[t]]+l,d[t])+h|0;r=h,h=c,c=0|So(a,10),a=i,i=n}for(let e=0;e<16;e++){const r=So(n+vf(t,s,o,u)+Bf[p[e]]+y,A[e])+f|0;n=f,f=u,u=0|So(o,10),o=s,s=r}}this.set(this.h1+a+u|0,this.h2+c+f|0,this.h3+h+n|0,this.h4+r+s|0,this.h0+i+o|0)}roundClean(){vo(Bf)}destroy(){this.destroyed=!0,vo(this.buffer),this.set(0,0,0,0,0)}}const Sf=ff,Kf=Mo(()=>new If),Cf=Array.from({length:64},(e,t)=>Math.floor(2**32*Math.abs(Math.sin(t+1)))),Df=(e,t,r)=>e&t^~e&r,Uf=new Uint32Array([1732584193,4023233417,2562383102,271733878]),Pf=new Uint32Array(16);class xf extends Dc{constructor(){super(64,16,8,!0),this.A=0|Uf[0],this.B=0|Uf[1],this.C=0|Uf[2],this.D=0|Uf[3]}get(){const{A:e,B:t,C:r,D:n}=this;return[e,t,r,n]}set(e,t,r,n){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)Pf[r]=e.getUint32(t,!0);let{A:r,B:n,C:i,D:s}=this;for(let e=0;e<64;e++){let t,a,o;e<16?(t=Df(n,i,s),a=e,o=[7,12,17,22]):e<32?(t=Df(s,n,i),a=(5*e+1)%16,o=[5,9,14,20]):e<48?(t=n^i^s,a=(3*e+5)%16,o=[4,11,16,23]):(t=i^(n|~s),a=7*e%16,o=[6,10,15,21]),t=t+r+Cf[e]+Pf[a],r=s,s=i,i=n,n+=So(t,o[e%4])}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,this.set(r,n,i,s)}roundClean(){Pf.fill(0)}destroy(){this.set(0,0,0,0),this.buffer.fill(0)}}const Qf=new Map(Object.entries({md5:Fo(()=>new xf),sha1:Sf,sha224:Jh,sha256:Zh,sha384:ef,sha512:$h,sha3_256:gh,sha3_512:ph,ripemd160:Kf}));var Rf=Object.freeze({__proto__:null,nobleHashes:Qf});const Tf="object"==typeof n&&"crypto"in n?n.crypto:void 0,Mf={};var Ff=function(e){var t,r=new Float64Array(16);if(e)for(t=0;t<e.length;t++)r[t]=e[t];return r},Lf=function(){throw Error("no PRNG")},Nf=new Uint8Array(32);Nf[0]=9;var Of=Ff(),Hf=Ff([1]),zf=Ff([56129,1]),Gf=Ff([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),_f=Ff([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),jf=Ff([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),Vf=Ff([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),qf=Ff([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function Yf(e,t,r,n){e[t]=r>>24&255,e[t+1]=r>>16&255,e[t+2]=r>>8&255,e[t+3]=255&r,e[t+4]=n>>24&255,e[t+5]=n>>16&255,e[t+6]=n>>8&255,e[t+7]=255&n}function Zf(e,t,r,n){return function(e,t,r,n){var i,s=0;for(i=0;i<32;i++)s|=e[t+i]^r[n+i];return(1&s-1>>>8)-1}(e,t,r,n)}function Jf(e,t){var r;for(r=0;r<16;r++)e[r]=0|t[r]}function Xf(e){var t,r,n=1;for(t=0;t<16;t++)r=e[t]+n+65535,n=Math.floor(r/65536),e[t]=r-65536*n;e[0]+=n-1+37*(n-1)}function Wf(e,t,r){for(var n,i=~(r-1),s=0;s<16;s++)n=i&(e[s]^t[s]),e[s]^=n,t[s]^=n}function $f(e,t){var r,n,i,s=Ff(),a=Ff();for(r=0;r<16;r++)a[r]=t[r];for(Xf(a),Xf(a),Xf(a),n=0;n<2;n++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),i=s[15]>>16&1,s[14]&=65535,Wf(a,s,1-i)}for(r=0;r<16;r++)e[2*r]=255&a[r],e[2*r+1]=a[r]>>8}function el(e,t){var r=new Uint8Array(32),n=new Uint8Array(32);return $f(r,e),$f(n,t),Zf(r,0,n,0)}function tl(e){var t=new Uint8Array(32);return $f(t,e),1&t[0]}function rl(e,t){var r;for(r=0;r<16;r++)e[r]=t[2*r]+(t[2*r+1]<<8);e[15]&=32767}function nl(e,t,r){for(var n=0;n<16;n++)e[n]=t[n]+r[n]}function il(e,t,r){for(var n=0;n<16;n++)e[n]=t[n]-r[n]}function sl(e,t,r){var n,i,s=0,a=0,o=0,c=0,u=0,h=0,f=0,l=0,y=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,k=0,E=0,v=0,B=0,I=0,S=0,K=0,C=0,D=0,U=0,P=0,x=0,Q=0,R=0,T=0,M=r[0],F=r[1],L=r[2],N=r[3],O=r[4],H=r[5],z=r[6],G=r[7],_=r[8],j=r[9],V=r[10],q=r[11],Y=r[12],Z=r[13],J=r[14],X=r[15];s+=(n=t[0])*M,a+=n*F,o+=n*L,c+=n*N,u+=n*O,h+=n*H,f+=n*z,l+=n*G,y+=n*_,g+=n*j,p+=n*V,d+=n*q,A+=n*Y,w+=n*Z,m+=n*J,b+=n*X,a+=(n=t[1])*M,o+=n*F,c+=n*L,u+=n*N,h+=n*O,f+=n*H,l+=n*z,y+=n*G,g+=n*_,p+=n*j,d+=n*V,A+=n*q,w+=n*Y,m+=n*Z,b+=n*J,k+=n*X,o+=(n=t[2])*M,c+=n*F,u+=n*L,h+=n*N,f+=n*O,l+=n*H,y+=n*z,g+=n*G,p+=n*_,d+=n*j,A+=n*V,w+=n*q,m+=n*Y,b+=n*Z,k+=n*J,E+=n*X,c+=(n=t[3])*M,u+=n*F,h+=n*L,f+=n*N,l+=n*O,y+=n*H,g+=n*z,p+=n*G,d+=n*_,A+=n*j,w+=n*V,m+=n*q,b+=n*Y,k+=n*Z,E+=n*J,v+=n*X,u+=(n=t[4])*M,h+=n*F,f+=n*L,l+=n*N,y+=n*O,g+=n*H,p+=n*z,d+=n*G,A+=n*_,w+=n*j,m+=n*V,b+=n*q,k+=n*Y,E+=n*Z,v+=n*J,B+=n*X,h+=(n=t[5])*M,f+=n*F,l+=n*L,y+=n*N,g+=n*O,p+=n*H,d+=n*z,A+=n*G,w+=n*_,m+=n*j,b+=n*V,k+=n*q,E+=n*Y,v+=n*Z,B+=n*J,I+=n*X,f+=(n=t[6])*M,l+=n*F,y+=n*L,g+=n*N,p+=n*O,d+=n*H,A+=n*z,w+=n*G,m+=n*_,b+=n*j,k+=n*V,E+=n*q,v+=n*Y,B+=n*Z,I+=n*J,S+=n*X,l+=(n=t[7])*M,y+=n*F,g+=n*L,p+=n*N,d+=n*O,A+=n*H,w+=n*z,m+=n*G,b+=n*_,k+=n*j,E+=n*V,v+=n*q,B+=n*Y,I+=n*Z,S+=n*J,K+=n*X,y+=(n=t[8])*M,g+=n*F,p+=n*L,d+=n*N,A+=n*O,w+=n*H,m+=n*z,b+=n*G,k+=n*_,E+=n*j,v+=n*V,B+=n*q,I+=n*Y,S+=n*Z,K+=n*J,C+=n*X,g+=(n=t[9])*M,p+=n*F,d+=n*L,A+=n*N,w+=n*O,m+=n*H,b+=n*z,k+=n*G,E+=n*_,v+=n*j,B+=n*V,I+=n*q,S+=n*Y,K+=n*Z,C+=n*J,D+=n*X,p+=(n=t[10])*M,d+=n*F,A+=n*L,w+=n*N,m+=n*O,b+=n*H,k+=n*z,E+=n*G,v+=n*_,B+=n*j,I+=n*V,S+=n*q,K+=n*Y,C+=n*Z,D+=n*J,U+=n*X,d+=(n=t[11])*M,A+=n*F,w+=n*L,m+=n*N,b+=n*O,k+=n*H,E+=n*z,v+=n*G,B+=n*_,I+=n*j,S+=n*V,K+=n*q,C+=n*Y,D+=n*Z,U+=n*J,P+=n*X,A+=(n=t[12])*M,w+=n*F,m+=n*L,b+=n*N,k+=n*O,E+=n*H,v+=n*z,B+=n*G,I+=n*_,S+=n*j,K+=n*V,C+=n*q,D+=n*Y,U+=n*Z,P+=n*J,x+=n*X,w+=(n=t[13])*M,m+=n*F,b+=n*L,k+=n*N,E+=n*O,v+=n*H,B+=n*z,I+=n*G,S+=n*_,K+=n*j,C+=n*V,D+=n*q,U+=n*Y,P+=n*Z,x+=n*J,Q+=n*X,m+=(n=t[14])*M,b+=n*F,k+=n*L,E+=n*N,v+=n*O,B+=n*H,I+=n*z,S+=n*G,K+=n*_,C+=n*j,D+=n*V,U+=n*q,P+=n*Y,x+=n*Z,Q+=n*J,R+=n*X,b+=(n=t[15])*M,a+=38*(E+=n*L),o+=38*(v+=n*N),c+=38*(B+=n*O),u+=38*(I+=n*H),h+=38*(S+=n*z),f+=38*(K+=n*G),l+=38*(C+=n*_),y+=38*(D+=n*j),g+=38*(U+=n*V),p+=38*(P+=n*q),d+=38*(x+=n*Y),A+=38*(Q+=n*Z),w+=38*(R+=n*J),m+=38*(T+=n*X),s=(n=(s+=38*(k+=n*F))+(i=1)+65535)-65536*(i=Math.floor(n/65536)),a=(n=a+i+65535)-65536*(i=Math.floor(n/65536)),o=(n=o+i+65535)-65536*(i=Math.floor(n/65536)),c=(n=c+i+65535)-65536*(i=Math.floor(n/65536)),u=(n=u+i+65535)-65536*(i=Math.floor(n/65536)),h=(n=h+i+65535)-65536*(i=Math.floor(n/65536)),f=(n=f+i+65535)-65536*(i=Math.floor(n/65536)),l=(n=l+i+65535)-65536*(i=Math.floor(n/65536)),y=(n=y+i+65535)-65536*(i=Math.floor(n/65536)),g=(n=g+i+65535)-65536*(i=Math.floor(n/65536)),p=(n=p+i+65535)-65536*(i=Math.floor(n/65536)),d=(n=d+i+65535)-65536*(i=Math.floor(n/65536)),A=(n=A+i+65535)-65536*(i=Math.floor(n/65536)),w=(n=w+i+65535)-65536*(i=Math.floor(n/65536)),m=(n=m+i+65535)-65536*(i=Math.floor(n/65536)),b=(n=b+i+65535)-65536*(i=Math.floor(n/65536)),s=(n=(s+=i-1+37*(i-1))+(i=1)+65535)-65536*(i=Math.floor(n/65536)),a=(n=a+i+65535)-65536*(i=Math.floor(n/65536)),o=(n=o+i+65535)-65536*(i=Math.floor(n/65536)),c=(n=c+i+65535)-65536*(i=Math.floor(n/65536)),u=(n=u+i+65535)-65536*(i=Math.floor(n/65536)),h=(n=h+i+65535)-65536*(i=Math.floor(n/65536)),f=(n=f+i+65535)-65536*(i=Math.floor(n/65536)),l=(n=l+i+65535)-65536*(i=Math.floor(n/65536)),y=(n=y+i+65535)-65536*(i=Math.floor(n/65536)),g=(n=g+i+65535)-65536*(i=Math.floor(n/65536)),p=(n=p+i+65535)-65536*(i=Math.floor(n/65536)),d=(n=d+i+65535)-65536*(i=Math.floor(n/65536)),A=(n=A+i+65535)-65536*(i=Math.floor(n/65536)),w=(n=w+i+65535)-65536*(i=Math.floor(n/65536)),m=(n=m+i+65535)-65536*(i=Math.floor(n/65536)),b=(n=b+i+65535)-65536*(i=Math.floor(n/65536)),s+=i-1+37*(i-1),e[0]=s,e[1]=a,e[2]=o,e[3]=c,e[4]=u,e[5]=h,e[6]=f,e[7]=l,e[8]=y,e[9]=g,e[10]=p,e[11]=d,e[12]=A,e[13]=w,e[14]=m,e[15]=b}function al(e,t){sl(e,t,t)}function ol(e,t){var r,n=Ff();for(r=0;r<16;r++)n[r]=t[r];for(r=253;r>=0;r--)al(n,n),2!==r&&4!==r&&sl(n,n,t);for(r=0;r<16;r++)e[r]=n[r]}function cl(e,t,r){var n,i,s=new Uint8Array(32),a=new Float64Array(80),o=Ff(),c=Ff(),u=Ff(),h=Ff(),f=Ff(),l=Ff();for(i=0;i<31;i++)s[i]=t[i];for(s[31]=127&t[31]|64,s[0]&=248,rl(a,r),i=0;i<16;i++)c[i]=a[i],h[i]=o[i]=u[i]=0;for(o[0]=h[0]=1,i=254;i>=0;--i)Wf(o,c,n=s[i>>>3]>>>(7&i)&1),Wf(u,h,n),nl(f,o,u),il(o,o,u),nl(u,c,h),il(c,c,h),al(h,f),al(l,o),sl(o,u,o),sl(u,c,f),nl(f,o,u),il(o,o,u),al(c,o),il(u,h,l),sl(o,u,zf),nl(o,o,h),sl(u,u,o),sl(o,h,l),sl(h,c,a),al(c,f),Wf(o,c,n),Wf(u,h,n);for(i=0;i<16;i++)a[i+16]=o[i],a[i+32]=u[i],a[i+48]=c[i],a[i+64]=h[i];var y=a.subarray(32),g=a.subarray(16);return ol(y,y),sl(g,g,y),$f(e,g),0}function ul(e,t){return cl(e,t,Nf)}var hl=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function fl(e,t,r,n){for(var i,s,a,o,c,u,h,f,l,y,g,p,d,A,w,m,b,k,E,v,B,I,S,K,C,D,U=new Int32Array(16),P=new Int32Array(16),x=e[0],Q=e[1],R=e[2],T=e[3],M=e[4],F=e[5],L=e[6],N=e[7],O=t[0],H=t[1],z=t[2],G=t[3],_=t[4],j=t[5],V=t[6],q=t[7],Y=0;n>=128;){for(E=0;E<16;E++)v=8*E+Y,U[E]=r[v+0]<<24|r[v+1]<<16|r[v+2]<<8|r[v+3],P[E]=r[v+4]<<24|r[v+5]<<16|r[v+6]<<8|r[v+7];for(E=0;E<80;E++)if(i=x,s=Q,a=R,o=T,c=M,u=F,h=L,l=O,y=H,g=z,p=G,d=_,A=j,w=V,S=65535&(I=q),K=I>>>16,C=65535&(B=N),D=B>>>16,S+=65535&(I=(_>>>14|M<<18)^(_>>>18|M<<14)^(M>>>9|_<<23)),K+=I>>>16,C+=65535&(B=(M>>>14|_<<18)^(M>>>18|_<<14)^(_>>>9|M<<23)),D+=B>>>16,S+=65535&(I=_&j^~_&V),K+=I>>>16,C+=65535&(B=M&F^~M&L),D+=B>>>16,S+=65535&(I=hl[2*E+1]),K+=I>>>16,C+=65535&(B=hl[2*E]),D+=B>>>16,B=U[E%16],K+=(I=P[E%16])>>>16,C+=65535&B,D+=B>>>16,C+=(K+=(S+=65535&I)>>>16)>>>16,S=65535&(I=k=65535&S|K<<16),K=I>>>16,C=65535&(B=b=65535&C|(D+=C>>>16)<<16),D=B>>>16,S+=65535&(I=(O>>>28|x<<4)^(x>>>2|O<<30)^(x>>>7|O<<25)),K+=I>>>16,C+=65535&(B=(x>>>28|O<<4)^(O>>>2|x<<30)^(O>>>7|x<<25)),D+=B>>>16,K+=(I=O&H^O&z^H&z)>>>16,C+=65535&(B=x&Q^x&R^Q&R),D+=B>>>16,f=65535&(C+=(K+=(S+=65535&I)>>>16)>>>16)|(D+=C>>>16)<<16,m=65535&S|K<<16,S=65535&(I=p),K=I>>>16,C=65535&(B=o),D=B>>>16,K+=(I=k)>>>16,C+=65535&(B=b),D+=B>>>16,Q=i,R=s,T=a,M=o=65535&(C+=(K+=(S+=65535&I)>>>16)>>>16)|(D+=C>>>16)<<16,F=c,L=u,N=h,x=f,H=l,z=y,G=g,_=p=65535&S|K<<16,j=d,V=A,q=w,O=m,E%16==15)for(v=0;v<16;v++)B=U[v],S=65535&(I=P[v]),K=I>>>16,C=65535&B,D=B>>>16,B=U[(v+9)%16],S+=65535&(I=P[(v+9)%16]),K+=I>>>16,C+=65535&B,D+=B>>>16,b=U[(v+1)%16],S+=65535&(I=((k=P[(v+1)%16])>>>1|b<<31)^(k>>>8|b<<24)^(k>>>7|b<<25)),K+=I>>>16,C+=65535&(B=(b>>>1|k<<31)^(b>>>8|k<<24)^b>>>7),D+=B>>>16,b=U[(v+14)%16],K+=(I=((k=P[(v+14)%16])>>>19|b<<13)^(b>>>29|k<<3)^(k>>>6|b<<26))>>>16,C+=65535&(B=(b>>>19|k<<13)^(k>>>29|b<<3)^b>>>6),D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,U[v]=65535&C|D<<16,P[v]=65535&S|K<<16;S=65535&(I=O),K=I>>>16,C=65535&(B=x),D=B>>>16,B=e[0],K+=(I=t[0])>>>16,C+=65535&B,D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[0]=x=65535&C|D<<16,t[0]=O=65535&S|K<<16,S=65535&(I=H),K=I>>>16,C=65535&(B=Q),D=B>>>16,B=e[1],K+=(I=t[1])>>>16,C+=65535&B,D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[1]=Q=65535&C|D<<16,t[1]=H=65535&S|K<<16,S=65535&(I=z),K=I>>>16,C=65535&(B=R),D=B>>>16,B=e[2],K+=(I=t[2])>>>16,C+=65535&B,D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[2]=R=65535&C|D<<16,t[2]=z=65535&S|K<<16,S=65535&(I=G),K=I>>>16,C=65535&(B=T),D=B>>>16,B=e[3],K+=(I=t[3])>>>16,C+=65535&B,D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[3]=T=65535&C|D<<16,t[3]=G=65535&S|K<<16,S=65535&(I=_),K=I>>>16,C=65535&(B=M),D=B>>>16,B=e[4],K+=(I=t[4])>>>16,C+=65535&B,D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[4]=M=65535&C|D<<16,t[4]=_=65535&S|K<<16,S=65535&(I=j),K=I>>>16,C=65535&(B=F),D=B>>>16,B=e[5],K+=(I=t[5])>>>16,C+=65535&B,D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[5]=F=65535&C|D<<16,t[5]=j=65535&S|K<<16,S=65535&(I=V),K=I>>>16,C=65535&(B=L),D=B>>>16,B=e[6],K+=(I=t[6])>>>16,C+=65535&B,D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[6]=L=65535&C|D<<16,t[6]=V=65535&S|K<<16,S=65535&(I=q),K=I>>>16,C=65535&(B=N),D=B>>>16,B=e[7],K+=(I=t[7])>>>16,C+=65535&B,D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[7]=N=65535&C|D<<16,t[7]=q=65535&S|K<<16,Y+=128,n-=128}return n}function ll(e,t,r){var n,i=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(i[0]=1779033703,i[1]=3144134277,i[2]=1013904242,i[3]=2773480762,i[4]=1359893119,i[5]=2600822924,i[6]=528734635,i[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,fl(i,s,t,r),r%=128,n=0;n<r;n++)a[n]=t[o-r+n];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,Yf(a,r-8,o/536870912|0,o<<3),fl(i,s,a,r),n=0;n<8;n++)Yf(e,8*n,i[n],s[n]);return 0}function yl(e,t){var r=Ff(),n=Ff(),i=Ff(),s=Ff(),a=Ff(),o=Ff(),c=Ff(),u=Ff(),h=Ff();il(r,e[1],e[0]),il(h,t[1],t[0]),sl(r,r,h),nl(n,e[0],e[1]),nl(h,t[0],t[1]),sl(n,n,h),sl(i,e[3],t[3]),sl(i,i,_f),sl(s,e[2],t[2]),nl(s,s,s),il(a,n,r),il(o,s,i),nl(c,s,i),nl(u,n,r),sl(e[0],a,o),sl(e[1],u,c),sl(e[2],c,o),sl(e[3],a,u)}function gl(e,t,r){var n;for(n=0;n<4;n++)Wf(e[n],t[n],r)}function pl(e,t){var r=Ff(),n=Ff(),i=Ff();ol(i,t[2]),sl(r,t[0],i),sl(n,t[1],i),$f(e,n),e[31]^=tl(r)<<7}function dl(e,t,r){var n,i;for(Jf(e[0],Of),Jf(e[1],Hf),Jf(e[2],Hf),Jf(e[3],Of),i=255;i>=0;--i)gl(e,t,n=r[i/8|0]>>(7&i)&1),yl(t,e),yl(e,e),gl(e,t,n)}function Al(e,t){var r=[Ff(),Ff(),Ff(),Ff()];Jf(r[0],jf),Jf(r[1],Vf),Jf(r[2],Hf),sl(r[3],jf,Vf),dl(e,r,t)}function wl(e,t,r){var n,i=new Uint8Array(64),s=[Ff(),Ff(),Ff(),Ff()];for(r||Lf(t,32),ll(i,t,32),i[0]&=248,i[31]&=127,i[31]|=64,Al(s,i),pl(e,s),n=0;n<32;n++)t[n+32]=e[n];return 0}var ml=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function bl(e,t){var r,n,i,s;for(n=63;n>=32;--n){for(r=0,i=n-32,s=n-12;i<s;++i)t[i]+=r-16*t[n]*ml[i-(n-32)],r=Math.floor((t[i]+128)/256),t[i]-=256*r;t[i]+=r,t[n]=0}for(r=0,i=0;i<32;i++)t[i]+=r-(t[31]>>4)*ml[i],r=t[i]>>8,t[i]&=255;for(i=0;i<32;i++)t[i]-=r*ml[i];for(n=0;n<32;n++)t[n+1]+=t[n]>>8,e[n]=255&t[n]}function kl(e){var t,r=new Float64Array(64);for(t=0;t<64;t++)r[t]=e[t];for(t=0;t<64;t++)e[t]=0;bl(e,r)}var El=64;function vl(){for(var e=0;e<arguments.length;e++)if(!(arguments[e]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}Mf.scalarMult=function(e,t){if(vl(e,t),32!==e.length)throw Error("bad n size");if(32!==t.length)throw Error("bad p size");var r=new Uint8Array(32);return cl(r,e,t),r},Mf.box={},Mf.box.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(32);return function(e,t){Lf(t,32),ul(e,t)}(e,t),{publicKey:e,secretKey:t}},Mf.box.keyPair.fromSecretKey=function(e){if(vl(e),32!==e.length)throw Error("bad secret key size");var t=new Uint8Array(32);return ul(t,e),{publicKey:t,secretKey:new Uint8Array(e)}},Mf.sign=function(e,t){if(vl(e,t),64!==t.length)throw Error("bad secret key size");var r=new Uint8Array(El+e.length);return function(e,t,r,n){var i,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),u=new Float64Array(64),h=[Ff(),Ff(),Ff(),Ff()];for(ll(a,n,32),a[0]&=248,a[31]&=127,a[31]|=64,i=0;i<r;i++)e[64+i]=t[i];for(i=0;i<32;i++)e[32+i]=a[32+i];for(ll(c,e.subarray(32),r+32),kl(c),Al(h,c),pl(e,h),i=32;i<64;i++)e[i]=n[i];for(ll(o,e,r+64),kl(o),i=0;i<64;i++)u[i]=0;for(i=0;i<32;i++)u[i]=c[i];for(i=0;i<32;i++)for(s=0;s<32;s++)u[i+s]+=o[i]*a[s];bl(e.subarray(32),u)}(r,e,e.length,t),r},Mf.sign.detached=function(e,t){for(var r=Mf.sign(e,t),n=new Uint8Array(El),i=0;i<n.length;i++)n[i]=r[i];return n},Mf.sign.detached.verify=function(e,t,r){if(vl(e,t,r),t.length!==El)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var n,i=new Uint8Array(El+e.length),s=new Uint8Array(El+e.length);for(n=0;n<El;n++)i[n]=t[n];for(n=0;n<e.length;n++)i[n+El]=e[n];return function(e,t,r,n){var i,s=new Uint8Array(32),a=new Uint8Array(64),o=[Ff(),Ff(),Ff(),Ff()],c=[Ff(),Ff(),Ff(),Ff()];if(r<64)return-1;if(function(e,t){var r=Ff(),n=Ff(),i=Ff(),s=Ff(),a=Ff(),o=Ff(),c=Ff();return Jf(e[2],Hf),rl(e[1],t),al(i,e[1]),sl(s,i,Gf),il(i,i,e[2]),nl(s,e[2],s),al(a,s),al(o,a),sl(c,o,a),sl(r,c,i),sl(r,r,s),function(e,t){var r,n=Ff();for(r=0;r<16;r++)n[r]=t[r];for(r=250;r>=0;r--)al(n,n),1!==r&&sl(n,n,t);for(r=0;r<16;r++)e[r]=n[r]}(r,r),sl(r,r,i),sl(r,r,s),sl(r,r,s),sl(e[0],r,s),al(n,e[0]),sl(n,n,s),el(n,i)&&sl(e[0],e[0],qf),al(n,e[0]),sl(n,n,s),el(n,i)?-1:(tl(e[0])===t[31]>>7&&il(e[0],Of,e[0]),sl(e[3],e[0],e[1]),0)}(c,n))return-1;for(i=0;i<r;i++)e[i]=t[i];for(i=0;i<32;i++)e[i+32]=n[i];if(ll(a,e,r),kl(a),dl(o,c,a),Al(c,t.subarray(32)),yl(o,c),pl(s,o),r-=64,Zf(t,0,s,0)){for(i=0;i<r;i++)e[i]=0;return-1}for(i=0;i<r;i++)e[i]=t[i+64];return r}(s,i,i.length,r)>=0},Mf.sign.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(64);return wl(e,t),{publicKey:e,secretKey:t}},Mf.sign.keyPair.fromSecretKey=function(e){if(vl(e),64!==e.length)throw Error("bad secret key size");for(var t=new Uint8Array(32),r=0;r<t.length;r++)t[r]=e[32+r];return{publicKey:t,secretKey:new Uint8Array(e)}},Mf.sign.keyPair.fromSeed=function(e){if(vl(e),32!==e.length)throw Error("bad seed size");for(var t=new Uint8Array(32),r=new Uint8Array(64),n=0;n<32;n++)r[n]=e[n];return wl(t,r,!0),{publicKey:t,secretKey:r}},Mf.setPRNG=function(e){Lf=e},Tf&&Tf.getRandomValues&&Mf.setPRNG(function(e,t){var r,n=new Uint8Array(t);for(r=0;r<t;r+=65536)Tf.getRandomValues(n.subarray(r,r+Math.min(t-r,65536)));for(r=0;r<t;r++)e[r]=n[r];!function(e){for(var t=0;t<e.length;t++)e[t]=0}(n)});var Bl=Object.freeze({__proto__:null,default:Mf});function Il(e,t,r,n,i,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],u=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],h=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],f=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],l=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],y=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let g,p,d,A,w,m,b,k,E,v,B=0,I=t.length;const S=32===e.length?3:9;k=3===S?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(t=function(e){const t=8-e.length%8;let r;if(!(t<8)){if(8===t)return e;throw Error("des: invalid padding")}r=0;const n=new Uint8Array(e.length+t);for(let t=0;t<e.length;t++)n[t]=e[t];for(let r=0;r<t;r++)n[e.length+r]=0;return n}(t),I=t.length);let K=new Uint8Array(I),C=0;for(;B<I;){for(m=t[B++]<<24|t[B++]<<16|t[B++]<<8|t[B++],b=t[B++]<<24|t[B++]<<16|t[B++]<<8|t[B++],d=252645135&(m>>>4^b),b^=d,m^=d<<4,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,m=m<<1|m>>>31,b=b<<1|b>>>31,p=0;p<S;p+=3){for(E=k[p+1],v=k[p+2],g=k[p];g!==E;g+=v)A=b^e[g],w=(b>>>4|b<<28)^e[g+1],d=m,m=b,b=d^(o[A>>>24&63]|u[A>>>16&63]|f[A>>>8&63]|y[63&A]|a[w>>>24&63]|c[w>>>16&63]|h[w>>>8&63]|l[63&w]);d=m,m=b,b=d}m=m>>>1|m<<31,b=b>>>1|b<<31,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=252645135&(m>>>4^b),b^=d,m^=d<<4,K[C++]=m>>>24,K[C++]=m>>>16&255,K[C++]=m>>>8&255,K[C++]=255&m,K[C++]=b>>>24,K[C++]=b>>>16&255,K[C++]=b>>>8&255,K[C++]=255&b}return r||(K=function(e){let t,r=null;if(t=0,!r){for(r=1;0===e[e.length-r];)r++;r--}return e.subarray(0,e.length-r)}(K)),K}function Sl(e){const t=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],n=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],i=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],u=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],h=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],f=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],l=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],y=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],g=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=e.length>8?3:1,d=Array(32*p),A=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let w,m,b,k=0,E=0;for(let v=0;v<p;v++){let p=e[k++]<<24|e[k++]<<16|e[k++]<<8|e[k++],v=e[k++]<<24|e[k++]<<16|e[k++]<<8|e[k++];b=252645135&(p>>>4^v),v^=b,p^=b<<4,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=858993459&(p>>>2^v),v^=b,p^=b<<2,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=16711935&(v>>>8^p),p^=b,v^=b<<8,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=p<<8|v>>>20&240,p=v<<24|v<<8&16711680|v>>>8&65280|v>>>24&240,v=b;for(let e=0;e<16;e++)A[e]?(p=p<<2|p>>>26,v=v<<2|v>>>26):(p=p<<1|p>>>27,v=v<<1|v>>>27),p&=-15,v&=-15,w=t[p>>>28]|r[p>>>24&15]|n[p>>>20&15]|i[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],m=c[v>>>28]|u[v>>>24&15]|h[v>>>20&15]|f[v>>>16&15]|l[v>>>12&15]|y[v>>>8&15]|g[v>>>4&15],b=65535&(m>>>16^w),d[E++]=w^b,d[E++]=m^b<<16}return d}function Kl(e){this.key=[];for(let t=0;t<3;t++)this.key.push(new Uint8Array(e.subarray(8*t,8*t+8)));this.encrypt=function(e){return Il(Sl(this.key[2]),Il(Sl(this.key[1]),Il(Sl(this.key[0]),e,!0),!1),!0)}}function Cl(){this.BlockSize=8,this.KeySize=16,this.setKey=function(e){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),e.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(e),!0},this.reset=function(){for(let e=0;e<16;e++)this.masking[e]=0,this.rotate[e]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^n(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^i(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^i(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^i(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^i(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^i(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>>16&255,t[s+6]=o>>>8&255,t[s+7]=255&o}return t},this.decrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^i(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^n(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^n(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^n(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^n(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^n(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>16&255,t[s+6]=o>>8&255,t[s+7]=255&o}return t};const e=[,,,,];e[0]=[,,,,],e[0][0]=[4,0,13,15,12,14,8],e[0][1]=[5,2,16,18,17,19,10],e[0][2]=[6,3,23,22,21,20,9],e[0][3]=[7,1,26,25,27,24,11],e[1]=[,,,,],e[1][0]=[0,6,21,23,20,22,16],e[1][1]=[1,4,0,2,1,3,18],e[1][2]=[2,5,7,6,5,4,17],e[1][3]=[3,7,10,9,11,8,19],e[2]=[,,,,],e[2][0]=[4,0,13,15,12,14,8],e[2][1]=[5,2,16,18,17,19,10],e[2][2]=[6,3,23,22,21,20,9],e[2][3]=[7,1,26,25,27,24,11],e[3]=[,,,,],e[3][0]=[0,6,21,23,20,22,16],e[3][1]=[1,4,0,2,1,3,18],e[3][2]=[2,5,7,6,5,4,17],e[3][3]=[3,7,10,9,11,8,19];const t=[,,,,];function r(e,t,r){const n=t+e,i=n<<r|n>>>32-r;return(s[0][i>>>24]^s[1][i>>>16&255])-s[2][i>>>8&255]+s[3][255&i]}function n(e,t,r){const n=t^e,i=n<<r|n>>>32-r;return s[0][i>>>24]-s[1][i>>>16&255]+s[2][i>>>8&255]^s[3][255&i]}function i(e,t,r){const n=t-e,i=n<<r|n>>>32-r;return(s[0][i>>>24]+s[1][i>>>16&255]^s[2][i>>>8&255])-s[3][255&i]}t[0]=[,,,,],t[0][0]=[24,25,23,22,18],t[0][1]=[26,27,21,20,22],t[0][2]=[28,29,19,18,25],t[0][3]=[30,31,17,16,28],t[1]=[,,,,],t[1][0]=[3,2,12,13,8],t[1][1]=[1,0,14,15,13],t[1][2]=[7,6,8,9,3],t[1][3]=[5,4,10,11,7],t[2]=[,,,,],t[2][0]=[19,18,28,29,25],t[2][1]=[17,16,30,31,28],t[2][2]=[23,22,24,25,18],t[2][3]=[21,20,26,27,22],t[3]=[,,,,],t[3][0]=[8,9,7,6,3],t[3][1]=[10,11,5,4,7],t[3][2]=[12,13,3,2,8],t[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const n=[,,,,,,,,],i=Array(32);let a;for(let e=0;e<4;e++)a=4*e,n[e]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,u=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const t=e[r][a];c=n[t[1]],c^=s[4][n[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[5][n[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[6][n[t[4]>>>2]>>>24-8*(3&t[4])&255],c^=s[7][n[t[5]>>>2]>>>24-8*(3&t[5])&255],c^=s[o[a]][n[t[6]>>>2]>>>24-8*(3&t[6])&255],n[t[0]]=c}for(a=0;a<4;a++){const e=t[r][a];c=s[4][n[e[0]>>>2]>>>24-8*(3&e[0])&255],c^=s[5][n[e[1]>>>2]>>>24-8*(3&e[1])&255],c^=s[6][n[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[7][n[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[4+a][n[e[4]>>>2]>>>24-8*(3&e[4])&255],i[u]=c,u++}}for(let e=0;e<16;e++)this.masking[e]=i[e],this.rotate[e]=31&i[16+e]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function Dl(e){this.cast5=new Cl,this.cast5.setKey(e),this.encrypt=function(e){return this.cast5.encrypt(e)}}Kl.keySize=Kl.prototype.keySize=24,Kl.blockSize=Kl.prototype.blockSize=8,Dl.blockSize=Dl.prototype.blockSize=8,Dl.keySize=Dl.prototype.keySize=16;const Ul=4294967295;function Pl(e,t){return(e<<t|e>>>32-t)&Ul}function xl(e,t){return e[t]|e[t+1]<<8|e[t+2]<<16|e[t+3]<<24}function Ql(e,t,r){e.splice(t,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function Rl(e,t){return e>>>8*t&255}function Tl(e){this.tf=function(){let e=null,t=null,r=-1,n=[],i=[[],[],[],[]];function s(e){return i[0][Rl(e,0)]^i[1][Rl(e,1)]^i[2][Rl(e,2)]^i[3][Rl(e,3)]}function a(e){return i[0][Rl(e,3)]^i[1][Rl(e,0)]^i[2][Rl(e,1)]^i[3][Rl(e,2)]}function o(e,t){let r=s(t[0]),i=a(t[1]);t[2]=Pl(t[2]^r+i+n[4*e+8]&Ul,31),t[3]=Pl(t[3],1)^r+2*i+n[4*e+9]&Ul,r=s(t[2]),i=a(t[3]),t[0]=Pl(t[0]^r+i+n[4*e+10]&Ul,31),t[1]=Pl(t[1],1)^r+2*i+n[4*e+11]&Ul}function c(e,t){let r=s(t[0]),i=a(t[1]);t[2]=Pl(t[2],1)^r+i+n[4*e+10]&Ul,t[3]=Pl(t[3]^r+2*i+n[4*e+11]&Ul,31),r=s(t[2]),i=a(t[3]),t[0]=Pl(t[0],1)^r+i+n[4*e+8]&Ul,t[1]=Pl(t[1]^r+2*i+n[4*e+9]&Ul,31)}return{name:"twofish",blocksize:16,open:function(t){let r,s,a,o,c;e=t;const u=[],h=[],f=[];let l;const y=[];let g,p,d;const A=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],w=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],m=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],k=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],E=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],v=[[],[]],B=[[],[],[],[]];function I(e){return e^e>>2^[0,90,180,238][3&e]}function S(e){return e^e>>1^e>>2^[0,238,180,90][3&e]}function K(e,t){let r,n,i;for(r=0;r<8;r++)n=t>>>24,t=t<<8&Ul|e>>>24,e=e<<8&Ul,i=n<<1,128&n&&(i^=333),t^=n^i<<16,i^=n>>>1,1&n&&(i^=166),t^=i<<24|i<<8;return t}function C(e,t){const r=t>>4,n=15&t,i=A[e][r^n],s=w[e][k[n]^E[r]];return b[e][k[s]^E[i]]<<4|m[e][i^s]}function D(e,t){let r=Rl(e,0),n=Rl(e,1),i=Rl(e,2),s=Rl(e,3);switch(l){case 4:r=v[1][r]^Rl(t[3],0),n=v[0][n]^Rl(t[3],1),i=v[0][i]^Rl(t[3],2),s=v[1][s]^Rl(t[3],3);case 3:r=v[1][r]^Rl(t[2],0),n=v[1][n]^Rl(t[2],1),i=v[0][i]^Rl(t[2],2),s=v[0][s]^Rl(t[2],3);case 2:r=v[0][v[0][r]^Rl(t[1],0)]^Rl(t[0],0),n=v[0][v[1][n]^Rl(t[1],1)]^Rl(t[0],1),i=v[1][v[0][i]^Rl(t[1],2)]^Rl(t[0],2),s=v[1][v[1][s]^Rl(t[1],3)]^Rl(t[0],3)}return B[0][r]^B[1][n]^B[2][i]^B[3][s]}for(e=e.slice(0,32),r=e.length;16!==r&&24!==r&&32!==r;)e[r++]=0;for(r=0;r<e.length;r+=4)f[r>>2]=xl(e,r);for(r=0;r<256;r++)v[0][r]=C(0,r),v[1][r]=C(1,r);for(r=0;r<256;r++)g=v[1][r],p=I(g),d=S(g),B[0][r]=g+(p<<8)+(d<<16)+(d<<24),B[2][r]=p+(d<<8)+(g<<16)+(d<<24),g=v[0][r],p=I(g),d=S(g),B[1][r]=d+(d<<8)+(p<<16)+(g<<24),B[3][r]=p+(g<<8)+(d<<16)+(p<<24);for(l=f.length/2,r=0;r<l;r++)s=f[r+r],u[r]=s,a=f[r+r+1],h[r]=a,y[l-r-1]=K(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=D(s,u),a=Pl(D(a,h),8),n[r]=s+a&Ul,n[r+1]=Pl(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,l){case 4:s=v[1][s]^Rl(y[3],0),a=v[0][a]^Rl(y[3],1),o=v[0][o]^Rl(y[3],2),c=v[1][c]^Rl(y[3],3);case 3:s=v[1][s]^Rl(y[2],0),a=v[1][a]^Rl(y[2],1),o=v[0][o]^Rl(y[2],2),c=v[0][c]^Rl(y[2],3);case 2:i[0][r]=B[0][v[0][v[0][s]^Rl(y[1],0)]^Rl(y[0],0)],i[1][r]=B[1][v[0][v[1][a]^Rl(y[1],1)]^Rl(y[0],1)],i[2][r]=B[2][v[1][v[0][o]^Rl(y[1],2)]^Rl(y[0],2)],i[3][r]=B[3][v[1][v[1][c]^Rl(y[1],3)]^Rl(y[0],3)]}},close:function(){n=[],i=[[],[],[],[]]},encrypt:function(e,i){t=e,r=i;const s=[xl(t,r)^n[0],xl(t,r+4)^n[1],xl(t,r+8)^n[2],xl(t,r+12)^n[3]];for(let e=0;e<8;e++)o(e,s);return Ql(t,r,s[2]^n[4]),Ql(t,r+4,s[3]^n[5]),Ql(t,r+8,s[0]^n[6]),Ql(t,r+12,s[1]^n[7]),r+=16,t},decrypt:function(e,i){t=e,r=i;const s=[xl(t,r)^n[4],xl(t,r+4)^n[5],xl(t,r+8)^n[6],xl(t,r+12)^n[7]];for(let e=7;e>=0;e--)c(e,s);Ql(t,r,s[2]^n[0]),Ql(t,r+4,s[3]^n[1]),Ql(t,r+8,s[0]^n[2]),Ql(t,r+12,s[1]^n[3]),r+=16},finalize:function(){return t}}}(),this.tf.open(Array.from(e),0),this.encrypt=function(e){return this.tf.encrypt(Array.from(e),0)}}function Ml(){}function Fl(e){this.bf=new Ml,this.bf.init(e),this.encrypt=function(e){return this.bf.encryptBlock(e)}}Tl.keySize=Tl.prototype.keySize=32,Tl.blockSize=Tl.prototype.blockSize=16,Ml.prototype.BLOCKSIZE=8,Ml.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],Ml.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],Ml.prototype.NN=16,Ml.prototype._clean=function(e){return e<0&&(e=2147483648+(2147483647&e)),e},Ml.prototype._F=function(e){let t;const r=255&e,n=255&(e>>>=8),i=255&(e>>>=8),s=255&(e>>>=8);return t=this.sboxes[0][s]+this.sboxes[1][i],t^=this.sboxes[2][n],t+=this.sboxes[3][r],t},Ml.prototype._encryptBlock=function(e){let t,r=e[0],n=e[1];for(t=0;t<this.NN;++t){r^=this.parray[t],n=this._F(r)^n;const e=r;r=n,n=e}r^=this.parray[this.NN+0],n^=this.parray[this.NN+1],e[0]=this._clean(n),e[1]=this._clean(r)},Ml.prototype.encryptBlock=function(e){let t;const r=[0,0],n=this.BLOCKSIZE/2;for(t=0;t<this.BLOCKSIZE/2;++t)r[0]=r[0]<<8|255&e[t+0],r[1]=r[1]<<8|255&e[t+n];this._encryptBlock(r);const i=[];for(t=0;t<this.BLOCKSIZE/2;++t)i[t+0]=r[0]>>>24-8*t&255,i[t+n]=r[1]>>>24-8*t&255;return i},Ml.prototype._decryptBlock=function(e){let t,r=e[0],n=e[1];for(t=this.NN+1;t>1;--t){r^=this.parray[t],n=this._F(r)^n;const e=r;r=n,n=e}r^=this.parray[1],n^=this.parray[0],e[0]=this._clean(n),e[1]=this._clean(r)},Ml.prototype.init=function(e){let t,r=0;for(this.parray=[],t=0;t<this.NN+2;++t){let n=0;for(let t=0;t<4;++t)n=n<<8|255&e[r],++r>=e.length&&(r=0);this.parray[t]=this.PARRAY[t]^n}for(this.sboxes=[],t=0;t<4;++t)for(this.sboxes[t]=[],r=0;r<256;++r)this.sboxes[t][r]=this.SBOXES[t][r];const n=[0,0];for(t=0;t<this.NN+2;t+=2)this._encryptBlock(n),this.parray[t+0]=n[0],this.parray[t+1]=n[1];for(t=0;t<4;++t)for(r=0;r<256;r+=2)this._encryptBlock(n),this.sboxes[t][r+0]=n[0],this.sboxes[t][r+1]=n[1]},Fl.keySize=Fl.prototype.keySize=16,Fl.blockSize=Fl.prototype.blockSize=8;const Ll=new Map(Object.entries({tripledes:Kl,cast5:Dl,twofish:Tl,blowfish:Fl}));var Nl=Object.freeze({__proto__:null,legacyCiphers:Ll});function Ol(e,t,r,n){e[t]+=r[n],e[t+1]+=r[n+1]+(e[t]<r[n])}function Hl(e,t){e[0]+=t,e[1]+=e[0]<t}function zl(e,t,r,n,i,s,a,o){Ol(e,r,e,n),Ol(e,r,t,a);let c=e[s]^e[r],u=e[s+1]^e[r+1];e[s]=u,e[s+1]=c,Ol(e,i,e,s),c=e[n]^e[i],u=e[n+1]^e[i+1],e[n]=c>>>24^u<<8,e[n+1]=u>>>24^c<<8,Ol(e,r,e,n),Ol(e,r,t,o),c=e[s]^e[r],u=e[s+1]^e[r+1],e[s]=c>>>16^u<<16,e[s+1]=u>>>16^c<<16,Ol(e,i,e,s),c=e[n]^e[i],u=e[n+1]^e[i+1],e[n]=u>>>31^c<<1,e[n+1]=c>>>31^u<<1}const Gl=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),_l=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map(e=>2*e));function jl(e,t){const r=new Uint32Array(32),n=new Uint32Array(e.b.buffer,e.b.byteOffset,32);for(let t=0;t<16;t++)r[t]=e.h[t],r[t+16]=Gl[t];r[24]^=e.t0[0],r[25]^=e.t0[1];const i=t?4294967295:0;r[28]^=i,r[29]^=i;for(let e=0;e<12;e++){const t=e<<4;zl(r,n,0,8,16,24,_l[t+0],_l[t+1]),zl(r,n,2,10,18,26,_l[t+2],_l[t+3]),zl(r,n,4,12,20,28,_l[t+4],_l[t+5]),zl(r,n,6,14,22,30,_l[t+6],_l[t+7]),zl(r,n,0,10,20,30,_l[t+8],_l[t+9]),zl(r,n,2,12,22,24,_l[t+10],_l[t+11]),zl(r,n,4,14,16,26,_l[t+12],_l[t+13]),zl(r,n,6,8,18,28,_l[t+14],_l[t+15])}for(let t=0;t<16;t++)e.h[t]^=r[t]^r[t+16]}class Vl{constructor(e,t,r,n){const i=new Uint8Array(64);this.S={b:new Uint8Array(Zl),h:new Uint32Array(Yl/4),t0:new Uint32Array(2),c:0,outlen:e},i[0]=e,t&&(i[1]=t.length),i[2]=1,i[3]=1,r&&i.set(r,32),n&&i.set(n,48);const s=new Uint32Array(i.buffer,i.byteOffset,i.length/Uint32Array.BYTES_PER_ELEMENT);for(let e=0;e<16;e++)this.S.h[e]=Gl[e]^s[e];if(t){const e=new Uint8Array(Zl);e.set(t),this.update(e)}}update(e){if(!(e instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let t=0;for(;t<e.length;){this.S.c===Zl&&(Hl(this.S.t0,this.S.c),jl(this.S,!1),this.S.c=0);let r=Zl-this.S.c;this.S.b.set(e.subarray(t,t+r),this.S.c);const n=Math.min(r,e.length-t);this.S.c+=n,t+=n}return this}digest(e){Hl(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=Zl,jl(this.S,!0);const t=e||new Uint8Array(this.S.outlen);for(let e=0;e<this.S.outlen;e++)t[e]=this.S.h[e>>2]>>8*(3&e);return this.S.h=null,t.buffer}}function ql(e,t,r,n){if(e>Yl)throw Error(`outlen must be at most ${Yl} (given: ${e})`);return new Vl(e,t,r,n)}const Yl=64,Zl=128,Jl=1024,Xl=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function Wl(e,t,r){return e[r+0]=t,e[r+1]=t>>8,e[r+2]=t>>16,e[r+3]=t>>24,e}function $l(e,t,r){if(t>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let n=t;for(let t=r;t<r+7;t++)e[t]=n,n=(n-e[t])/256;return e}function ey(e,t,r){const n=new Uint8Array(64),i=new Uint8Array(4+t.length);if(Wl(i,e,0),i.set(t,4),e<=64)return ql(e).update(i).digest(r),r;const s=Math.ceil(e/32)-2;for(let e=0;e<s;e++)ql(64).update(0===e?i:n).digest(n),r.set(n.subarray(0,32),32*e);const a=new Uint8Array(ql(e-32*s).update(n).digest());return r.set(a,32*s),r}function ty(e,t,r,n){return e.fn.XOR(t.byteOffset,r.byteOffset,n.byteOffset),t}function ry(e,t,r,n){return e.fn.G(t.byteOffset,r.byteOffset,n.byteOffset,e.refs.gZ.byteOffset),n}function ny(e,t,r,n){return e.fn.G2(t.byteOffset,r.byteOffset,n.byteOffset,e.refs.gZ.byteOffset),n}function*iy(e,t,r,n,i,s,a,o){e.refs.prngTmp.fill(0);const c=e.refs.prngTmp.subarray(0,48);$l(c,t,0),$l(c,r,8),$l(c,n,16),$l(c,i,24),$l(c,s,32),$l(c,2,40);for(let t=1;t<=a;t++){$l(e.refs.prngTmp,t,c.length);const r=ny(e,e.refs.ZERO1024,e.refs.prngTmp,e.refs.prngR);for(let e=1===t?8*o:0;e<r.length;e+=8)yield r.subarray(e,e+8)}return[]}let sy;function ay(e,t,r,i){var s=null,a=n.atob(r),o=a.length;s=new Uint8Array(new ArrayBuffer(o));for(var c=0;c<o;c++)s[c]=a.charCodeAt(c);return function(e,t){var r=WebAssembly.instantiate,n=WebAssembly.compile;return t?r(e,t):n(e)}(s,i)}var oy,cy,uy,hy,fy,ly,yy,gy,py=Object.freeze({__proto__:null,default:async()=>async function(e,t){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),n=await async function(e,t,r){const n={env:{memory:e}};if(void 0===sy)try{const e=await t(n);return sy=!0,e}catch(e){sy=!1}return(sy?t:r)(n)}(r,e,t);return e=>function(e,{memory:t,instance:r}){if(!Xl)throw Error("BigEndian system not supported");const n=function({type:e,version:t,tagLength:r,password:n,salt:i,ad:s,secret:a,parallelism:o,memorySize:c,passes:u}){const h=(e,t,r,n)=>{if(t<r||t>n)throw Error(`${e} size should be between ${r} and ${n} bytes`)};if(2!==e||19!==t)throw Error("Unsupported type or version");return h("password",n,8,4294967295),h("salt",i,8,4294967295),h("tag",r,4,4294967295),h("memory",c,8*o,4294967295),s&&h("associated data",s,0,4294967295),a&&h("secret",a,0,32),{type:e,version:t,tagLength:r,password:n,salt:i,ad:s,secret:a,lanes:o,memorySize:c,passes:u}}({type:2,version:19,...e}),{G:i,G2:s,xor:a,getLZ:o}=r.exports,c={},u={};u.G=i,u.G2=s,u.XOR=a;const h=4*n.lanes*Math.floor(n.memorySize/(4*n.lanes)),f=h*Jl+10240;if(t.buffer.byteLength<f){const e=Math.ceil((f-t.buffer.byteLength)/65536);t.grow(e)}let l=0;c.gZ=new Uint8Array(t.buffer,l,Jl),l+=c.gZ.length,c.prngR=new Uint8Array(t.buffer,l,Jl),l+=c.prngR.length,c.prngTmp=new Uint8Array(t.buffer,l,Jl),l+=c.prngTmp.length,c.ZERO1024=new Uint8Array(t.buffer,l,1024),l+=c.ZERO1024.length;const y=new Uint32Array(t.buffer,l,2);l+=y.length*Uint32Array.BYTES_PER_ELEMENT;const g={fn:u,refs:c},p=new Uint8Array(t.buffer,l,Jl);l+=p.length;const d=new Uint8Array(t.buffer,l,n.memorySize*Jl),A=new Uint8Array(t.buffer,0,l),w=function(e){const t=ql(64),r=new Uint8Array(4),n=new Uint8Array(24);Wl(n,e.lanes,0),Wl(n,e.tagLength,4),Wl(n,e.memorySize,8),Wl(n,e.passes,12),Wl(n,e.version,16),Wl(n,e.type,20);const i=[n];e.password?(i.push(Wl(new Uint8Array(4),e.password.length,0)),i.push(e.password)):i.push(r),e.salt?(i.push(Wl(new Uint8Array(4),e.salt.length,0)),i.push(e.salt)):i.push(r),e.secret?(i.push(Wl(new Uint8Array(4),e.secret.length,0)),i.push(e.secret)):i.push(r),e.ad?(i.push(Wl(new Uint8Array(4),e.ad.length,0)),i.push(e.ad)):i.push(r),t.update(function(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!(e[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let n=0;return e.forEach(e=>{r.set(e,n),n+=e.length}),r}(i));const s=t.digest();return new Uint8Array(s)}(n),m=h/n.lanes,b=Array(n.lanes).fill(null).map(()=>Array(m)),k=(e,t)=>(b[e][t]=d.subarray(e*m*1024+1024*t,e*m*1024+1024*t+Jl),b[e][t]);for(let e=0;e<n.lanes;e++){const t=new Uint8Array(w.length+8);t.set(w),Wl(t,0,w.length),Wl(t,e,w.length+4),ey(Jl,t,k(e,0)),Wl(t,1,w.length),ey(Jl,t,k(e,1))}const E=m/4;for(let e=0;e<n.passes;e++)for(let t=0;t<4;t++){const r=0===e&&t<=1;for(let i=0;i<n.lanes;i++){let s=0===t&&0===e?2:0;const a=r?iy(g,e,i,t,h,n.passes,E,s):null;for(;s<E;s++){const c=t*E+s,u=c>0?b[i][c-1]:b[i][m-1],h=r?a.next().value:u;o(y.byteOffset,h.byteOffset,i,n.lanes,e,t,s,4,E);const f=y[0],l=y[1];0===e&&k(i,c),ry(g,u,b[f][l],e>0?p:b[i][c]),e>0&&ty(g,b[i][c],p,b[i][c])}}}const v=b[0][m-1];for(let e=1;e<n.lanes;e++)ty(g,v,v,b[e][m-1]);const B=ey(n.tagLength,v,new Uint8Array(n.tagLength));return A.fill(0),t.grow(0),B}(e,{instance:n.instance,memory:r})}(e=>ay(0,0,"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",e),e=>ay(0,0,"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",e))}),dy=function(){if(gy)return yy;gy=1;var e,t=function(){if(cy)return oy;cy=1;var e=[0,1,3,7,15,31,63,127,255],t=function(e){this.stream=e,this.bitOffset=0,this.curByte=0,this.hasByte=!1};return t.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},t.prototype.read=function(t){for(var r=0;t>0;){this._ensureByte();var n=8-this.bitOffset;if(t>=n)r<<=n,r|=e[n]&this.curByte,this.hasByte=!1,this.bitOffset=0,t-=n;else{r<<=t;var i=n-t;r|=(this.curByte&e[t]<<i)>>i,this.bitOffset+=t,t=0}}return r},t.prototype.seek=function(e){var t=e%8,r=(e-t)/8;this.bitOffset=t,this.stream.seek(r),this.hasByte=!1},t.prototype.pi=function(){var e,t=new Uint8Array(6);for(e=0;e<t.length;e++)t[e]=this.read(8);return function(e){return Array.prototype.map.call(e,e=>("00"+e.toString(16)).slice(-2)).join("")}(t)},oy=t}(),r=function(){if(hy)return uy;hy=1;var e=function(){};return e.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},e.prototype.read=function(e,t,r){for(var n=0;n<r;){var i=this.readByte();if(i<0)return 0===n?-1:n;e[t++]=i,n++}return n},e.prototype.seek=function(e){throw Error("abstract method seek() not implemented")},e.prototype.writeByte=function(e){throw Error("abstract method readByte() not implemented")},e.prototype.write=function(e,t,r){var n;for(n=0;n<r;n++)this.writeByte(e[t++]);return r},e.prototype.flush=function(){},uy=e}(),n=ly?fy:(ly=1,e=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),fy=function(){var t=4294967295;this.getCRC=function(){return~t>>>0},this.updateCRC=function(r){t=t<<8^e[255&(t>>>24^r)]},this.updateCRCRun=function(r,n){for(;n-- >0;)t=t<<8^e[255&(t>>>24^r)]}}),i=function(e,t){var r,n=e[t];for(r=t;r>0;r--)e[r]=e[r-1];return e[0]=n,n},s={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},a={};a[s.LAST_BLOCK]="Bad file checksum",a[s.NOT_BZIP_DATA]="Not bzip data",a[s.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",a[s.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",a[s.DATA_ERROR]="Data error",a[s.OUT_OF_MEMORY]="Out of memory",a[s.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var o=function(e,t){var r=a[e]||"unknown error";t&&(r+=": "+t);var n=new TypeError(r);throw n.errorCode=e,n},c=function(e,t){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(e,t)};c.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new n,!0):(this.writeCount=-1,!1)},c.prototype._start_bunzip=function(e,r){var n=new Uint8Array(4);4===e.read(n,0,4)&&"BZh"===String.fromCharCode(n[0],n[1],n[2])||o(s.NOT_BZIP_DATA,"bad magic");var i=n[3]-48;(i<1||i>9)&&o(s.NOT_BZIP_DATA,"level out of range"),this.reader=new t(e),this.dbufSize=1e5*i,this.nextoutput=0,this.outputStream=r,this.streamCRC=0},c.prototype._get_next_block=function(){var e,t,r,n=this.reader,a=n.pi();if("177245385090"===a)return!1;"314159265359"!==a&&o(s.NOT_BZIP_DATA),this.targetBlockCRC=n.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,n.read(1)&&o(s.OBSOLETE_INPUT);var c=n.read(24);c>this.dbufSize&&o(s.DATA_ERROR,"initial position out of bounds");var u=n.read(16),h=new Uint8Array(256),f=0;for(e=0;e<16;e++)if(u&1<<15-e){var l=16*e;for(r=n.read(16),t=0;t<16;t++)r&1<<15-t&&(h[f++]=l+t)}var y=n.read(3);(y<2||y>6)&&o(s.DATA_ERROR);var g=n.read(15);0===g&&o(s.DATA_ERROR);var p=new Uint8Array(256);for(e=0;e<y;e++)p[e]=e;var d=new Uint8Array(g);for(e=0;e<g;e++){for(t=0;n.read(1);t++)t>=y&&o(s.DATA_ERROR);d[e]=i(p,t)}var A,w=f+2,m=[];for(t=0;t<y;t++){var b,k,E=new Uint8Array(w),v=new Uint16Array(21);for(u=n.read(5),e=0;e<w;e++){for(;(u<1||u>20)&&o(s.DATA_ERROR),n.read(1);)n.read(1)?u--:u++;E[e]=u}for(b=k=E[0],e=1;e<w;e++)E[e]>k?k=E[e]:E[e]<b&&(b=E[e]);A={},m.push(A),A.permute=new Uint16Array(258),A.limit=new Uint32Array(22),A.base=new Uint32Array(21),A.minLen=b,A.maxLen=k;var B=0;for(e=b;e<=k;e++)for(v[e]=A.limit[e]=0,u=0;u<w;u++)E[u]===e&&(A.permute[B++]=u);for(e=0;e<w;e++)v[E[e]]++;for(B=u=0,e=b;e<k;e++)B+=v[e],A.limit[e]=B-1,B<<=1,u+=v[e],A.base[e+1]=B-u;A.limit[k+1]=Number.MAX_VALUE,A.limit[k]=B+v[k]-1,A.base[b]=0}var I=new Uint32Array(256);for(e=0;e<256;e++)p[e]=e;var S,K=0,C=0,D=0,U=this.dbuf=new Uint32Array(this.dbufSize);for(w=0;;){for(w--||(w=49,D>=g&&o(s.DATA_ERROR),A=m[d[D++]]),e=A.minLen,t=n.read(e);e>A.maxLen&&o(s.DATA_ERROR),!(t<=A.limit[e]);e++)t=t<<1|n.read(1);((t-=A.base[e])<0||t>=258)&&o(s.DATA_ERROR);var P=A.permute[t];if(0!==P&&1!==P){if(K)for(K=0,C+u>this.dbufSize&&o(s.DATA_ERROR),I[S=h[p[0]]]+=u;u--;)U[C++]=S;if(P>f)break;C>=this.dbufSize&&o(s.DATA_ERROR),I[S=h[S=i(p,e=P-1)]]++,U[C++]=S}else K||(K=1,u=0),u+=0===P?K:2*K,K<<=1}for((c<0||c>=C)&&o(s.DATA_ERROR),t=0,e=0;e<256;e++)r=t+I[e],I[e]=t,t=r;for(e=0;e<C;e++)U[I[S=255&U[e]]]|=e<<8,I[S]++;var x=0,Q=0,R=0;return C&&(Q=255&(x=U[c]),x>>=8,R=-1),this.writePos=x,this.writeCurrent=Q,this.writeCount=C,this.writeRun=R,!0},c.prototype._read_bunzip=function(e,t){var r,n,i;if(this.writeCount<0)return 0;var a=this.dbuf,c=this.writePos,u=this.writeCurrent,h=this.writeCount;this.outputsize;for(var f=this.writeRun;h;){for(h--,n=u,u=255&(c=a[c]),c>>=8,3==f++?(r=u,i=n,u=-1):(r=1,i=u),this.blockCRC.updateCRCRun(i,r);r--;)this.outputStream.writeByte(i),this.nextoutput++;u!=n&&(f=0)}return this.writeCount=h,this.blockCRC.getCRC()!==this.targetBlockCRC&&o(s.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var u=function(e){if("readByte"in e)return e;var t=new r;return t.pos=0,t.readByte=function(){return e[this.pos++]},t.seek=function(e){this.pos=e},t.eof=function(){return this.pos>=e.length},t},h=function(e){var t=new r,n=!0;if(e)if("number"==typeof e)t.buffer=new Uint8Array(e),n=!1;else{if("writeByte"in e)return e;t.buffer=e,n=!1}else t.buffer=new Uint8Array(16384);return t.pos=0,t.writeByte=function(e){if(n&&this.pos>=this.buffer.length){var t=new Uint8Array(2*this.buffer.length);t.set(this.buffer),this.buffer=t}this.buffer[this.pos++]=e},t.getBuffer=function(){if(this.pos!==this.buffer.length){if(!n)throw new TypeError("outputsize does not match decoded input");var e=new Uint8Array(this.pos);e.set(this.buffer.subarray(0,this.pos)),this.buffer=e}return this.buffer},t._coerced=!0,t};return yy={Bunzip:c,Stream:r,Err:s,decode:function(e,t,r){for(var n=u(e),i=h(t),a=new c(n,i);!("eof"in n)||!n.eof();)if(a._init_block())a._read_bunzip();else{var f=a.reader.read(32)>>>0;if(f!==a.streamCRC&&o(s.DATA_ERROR,"Bad stream CRC (got "+a.streamCRC.toString(16)+" expected "+f.toString(16)+")"),!r||!("eof"in n)||n.eof())break;a._start_bunzip(n,i)}if("getBuffer"in i)return i.getBuffer()},decodeBlock:function(e,t,r){var i=u(e),s=h(r),a=new c(i,s);if(a.reader.seek(t),a._get_next_block()&&(a.blockCRC=new n,a.writeCopies=0,a._read_bunzip()),"getBuffer"in s)return s.getBuffer()},table:function(e,t,n){var i=new r;i.delegate=u(e),i.pos=0,i.readByte=function(){return this.pos++,this.delegate.readByte()},i.delegate.eof&&(i.eof=i.delegate.eof.bind(i.delegate));var s=new r;s.pos=0,s.writeByte=function(){this.pos++};for(var a=new c(i,s),o=a.dbufSize;!("eof"in i)||!i.eof();){var h=8*i.pos+a.reader.bitOffset;if(a.reader.hasByte&&(h-=8),a._init_block()){var f=s.pos;a._read_bunzip(),t(h,s.pos-f)}else{if(a.reader.read(32),!n||!("eof"in i)||i.eof())break;a._start_bunzip(i,s),console.assert(a.dbufSize===o,"shouldn't change block size within multistream file")}}}}}(),Ay=i({__proto__:null},[dy])}}]);
2
+ export const __webpack_esm_id__=604;export const __webpack_esm_ids__=[604];export const __webpack_esm_modules__={15604:(e,t,r)=>{r.r(t),r.d(t,{AEADEncryptedDataPacket:()=>zs,CleartextMessage:()=>ja,CompressedDataPacket:()=>xs,GrammarError:()=>Cs,LiteralDataPacket:()=>As,MarkerPacket:()=>Zs,Message:()=>Na,OnePassSignaturePacket:()=>Is,PacketList:()=>Ks,PaddingPacket:()=>na,PrivateKey:()=>Ca,PublicKey:()=>Ka,PublicKeyEncryptedSessionKeyPacket:()=>Gs,PublicKeyPacket:()=>Vs,PublicSubkeyPacket:()=>Js,SecretKeyPacket:()=>Ws,SecretSubkeyPacket:()=>ta,Signature:()=>sa,SignaturePacket:()=>Es,Subkey:()=>Ea,SymEncryptedIntegrityProtectedDataPacket:()=>Ns,SymEncryptedSessionKeyPacket:()=>js,SymmetricallyEncryptedDataPacket:()=>Ys,TrustPacket:()=>ra,UnparseablePacket:()=>ut,UserAttributePacket:()=>Xs,UserIDPacket:()=>ea,armor:()=>re,config:()=>L,createCleartextMessage:()=>qa,createMessage:()=>Ga,decrypt:()=>eo,decryptKey:()=>Xa,decryptSessionKeys:()=>so,encrypt:()=>$a,encryptKey:()=>Wa,encryptSessionKey:()=>io,enums:()=>F,generateKey:()=>Ya,generateSessionKey:()=>no,readCleartextMessage:()=>Va,readKey:()=>xa,readKeys:()=>Ra,readMessage:()=>za,readPrivateKey:()=>Qa,readPrivateKeys:()=>Ta,readSignature:()=>aa,reformatKey:()=>Za,revokeKey:()=>Ja,sign:()=>to,unarmor:()=>te,verify:()=>ro});const n="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function i(e,t){return t.forEach(function(t){t&&"string"!=typeof t&&!Array.isArray(t)&&Object.keys(t).forEach(function(r){if("default"!==r&&!(r in e)){var n=Object.getOwnPropertyDescriptor(t,r);Object.defineProperty(e,r,n.get?n:{enumerable:!0,get:function(){return t[r]}})}})}),Object.freeze(e)}const s=Symbol("doneWritingPromise"),a=Symbol("doneWritingResolve"),o=Symbol("doneWritingReject"),c=Symbol("readingIndex");class u extends Array{constructor(){super(),Object.setPrototypeOf(this,u.prototype),this[s]=new Promise((e,t)=>{this[a]=e,this[o]=t}),this[s].catch(()=>{})}}function h(e){return e&&e.getReader&&Array.isArray(e)}function f(e){if(!h(e)){const t=e.getWriter(),r=t.releaseLock;return t.releaseLock=()=>{t.closed.catch(function(){}),r.call(t)},t}this.stream=e}function l(e){if(h(e))return"array";if(n.ReadableStream&&n.ReadableStream.prototype.isPrototypeOf(e))return"web";if(e&&!(n.ReadableStream&&e instanceof n.ReadableStream)&&"function"==typeof e._read&&"object"==typeof e._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!e||!e.getReader)&&"web-like"}function y(e){return Uint8Array.prototype.isPrototypeOf(e)}function g(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!y(e[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let n=0;return e.forEach(function(e){r.set(e,n),n+=e.length}),r}u.prototype.getReader=function(){return void 0===this[c]&&(this[c]=0),{read:async()=>(await this[s],this[c]===this.length?{value:void 0,done:!0}:{value:this[this[c]++],done:!1})}},u.prototype.readToEnd=async function(e){await this[s];const t=e(this.slice(this[c]));return this.length=0,t},u.prototype.clone=function(){const e=new u;return e[s]=this[s].then(()=>{e.push(...this)}),e},f.prototype.write=async function(e){this.stream.push(e)},f.prototype.close=async function(){this.stream[a]()},f.prototype.abort=async function(e){return this.stream[o](e),e},f.prototype.releaseLock=function(){},"object"==typeof n.process&&n.process.versions;const p=new WeakSet,d=Symbol("externalBuffer");function A(e){if(this.stream=e,e[d]&&(this[d]=e[d].slice()),h(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(l(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{t.closed.catch(function(){}),t.releaseLock()},void(this._cancel=t.cancel.bind(t))}let t=!1;this._read=async()=>t||p.has(e)?{value:void 0,done:!0}:(t=!0,{value:e,done:!1}),this._releaseLock=()=>{if(t)try{p.add(e)}catch(e){}}}function w(e){return l(e)?e:new ReadableStream({start(t){t.enqueue(e),t.close()}})}function m(e){if(l(e))return e;const t=new u;return(async()=>{const r=T(t);await r.write(e),await r.close()})(),t}function b(e){return e.some(e=>l(e)&&!h(e))?function(e){e=e.map(w);const t=v(async function(e){await Promise.all(n.map(t=>x(t,e)))});let r=Promise.resolve();const n=e.map((n,i)=>I(n,(n,s)=>(r=r.then(()=>k(n,t.writable,{preventClose:i!==e.length-1})),r)));return t.readable}(e):e.some(e=>h(e))?function(e){const t=new u;let r=Promise.resolve();return e.forEach((n,i)=>(r=r.then(()=>k(n,t,{preventClose:i!==e.length-1})),r)),t}(e):"string"==typeof e[0]?e.join(""):g(e)}async function k(e,t,{preventClose:r=!1,preventAbort:n=!1,preventCancel:i=!1}={}){if(l(e)&&!h(e)){e=w(e);try{if(e[d]){const r=T(t);for(let t=0;t<e[d].length;t++)await r.ready,await r.write(e[d][t]);r.releaseLock()}await e.pipeTo(t,{preventClose:r,preventAbort:n,preventCancel:i})}catch(e){}return}const s=R(e=m(e)),a=T(t);try{for(;;){await a.ready;const{done:e,value:t}=await s.read();if(e){r||await a.close();break}await a.write(t)}}catch(e){n||await a.abort(e)}finally{s.releaseLock(),a.releaseLock()}}function E(e,t){const r=new TransformStream(t);return k(e,r.writable),r.readable}function v(e){let t,r,n,i=!1,s=!1;return{readable:new ReadableStream({start(e){n=e},pull(){t?t():i=!0},async cancel(t){s=!0,e&&await e(t),r&&r(t)}},{highWaterMark:0}),writable:new WritableStream({write:async function(e){if(s)throw Error("Stream is cancelled");n.enqueue(e),i?i=!1:(await new Promise((e,n)=>{t=e,r=n}),t=null,r=null)},close:n.close.bind(n),abort:n.error.bind(n)})}}function B(e,t=()=>{},r=()=>{}){if(h(e)){const n=new u;return(async()=>{const i=T(n);try{const n=await P(e),s=t(n),a=r();let o;o=void 0!==s&&void 0!==a?b([s,a]):void 0!==s?s:a,await i.write(o),await i.close()}catch(e){await i.abort(e)}})(),n}if(l(e))return E(e,{async transform(e,r){try{const n=await t(e);void 0!==n&&r.enqueue(n)}catch(e){r.error(e)}},async flush(e){try{const t=await r();void 0!==t&&e.enqueue(t)}catch(t){e.error(t)}}});const n=t(e),i=r();return void 0!==n&&void 0!==i?b([n,i]):void 0!==n?n:i}function I(e,t){if(l(e)&&!h(e)){let r;const n=new TransformStream({start(e){r=e}}),i=k(e,n.writable),s=v(async function(e){r.error(e),await i,await new Promise(setTimeout)});return t(n.readable,s.writable),s.readable}e=m(e);const r=new u;return t(e,r),r}function S(e,t){let r;const n=I(e,(e,i)=>{const s=R(e);s.remainder=()=>(s.releaseLock(),k(e,i),n),r=t(s)});return r}function K(e){if(h(e))return e.clone();if(l(e)){const t=function(e){if(h(e))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(l(e)){const t=w(e).tee();return t[0][d]=t[1][d]=e[d],t}return[U(e),U(e)]}(e);return D(e,t[0]),t[1]}return U(e)}function C(e){return h(e)?K(e):l(e)?new ReadableStream({start(t){const r=I(e,async(e,r)=>{const n=R(e),i=T(r);try{for(;;){await i.ready;const{done:r,value:s}=await n.read();if(r){try{t.close()}catch(e){}return void await i.close()}try{t.enqueue(s)}catch(e){}await i.write(s)}}catch(e){t.error(e),await i.abort(e)}});D(e,r)}}):U(e)}function D(e,t){Object.entries(Object.getOwnPropertyDescriptors(e.constructor.prototype)).forEach(([r,n])=>{"constructor"!==r&&(n.value?n.value=n.value.bind(t):n.get=n.get.bind(t),Object.defineProperty(e,r,n))})}function U(e,t=0,r=1/0){if(h(e))throw Error("Not implemented");if(l(e)){if(t>=0&&r>=0){let n=0;return E(e,{transform(e,i){n<r?(n+e.length>=t&&i.enqueue(U(e,Math.max(t-n,0),r-n)),n+=e.length):i.terminate()}})}if(t<0&&(r<0||r===1/0)){let n=[];return B(e,e=>{e.length>=-t?n=[e]:n.push(e)},()=>U(b(n),t,r))}if(0===t&&r<0){let n;return B(e,e=>{const i=n?b([n,e]):e;if(i.length>=-r)return n=U(i,r),U(i,t,r);n=i})}return console.warn(`stream.slice(input, ${t}, ${r}) not implemented efficiently.`),Q(async()=>U(await P(e),t,r))}return e[d]&&(e=b(e[d].concat([e]))),y(e)?e.subarray(t,r===1/0?e.length:r):e.slice(t,r)}async function P(e,t=b){return h(e)?e.readToEnd(t):l(e)?R(e).readToEnd(t):e}async function x(e,t){if(l(e)){if(e.cancel){const r=await e.cancel(t);return await new Promise(setTimeout),r}if(e.destroy)return e.destroy(t),await new Promise(setTimeout),t}}function Q(e){const t=new u;return(async()=>{const r=T(t);try{await r.write(await e()),await r.close()}catch(e){await r.abort(e)}})(),t}function R(e){return new A(e)}function T(e){return new f(e)}A.prototype.read=async function(){return this[d]&&this[d].length?{done:!1,value:this[d].shift()}:this._read()},A.prototype.releaseLock=function(){this[d]&&(this.stream[d]=this[d]),this._releaseLock()},A.prototype.cancel=function(e){return this._cancel(e)},A.prototype.readLine=async function(){let e,t=[];for(;!e;){let{done:r,value:n}=await this.read();if(n+="",r)return t.length?b(t):void 0;const i=n.indexOf("\n")+1;i&&(e=b(t.concat(n.substr(0,i))),t=[]),i!==n.length&&t.push(n.substr(i))}return this.unshift(...t),e},A.prototype.readByte=async function(){const{done:e,value:t}=await this.read();if(e)return;const r=t[0];return this.unshift(U(t,1)),r},A.prototype.readBytes=async function(e){const t=[];let r=0;for(;;){const{done:n,value:i}=await this.read();if(n)return t.length?b(t):void 0;if(t.push(i),r+=i.length,r>=e){const r=b(t);return this.unshift(U(r,e)),U(r,0,e)}}},A.prototype.peekBytes=async function(e){const t=await this.readBytes(e);return this.unshift(t),t},A.prototype.unshift=function(...e){this[d]||(this[d]=[]),1===e.length&&y(e[0])&&this[d].length&&e[0].length&&this[d][0].byteOffset>=e[0].length?this[d][0]=new Uint8Array(this[d][0].buffer,this[d][0].byteOffset-e[0].length,this[d][0].byteLength+e[0].length):this[d].unshift(...e.filter(e=>e&&e.length))},A.prototype.readToEnd=async function(e=b){const t=[];for(;;){const{done:e,value:r}=await this.read();if(e)break;t.push(r)}return e(t)};const M=Symbol("byValue");var F={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(e,t){if("number"==typeof t&&(t=this.read(e,t)),void 0!==e[t])return e[t];throw Error("Invalid enum value.")},read:function(e,t){if(e[M]||(e[M]=[],Object.entries(e).forEach(([t,r])=>{e[M][r]=t})),void 0!==e[M][t])return e[M][t];throw Error("Invalid enum value.")}},L={preferredHashAlgorithm:F.hash.sha512,preferredSymmetricAlgorithm:F.symmetric.aes256,preferredCompressionAlgorithm:F.compression.uncompressed,aeadProtect:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:F.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,enableParsingV5Entities:!1,s2kType:F.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,minRSABits:2047,passwordCollisionCheck:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([F.symmetric.aes128,F.symmetric.aes192,F.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,enforceGrammar:!0,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.2.2",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],nonDeterministicSignaturesViaNotation:!0,useEllipticFallback:!0,rejectHashAlgorithms:new Set([F.hash.md5,F.hash.ripemd]),rejectMessageHashAlgorithms:new Set([F.hash.md5,F.hash.ripemd,F.hash.sha1]),rejectPublicKeyAlgorithms:new Set([F.publicKey.elgamal,F.publicKey.dsa]),rejectCurves:new Set([F.curve.secp256k1])};const N=(()=>{try{return!1}catch(e){}return!1})(),O={isString:function(e){return"string"==typeof e||e instanceof String},nodeRequire:()=>{},isArray:function(e){return e instanceof Array},isUint8Array:y,isStream:l,getNobleCurve:async(e,t)=>{if(!L.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then(function(){return of});switch(e){case F.publicKey.ecdh:case F.publicKey.ecdsa:{const e=r.get(t);if(!e)throw Error("Unsupported curve");return e}case F.publicKey.x448:return r.get("x448");case F.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(e){let t=0;for(let r=0;r<e.length;r++)t+=256**r*e[e.length-1-r];return t},writeNumber:function(e,t){const r=new Uint8Array(t);for(let n=0;n<t;n++)r[n]=e>>8*(t-n-1)&255;return r},readDate:function(e){const t=O.readNumber(e);return new Date(1e3*t)},writeDate:function(e){const t=Math.floor(e.getTime()/1e3);return O.writeNumber(t,4)},normalizeDate:function(e=Date.now()){return null===e||e===1/0?e:new Date(1e3*Math.floor(+e/1e3))},readMPI:function(e){const t=7+(e[0]<<8|e[1])>>>3;return O.readExactSubarray(e,2,2+t)},readExactSubarray:function(e,t,r){if(e.length<r-t)throw Error("Input array too short");return e.subarray(t,r)},leftPad(e,t){if(e.length>t)throw Error("Input array too long");const r=new Uint8Array(t),n=t-e.length;return r.set(e,n),r},uint8ArrayToMPI:function(e){const t=O.uint8ArrayBitLength(e);if(0===t)throw Error("Zero MPI");const r=e.subarray(e.length-Math.ceil(t/8)),n=new Uint8Array([(65280&t)>>8,255&t]);return O.concatUint8Array([n,r])},uint8ArrayBitLength:function(e){let t;for(t=0;t<e.length&&0===e[t];t++);if(t===e.length)return 0;const r=e.subarray(t);return 8*(r.length-1)+O.nbits(r[0])},hexToUint8Array:function(e){const t=new Uint8Array(e.length>>1);for(let r=0;r<e.length>>1;r++)t[r]=parseInt(e.substr(r<<1,2),16);return t},uint8ArrayToHex:function(e){const t="0123456789abcdef";let r="";return e.forEach(e=>{r+=t[e>>4]+t[15&e]}),r},stringToUint8Array:function(e){return B(e,e=>{if(!O.isString(e))throw Error("stringToUint8Array: Data must be in the form of a string");const t=new Uint8Array(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t})},uint8ArrayToString:function(e){const t=[],r=16384,n=(e=new Uint8Array(e)).length;for(let i=0;i<n;i+=r)t.push(String.fromCharCode.apply(String,e.subarray(i,i+r<n?i+r:n)));return t.join("")},encodeUTF8:function(e){const t=new TextEncoder("utf-8");function r(e,r=!1){return t.encode(e,{stream:!r})}return B(e,r,()=>r("",!0))},decodeUTF8:function(e){const t=new TextDecoder("utf-8");function r(e,r=!1){return t.decode(e,{stream:!r})}return B(e,r,()=>r(new Uint8Array,!0))},concat:b,concatUint8Array:g,equalsUint8Array:function(e,t){if(!O.isUint8Array(e)||!O.isUint8Array(t))throw Error("Data must be in the form of a Uint8Array");if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0},findLastIndex:function(e,t){for(let r=e.length;r>=0;r--)if(t(e[r],r,e))return r;return-1},writeChecksum:function(e){let t=0;for(let r=0;r<e.length;r++)t=t+e[r]&65535;return O.writeNumber(t,2)},printDebug:function(e){N&&console.log("[OpenPGP.js debug]",e)},printDebugError:function(e){N&&console.error("[OpenPGP.js debug]",e)},nbits:function(e){let t=1,r=e>>>16;return 0!==r&&(e=r,t+=16),r=e>>8,0!==r&&(e=r,t+=8),r=e>>4,0!==r&&(e=r,t+=4),r=e>>2,0!==r&&(e=r,t+=2),r=e>>1,0!==r&&(e=r,t+=1),t},double:function(e){const t=new Uint8Array(e.length),r=e.length-1;for(let n=0;n<r;n++)t[n]=e[n]<<1^e[n+1]>>7;return t[r]=e[r]<<1^135*(e[0]>>7),t},shiftRight:function(e,t){if(t)for(let r=e.length-1;r>=0;r--)e[r]>>=t,r>0&&(e[r]|=e[r-1]<<8-t);return e},getWebCrypto:function(){const e=void 0!==n&&n.crypto&&n.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!e)throw Error("The WebCrypto API is not available");return e},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){return"undefined"!=typeof navigator?navigator.hardwareConcurrency||1:this.nodeRequire("os").cpus().length},isEmailAddress:function(e){return!!O.isString(e)&&/^[^\p{C}\p{Z}@<>\\]+@[^\p{C}\p{Z}@<>\\]+[^\p{C}\p{Z}\p{P}]$/u.test(e)},canonicalizeEOL:function(e){let t=!1;return B(e,e=>{let r;t&&(e=O.concatUint8Array([new Uint8Array([13]),e])),13===e[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;const n=[];for(let t=0;r=e.indexOf(10,t)+1,r;t=r)13!==e[r-2]&&n.push(r);if(!n.length)return e;const i=new Uint8Array(e.length+n.length);let s=0;for(let t=0;t<n.length;t++){const r=e.subarray(n[t-1]||0,n[t]);i.set(r,s),s+=r.length,i[s-1]=13,i[s]=10,s++}return i.set(e.subarray(n[n.length-1]||0),s),i},()=>t?new Uint8Array([13]):void 0)},nativeEOL:function(e){let t=!1;return B(e,e=>{let r;13===(e=t&&10!==e[0]?O.concatUint8Array([new Uint8Array([13]),e]):new Uint8Array(e))[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;let n=0;for(let t=0;t!==e.length;t=r){r=e.indexOf(13,t)+1,r||(r=e.length);const i=r-(10===e[r]?1:0);t&&e.copyWithin(n,t,i),n+=i-t}return e.subarray(0,n)},()=>t?new Uint8Array([13]):void 0)},removeTrailingSpaces:function(e){return e.split("\n").map(e=>{let t=e.length-1;for(;t>=0&&(" "===e[t]||"\t"===e[t]||"\r"===e[t]);t--);return e.substr(0,t+1)}).join("\n")},wrapError:function(e,t){if(!t)return e instanceof Error?e:Error(e);if(e instanceof Error){try{e.message+=": "+t.message,e.cause=t}catch(e){}return e}return Error(e+": "+t.message,{cause:t})},constructAllowedPackets:function(e){const t={};return e.forEach(e=>{if(!e.tag)throw Error("Invalid input: expected a packet class");t[e.tag]=e}),t},anyPromise:function(e){return new Promise(async(t,r)=>{let n;await Promise.all(e.map(async e=>{try{t(await e)}catch(e){n=e}})),r(n)})},selectUint8Array:function(e,t,r){const n=Math.max(t.length,r.length),i=new Uint8Array(n);let s=0;for(let n=0;n<i.length;n++)i[n]=t[n]&256-e|r[n]&255+e,s+=e&n<t.length|1-e&n<r.length;return i.subarray(0,s)},selectUint8:function(e,t,r){return t&256-e|r&255+e},isAES:function(e){return e===F.symmetric.aes128||e===F.symmetric.aes192||e===F.symmetric.aes256}},H=O.getNodeBuffer();let z,G;function _(e){let t=new Uint8Array;return B(e,e=>{t=O.concatUint8Array([t,e]);const r=[],n=Math.floor(t.length/45),i=45*n,s=z(t.subarray(0,i));for(let e=0;e<n;e++)r.push(s.substr(60*e,60)),r.push("\n");return t=t.subarray(i),r.join("")},()=>t.length?z(t)+"\n":"")}function j(e){let t="";return B(e,e=>{t+=e;let r=0;const n=[" ","\t","\r","\n"];for(let e=0;e<n.length;e++){const i=n[e];for(let e=t.indexOf(i);-1!==e;e=t.indexOf(i,e+1))r++}let i=t.length;for(;i>0&&(i-r)%4!=0;i--)n.includes(t[i])&&r--;const s=G(t.substr(0,i));return t=t.substr(i),s},()=>G(t))}function V(e){return j(e.replace(/-/g,"+").replace(/_/g,"/"))}function q(e,t){let r=_(e).replace(/[\r\n]/g,"");return r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,""),r}function Y(e){const t=e.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!t)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(t[1])?F.armor.multipartSection:/MESSAGE, PART \d+/.test(t[1])?F.armor.multipartLast:/SIGNED MESSAGE/.test(t[1])?F.armor.signed:/MESSAGE/.test(t[1])?F.armor.message:/PUBLIC KEY BLOCK/.test(t[1])?F.armor.publicKey:/PRIVATE KEY BLOCK/.test(t[1])?F.armor.privateKey:/SIGNATURE/.test(t[1])?F.armor.signature:void 0}function Z(e,t){let r="";return t.showVersion&&(r+="Version: "+t.versionString+"\n"),t.showComment&&(r+="Comment: "+t.commentString+"\n"),e&&(r+="Comment: "+e+"\n"),r+="\n",r}function J(e){const t=function(e){let t=13501623;return B(e,e=>{const r=W?Math.floor(e.length/4):0,n=new Uint32Array(e.buffer,e.byteOffset,r);for(let e=0;e<r;e++)t^=n[e],t=X[0][t>>24&255]^X[1][t>>16&255]^X[2][t>>8&255]^X[3][255&t];for(let n=4*r;n<e.length;n++)t=t>>8^X[0][255&t^e[n]]},()=>new Uint8Array([t,t>>8,t>>16]))}(e);return _(t)}H?(z=e=>H.from(e).toString("base64"),G=e=>{const t=H.from(e,"base64");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength)}):(z=e=>btoa(O.uint8ArrayToString(e)),G=e=>O.stringToUint8Array(atob(e)));const X=[Array(255),Array(255),Array(255),Array(255)];for(let e=0;e<=255;e++){let t=e<<16;for(let e=0;e<8;e++)t=t<<1^(8388608&t?8801531:0);X[0][e]=(16711680&t)>>16|65280&t|(255&t)<<16}for(let e=0;e<=255;e++)X[1][e]=X[0][e]>>8^X[0][255&X[0][e]];for(let e=0;e<=255;e++)X[2][e]=X[1][e]>>8^X[0][255&X[1][e]];for(let e=0;e<=255;e++)X[3][e]=X[2][e]>>8^X[0][255&X[2][e]];const W=function(){const e=new ArrayBuffer(2);return new DataView(e).setInt16(0,255,!0),255===new Int16Array(e)[0]}();function $(e){for(let t=0;t<e.length;t++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(e[t])||O.printDebugError(Error("Improperly formatted armor header: "+e[t])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(e[t])||O.printDebugError(Error("Unknown header: "+e[t]))}function ee(e){let t=e;const r=e.lastIndexOf("=");return r>=0&&r!==e.length-1&&(t=e.slice(0,r)),t}function te(e){return new Promise(async(t,r)=>{try{const n=/^-----[^-]+-----$/m,i=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,u=a,h=[];const f=j(I(e,async(e,l)=>{const y=R(e);try{for(;;){let e=await y.readLine();if(void 0===e)throw Error("Misformed armored text");if(e=O.removeTrailingSpaces(e.replace(/[\r\n]/g,"")),s)if(o)c||s!==F.armor.signed||(n.test(e)?(h=h.join("\r\n"),c=!0,$(u),u=[],o=!1):h.push(e.replace(/^- /,"")));else if(n.test(e)&&r(Error("Mandatory blank line missing between armor headers and armor data")),i.test(e)){if($(u),o=!0,c||s!==F.armor.signed){t({text:h,data:f,headers:a,type:s});break}}else u.push(e);else n.test(e)&&(s=Y(e))}}catch(e){return void r(e)}const g=T(l);try{for(;;){await g.ready;const{done:e,value:t}=await y.read();if(e)throw Error("Misformed armored text");const r=t+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let e=await y.readToEnd();e.length||(e=""),e=r+e,e=O.removeTrailingSpaces(e.replace(/\r/g,""));const t=e.split(n);if(1===t.length)throw Error("Misformed armored text");const i=ee(t[0].slice(0,-1));await g.write(i);break}await g.write(r)}await g.ready,await g.close()}catch(e){await g.abort(e)}}))}catch(e){r(e)}}).then(async e=>(h(e.data)&&(e.data=await P(e.data)),e))}function re(e,t,r,n,i,s=!1,a=L){let o,c;e===F.armor.signed&&(o=t.text,c=t.hash,t=t.data);const u=s&&C(t),h=[];switch(e){case F.armor.multipartSection:h.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+n+"-----\n"),h.push(Z(i,a)),h.push(_(t)),u&&h.push("=",J(u)),h.push("-----END PGP MESSAGE, PART "+r+"/"+n+"-----\n");break;case F.armor.multipartLast:h.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),h.push(Z(i,a)),h.push(_(t)),u&&h.push("=",J(u)),h.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case F.armor.signed:h.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),h.push(c?`Hash: ${c}\n\n`:"\n"),h.push(o.replace(/^-/gm,"- -")),h.push("\n-----BEGIN PGP SIGNATURE-----\n"),h.push(Z(i,a)),h.push(_(t)),u&&h.push("=",J(u)),h.push("-----END PGP SIGNATURE-----\n");break;case F.armor.message:h.push("-----BEGIN PGP MESSAGE-----\n"),h.push(Z(i,a)),h.push(_(t)),u&&h.push("=",J(u)),h.push("-----END PGP MESSAGE-----\n");break;case F.armor.publicKey:h.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),h.push(Z(i,a)),h.push(_(t)),u&&h.push("=",J(u)),h.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case F.armor.privateKey:h.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),h.push(Z(i,a)),h.push(_(t)),u&&h.push("=",J(u)),h.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case F.armor.signature:h.push("-----BEGIN PGP SIGNATURE-----\n"),h.push(Z(i,a)),h.push(_(t)),u&&h.push("=",J(u)),h.push("-----END PGP SIGNATURE-----\n")}return O.concat(h)}const ne=BigInt(0),ie=BigInt(1);function se(e){const t="0123456789ABCDEF";let r="";return e.forEach(e=>{r+=t[e>>4]+t[15&e]}),BigInt("0x0"+r)}function ae(e,t){const r=e%t;return r<ne?r+t:r}function oe(e,t,r){if(r===ne)throw Error("Modulo cannot be zero");if(r===ie)return BigInt(0);if(t<ne)throw Error("Unsopported negative exponent");let n=t,i=e;i%=r;let s=BigInt(1);for(;n>ne;){const e=n&ie;n>>=ie,s=e?s*i%r:s,i=i*i%r}return s}function ce(e){return e>=ne?e:-e}function ue(e,t){const{gcd:r,x:n}=function(e,t){let r=BigInt(0),n=BigInt(1),i=BigInt(1),s=BigInt(0),a=ce(e),o=ce(t);const c=e<ne,u=t<ne;for(;o!==ne;){const e=a/o;let t=r;r=i-e*r,i=t,t=n,n=s-e*n,s=t,t=o,o=a%o,a=t}return{x:c?-i:i,y:u?-s:s,gcd:a}}(e,t);if(r!==ie)throw Error("Inverse does not exist");return ae(n+t,t)}function he(e){const t=Number(e);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}function fe(e,t){return(e>>BigInt(t)&ie)===ne?0:1}function le(e){const t=e<ne?BigInt(-1):ne;let r=1,n=e;for(;(n>>=ie)!==t;)r++;return r}function ye(e){const t=e<ne?BigInt(-1):ne,r=BigInt(8);let n=1,i=e;for(;(i>>=r)!==t;)n++;return n}function ge(e,t="be",r){let n=e.toString(16);n.length%2==1&&(n="0"+n);const i=n.length/2,s=new Uint8Array(r||i),a=r?r-i:0;let o=0;for(;o<i;)s[o+a]=parseInt(n.slice(2*o,2*o+2),16),o++;return"be"!==t&&s.reverse(),s}const pe=O.getNodeCrypto();function de(e){const t="undefined"!=typeof crypto?crypto:pe?.webcrypto;if(t?.getRandomValues){const r=new Uint8Array(e);return t.getRandomValues(r)}throw Error("No secure random number generator available.")}function Ae(e,t){if(t<e)throw Error("Illegal parameter value: max <= min");const r=t-e;return ae(se(de(ye(r)+8)),r)+e}const we=BigInt(1);function me(e,t,r){const n=BigInt(30),i=we<<BigInt(e-1),s=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2];let a=Ae(i,i<<we),o=he(ae(a,n));do{a+=BigInt(s[o]),o=(o+s[o])%s.length,le(a)>e&&(a=ae(a,i<<we),a+=i,o=he(ae(a,n)))}while(!be(a,t,r));return a}function be(e,t,r){return!(t&&function(e,t){let r=e,n=t;for(;n!==ne;){const e=n;n=r%n,r=e}return r}(e-we,t)!==we||!function(e){const t=BigInt(0);return ke.every(r=>ae(e,r)!==t)}(e)||!function(e,t=BigInt(2)){return oe(t,e-we,e)===we}(e)||!function(e,t){const r=le(e);t||(t=Math.max(1,r/48|0));const n=e-we;let i=0;for(;!fe(n,i);)i++;const s=e>>BigInt(i);for(;t>0;t--){let t,r=oe(Ae(BigInt(2),n),s,e);if(r!==we&&r!==n){for(t=1;t<i;t++){if(r=ae(r*r,e),r===we)return!1;if(r===n)break}if(t===i)return!1}}return!0}(e,r))}const ke=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999].map(e=>BigInt(e)),Ee=O.getWebCrypto(),ve=O.getNodeCrypto(),Be=ve&&ve.getHashes();function Ie(e){if(ve&&Be.includes(e))return async function(t){const r=ve.createHash(e);return B(t,e=>{r.update(e)},()=>new Uint8Array(r.digest()))}}function Se(e,t){const r=async()=>{const{nobleHashes:t}=await Promise.resolve().then(function(){return Rf}),r=t.get(e);if(!r)throw Error("Unsupported hash");return r};return async function(e){if(h(e)&&(e=await P(e)),O.isStream(e)){const t=(await r()).create();return B(e,e=>{t.update(e)},()=>t.digest())}return Ee&&t?new Uint8Array(await Ee.digest(t,e)):(await r())(e)}}const Ke=Ie("md5")||Se("md5"),Ce=Ie("sha1")||Se("sha1","SHA-1"),De=Ie("sha224")||Se("sha224"),Ue=Ie("sha256")||Se("sha256","SHA-256"),Pe=Ie("sha384")||Se("sha384","SHA-384"),xe=Ie("sha512")||Se("sha512","SHA-512"),Qe=Ie("ripemd160")||Se("ripemd160"),Re=Ie("sha3-256")||Se("sha3_256"),Te=Ie("sha3-512")||Se("sha3_512");function Me(e,t){switch(e){case F.hash.md5:return Ke(t);case F.hash.sha1:return Ce(t);case F.hash.ripemd:return Qe(t);case F.hash.sha256:return Ue(t);case F.hash.sha384:return Pe(t);case F.hash.sha512:return xe(t);case F.hash.sha224:return De(t);case F.hash.sha3_256:return Re(t);case F.hash.sha3_512:return Te(t);default:throw Error("Unsupported hash function")}}function Fe(e){switch(e){case F.hash.md5:return 16;case F.hash.sha1:case F.hash.ripemd:return 20;case F.hash.sha256:return 32;case F.hash.sha384:return 48;case F.hash.sha512:return 64;case F.hash.sha224:return 28;case F.hash.sha3_256:return 32;case F.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}}const Le=[];function Ne(e,t){const r=e.length;if(r>t-11)throw Error("Message too long");const n=function(e){const t=new Uint8Array(e);let r=0;for(;r<e;){const n=de(e-r);for(let e=0;e<n.length;e++)0!==n[e]&&(t[r++]=n[e])}return t}(t-r-3),i=new Uint8Array(t);return i[1]=2,i.set(n,2),i.set(e,t-r),i}function Oe(e,t){let r=2,n=1;for(let t=r;t<e.length;t++)n&=0!==e[t],r+=n;const i=r-2,s=e.subarray(r+1),a=0===e[0]&2===e[1]&i>=8&!n;if(t)return O.selectUint8Array(a,s,t);if(a)return s;throw Error("Decryption error")}function He(e,t,r){let n;if(t.length!==Fe(e))throw Error("Invalid hash length");const i=new Uint8Array(Le[e].length);for(n=0;n<Le[e].length;n++)i[n]=Le[e][n];const s=i.length+t.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(i,r-s),o.set(t,r-t.length),o}Le[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],Le[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],Le[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],Le[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],Le[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],Le[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],Le[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];const ze=O.getWebCrypto(),Ge=O.getNodeCrypto(),_e=BigInt(1);async function je(e,t,r,n,i,s,a,o,c){if(Fe(e)>=r.length)throw Error("Digest size cannot exceed key modulus size");if(t&&!O.isStream(t))if(O.getWebCrypto())try{return await async function(e,t,r,n,i,s,a,o){const c=await qe(r,n,i,s,a,o),u={name:"RSASSA-PKCS1-v1_5",hash:{name:e}},h=await ze.importKey("jwk",c,u,!1,["sign"]);return new Uint8Array(await ze.sign("RSASSA-PKCS1-v1_5",h,t))}(F.read(F.webHash,e),t,r,n,i,s,a,o)}catch(e){O.printDebugError(e)}else if(O.getNodeCrypto())return async function(e,t,r,n,i,s,a,o){const c=Ge.createSign(F.read(F.hash,e));c.write(t),c.end();const u=await qe(r,n,i,s,a,o);return new Uint8Array(c.sign({key:u,format:"jwk",type:"pkcs1"}))}(e,t,r,n,i,s,a,o);return async function(e,t,r,n){return t=se(t),ge(oe(se(He(e,n,ye(t))),r=se(r),t),"be",ye(t))}(e,r,i,c)}async function Ve(e,t,r){return O.getNodeCrypto()?async function(e,t,r){const n={key:Ye(t,r),format:"jwk",type:"pkcs1",padding:Ge.constants.RSA_PKCS1_PADDING};return new Uint8Array(Ge.publicEncrypt(n,e))}(e,t,r):async function(e,t,r){if(t=se(t),e=se(Ne(e,ye(t))),r=se(r),e>=t)throw Error("Message size cannot exceed modulus size");return ge(oe(e,r,t),"be",ye(t))}(e,t,r)}async function qe(e,t,r,n,i,s){const a=se(n),o=se(i),c=se(r);let u=ae(c,o-_e),h=ae(c,a-_e);return h=ge(h),u=ge(u),{kty:"RSA",n:q(e),e:q(t),d:q(r),p:q(i),q:q(n),dp:q(u),dq:q(h),qi:q(s),ext:!0}}function Ye(e,t){return{kty:"RSA",n:q(e),e:q(t),ext:!0}}function Ze(e,t){return{n:V(e.n),e:ge(t),d:V(e.d),p:V(e.q),q:V(e.p),u:V(e.qi)}}const Je=BigInt(1),Xe={"2a8648ce3d030107":F.curve.nistP256,"2b81040022":F.curve.nistP384,"2b81040023":F.curve.nistP521,"2b8104000a":F.curve.secp256k1,"2b06010401da470f01":F.curve.ed25519Legacy,"2b060104019755010501":F.curve.curve25519Legacy,"2b2403030208010107":F.curve.brainpoolP256r1,"2b240303020801010b":F.curve.brainpoolP384r1,"2b240303020801010d":F.curve.brainpoolP512r1};class We{constructor(e){if(e instanceof We)this.oid=e.oid;else if(O.isArray(e)||O.isUint8Array(e)){if(6===(e=new Uint8Array(e))[0]){if(e[1]!==e.length-2)throw Error("Length mismatch in DER encoded oid");e=e.subarray(2)}this.oid=e}else this.oid=""}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.oid=e.subarray(1,1+t),1+this.oid.length}throw Error("Invalid oid")}write(){return O.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return O.uint8ArrayToHex(this.oid)}getName(){const e=Xe[this.toHex()];if(!e)throw Error("Unknown curve object identifier.");return e}}function $e(e){let t,r=0;const n=e[0];return n<192?([r]=e,t=1):n<255?(r=(e[0]-192<<8)+e[1]+192,t=2):255===n&&(r=O.readNumber(e.subarray(1,5)),t=5),{len:r,offset:t}}function et(e){return e<192?new Uint8Array([e]):e>191&&e<8384?new Uint8Array([192+(e-192>>8),e-192&255]):O.concatUint8Array([new Uint8Array([255]),O.writeNumber(e,4)])}function tt(e){if(e<0||e>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+e])}function rt(e){return new Uint8Array([192|e])}function nt(e,t){return O.concatUint8Array([rt(e),et(t)])}function it(e){return[F.packet.literalData,F.packet.compressedData,F.packet.symmetricallyEncryptedData,F.packet.symEncryptedIntegrityProtectedData,F.packet.aeadEncryptedData].includes(e)}async function st(e,t,r){let n,i;try{const s=await e.peekBytes(2);if(!s||s.length<2||!(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const a=await e.readByte();let o,c,h=-1,f=-1;f=0,64&a&&(f=1),f?h=63&a:(h=(63&a)>>2,c=3&a);const l=it(h);let y,g=null;if(t&&l){if("array"===t){const e=new u;n=T(e),g=e}else{const e=new TransformStream;n=T(e.writable),g=e.readable}i=r({tag:h,packet:g})}else g=[];do{if(f){const t=await e.readByte();if(y=!1,t<192)o=t;else if(t>=192&&t<224)o=(t-192<<8)+await e.readByte()+192;else if(t>223&&t<255){if(o=1<<(31&t),y=!0,!l)throw new TypeError("This packet type does not support partial lengths.")}else o=await e.readByte()<<24|await e.readByte()<<16|await e.readByte()<<8|await e.readByte()}else switch(c){case 0:o=await e.readByte();break;case 1:o=await e.readByte()<<8|await e.readByte();break;case 2:o=await e.readByte()<<24|await e.readByte()<<16|await e.readByte()<<8|await e.readByte();break;default:o=1/0}if(o>0){let t=0;for(;;){n&&await n.ready;const{done:r,value:i}=await e.read();if(r){if(o===1/0)break;throw Error("Unexpected end of packet")}const s=o===1/0?i:i.subarray(0,o-t);if(n?await n.write(s):g.push(s),t+=i.length,t>=o){e.unshift(i.subarray(o-t+i.length));break}}}}while(y);n?(await n.ready,await n.close()):(g=O.concatUint8Array(g),await r({tag:h,packet:g}))}catch(e){if(n)return await n.abort(e),!0;throw e}finally{n&&await i}}class at extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,at),this.name="UnsupportedError"}}class ot extends at{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,at),this.name="UnknownPacketError"}}class ct extends at{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,at),this.name="MalformedPacketError"}}class ut{constructor(e,t){this.tag=e,this.rawContent=t}write(){return this.rawContent}}async function ht(e){switch(e){case F.publicKey.ed25519:try{const e=O.getWebCrypto(),t=await e.generateKey("Ed25519",!0,["sign","verify"]).catch(e=>{if("OperationError"===e.name){const e=Error("Unexpected key generation issue");throw e.name="NotSupportedError",e}throw e}),r=await e.exportKey("jwk",t.privateKey),n=await e.exportKey("jwk",t.publicKey);return{A:new Uint8Array(V(n.x)),seed:V(r.d)}}catch(t){if("NotSupportedError"!==t.name)throw t;const{default:r}=await Promise.resolve().then(function(){return Bl}),n=de(gt(e)),{publicKey:i}=r.sign.keyPair.fromSeed(n);return{A:i,seed:n}}case F.publicKey.ed448:{const e=await O.getNobleCurve(F.publicKey.ed448),{secretKey:t,publicKey:r}=e.keygen();return{A:r,seed:t}}default:throw Error("Unsupported EdDSA algorithm")}}async function ft(e,t,r,n,i,s){if(Fe(t)<Fe(pt(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case F.publicKey.ed25519:try{const t=O.getWebCrypto(),r=At(e,n,i),a=await t.importKey("jwk",r,"Ed25519",!1,["sign"]);return{RS:new Uint8Array(await t.sign("Ed25519",a,s))}}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:t}=await Promise.resolve().then(function(){return Bl}),r=O.concatUint8Array([i,n]);return{RS:t.sign.detached(s,r)}}case F.publicKey.ed448:return{RS:(await O.getNobleCurve(F.publicKey.ed448)).sign(s,i)};default:throw Error("Unsupported EdDSA algorithm")}}async function lt(e,t,{RS:r},n,i,s){if(Fe(t)<Fe(pt(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case F.publicKey.ed25519:try{const t=O.getWebCrypto(),n=dt(e,i),a=await t.importKey("jwk",n,"Ed25519",!1,["verify"]);return await t.verify("Ed25519",a,r,s)}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:t}=await Promise.resolve().then(function(){return Bl});return t.sign.detached.verify(s,r,i)}case F.publicKey.ed448:return(await O.getNobleCurve(F.publicKey.ed448)).verify(r,s,i);default:throw Error("Unsupported EdDSA algorithm")}}async function yt(e,t,r){switch(e){case F.publicKey.ed25519:try{const n=O.getWebCrypto(),i=At(e,t,r),s=dt(e,t),a=await n.importKey("jwk",i,"Ed25519",!1,["sign"]),o=await n.importKey("jwk",s,"Ed25519",!1,["verify"]),c=de(8),u=new Uint8Array(await n.sign("Ed25519",a,c));return await n.verify("Ed25519",o,u,c)}catch(e){if("NotSupportedError"!==e.name)return!1;const{default:n}=await Promise.resolve().then(function(){return Bl}),{publicKey:i}=n.sign.keyPair.fromSeed(r);return O.equalsUint8Array(t,i)}case F.publicKey.ed448:{const e=(await O.getNobleCurve(F.publicKey.ed448)).getPublicKey(r);return O.equalsUint8Array(t,e)}default:return!1}}function gt(e){switch(e){case F.publicKey.ed25519:return 32;case F.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function pt(e){switch(e){case F.publicKey.ed25519:return F.hash.sha256;case F.publicKey.ed448:return F.hash.sha512;default:throw Error("Unknown EdDSA algo")}}const dt=(e,t)=>{if(e===F.publicKey.ed25519)return{kty:"OKP",crv:"Ed25519",x:q(t),ext:!0};throw Error("Unsupported EdDSA algorithm")},At=(e,t,r)=>{if(e===F.publicKey.ed25519){const n=dt(e,t);return n.d=q(r),n}throw Error("Unsupported EdDSA algorithm")};var wt=Object.freeze({__proto__:null,generate:ht,getPayloadSize:gt,getPreferredHashAlgo:pt,sign:ft,validateParams:yt,verify:lt});function mt(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&"Uint8Array"===e.constructor.name}function bt(e,...t){if(!mt(e))throw Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw Error("Uint8Array expected of length "+t+", got length="+e.length)}function kt(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Et(e,t){bt(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}function vt(e){return new Uint8Array(e.buffer,e.byteOffset,e.byteLength)}function Bt(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function It(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function St(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}const Kt=(()=>68===new Uint8Array(new Uint32Array([287454020]).buffer)[0])();function Ct(e){if("string"==typeof e)e=function(e){if("string"!=typeof e)throw Error("string expected");return new Uint8Array((new TextEncoder).encode(e))}(e);else{if(!mt(e))throw Error("Uint8Array expected, got "+typeof e);e=Mt(e)}return e}function Dt(e,t){return e.buffer===t.buffer&&e.byteOffset<t.byteOffset+t.byteLength&&t.byteOffset<e.byteOffset+e.byteLength}function Ut(e,t){if(Dt(e,t)&&e.byteOffset<t.byteOffset)throw Error("complex overlap of input and output is not supported")}function Pt(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return 0===r}const xt=(e,t)=>{function r(r,...n){if(bt(r),!Kt)throw Error("Non little-endian hardware is not yet supported");if(void 0!==e.nonceLength){const t=n[0];if(!t)throw Error("nonce / iv required");e.varSizeNonce?bt(t):bt(t,e.nonceLength)}const i=e.tagLength;i&&void 0!==n[1]&&bt(n[1]);const s=t(r,...n),a=(e,t)=>{if(void 0!==t){if(2!==e)throw Error("cipher output not supported");bt(t)}};let o=!1;return{encrypt(e,t){if(o)throw Error("cannot encrypt() twice with same key + nonce");return o=!0,bt(e),a(s.encrypt.length,t),s.encrypt(e,t)},decrypt(e,t){if(bt(e),i&&e.length<i)throw Error("invalid ciphertext length: smaller than tagLength="+i);return a(s.decrypt.length,t),s.decrypt(e,t)}}}return Object.assign(r,e),r};function Qt(e,t,r=!0){if(void 0===t)return new Uint8Array(e);if(t.length!==e)throw Error("invalid output length, expected "+e+", got: "+t.length);if(r&&!Tt(t))throw Error("invalid output, must be aligned");return t}function Rt(e,t,r,n){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,n);const i=BigInt(32),s=BigInt(4294967295),a=Number(r>>i&s),o=Number(r&s);e.setUint32(t+0,a,n),e.setUint32(t+4,o,n)}function Tt(e){return e.byteOffset%4==0}function Mt(e){return Uint8Array.from(e)}const Ft=16,Lt=new Uint8Array(16),Nt=Bt(Lt),Ot=e=>(e>>>0&255)<<24|(e>>>8&255)<<16|(e>>>16&255)<<8|e>>>24&255;class Ht{constructor(e,t){this.blockLen=Ft,this.outputLen=Ft,this.s0=0,this.s1=0,this.s2=0,this.s3=0,this.finished=!1,bt(e=Ct(e),16);const r=St(e);let n=r.getUint32(0,!1),i=r.getUint32(4,!1),s=r.getUint32(8,!1),a=r.getUint32(12,!1);const o=[];for(let e=0;e<128;e++)o.push({s0:Ot(n),s1:Ot(i),s2:Ot(s),s3:Ot(a)}),({s0:n,s1:i,s2:s,s3:a}={s3:(h=s)<<31|(f=a)>>>1,s2:(u=i)<<31|h>>>1,s1:(c=n)<<31|u>>>1,s0:c>>>1^225<<24&-(1&f)});var c,u,h,f;const l=(y=t||1024)>65536?8:y>1024?4:2;var y;if(![1,2,4,8].includes(l))throw Error("ghash: invalid window size, expected 2, 4 or 8");this.W=l;const g=128/l,p=this.windowSize=2**l,d=[];for(let e=0;e<g;e++)for(let t=0;t<p;t++){let r=0,n=0,i=0,s=0;for(let a=0;a<l;a++){if(!(t>>>l-a-1&1))continue;const{s0:c,s1:u,s2:h,s3:f}=o[l*e+a];r^=c,n^=u,i^=h,s^=f}d.push({s0:r,s1:n,s2:i,s3:s})}this.t=d}_updateBlock(e,t,r,n){e^=this.s0,t^=this.s1,r^=this.s2,n^=this.s3;const{W:i,t:s,windowSize:a}=this;let o=0,c=0,u=0,h=0;const f=(1<<i)-1;let l=0;for(const y of[e,t,r,n])for(let e=0;e<4;e++){const t=y>>>8*e&255;for(let e=8/i-1;e>=0;e--){const r=t>>>i*e&f,{s0:n,s1:y,s2:g,s3:p}=s[l*a+r];o^=n,c^=y,u^=g,h^=p,l+=1}}this.s0=o,this.s1=c,this.s2=u,this.s3=h}update(e){kt(this),bt(e=Ct(e));const t=Bt(e),r=Math.floor(e.length/Ft),n=e.length%Ft;for(let e=0;e<r;e++)this._updateBlock(t[4*e+0],t[4*e+1],t[4*e+2],t[4*e+3]);return n&&(Lt.set(e.subarray(r*Ft)),this._updateBlock(Nt[0],Nt[1],Nt[2],Nt[3]),It(Nt)),this}destroy(){const{t:e}=this;for(const t of e)t.s0=0,t.s1=0,t.s2=0,t.s3=0}digestInto(e){kt(this),Et(e,this),this.finished=!0;const{s0:t,s1:r,s2:n,s3:i}=this,s=Bt(e);return s[0]=t,s[1]=r,s[2]=n,s[3]=i,e}digest(){const e=new Uint8Array(Ft);return this.digestInto(e),this.destroy(),e}}class zt extends Ht{constructor(e,t){bt(e=Ct(e));const r=function(e){e.reverse();const t=1&e[15];let r=0;for(let t=0;t<e.length;t++){const n=e[t];e[t]=n>>>1|r,r=(1&n)<<7}return e[0]^=225&-t,e}(Mt(e));super(r,t),It(r)}update(e){e=Ct(e),kt(this);const t=Bt(e),r=e.length%Ft,n=Math.floor(e.length/Ft);for(let e=0;e<n;e++)this._updateBlock(Ot(t[4*e+3]),Ot(t[4*e+2]),Ot(t[4*e+1]),Ot(t[4*e+0]));return r&&(Lt.set(e.subarray(n*Ft)),this._updateBlock(Ot(Nt[3]),Ot(Nt[2]),Ot(Nt[1]),Ot(Nt[0])),It(Nt)),this}digestInto(e){kt(this),Et(e,this),this.finished=!0;const{s0:t,s1:r,s2:n,s3:i}=this,s=Bt(e);return s[0]=t,s[1]=r,s[2]=n,s[3]=i,e.reverse()}}function Gt(e){const t=(t,r)=>e(r,t.length).update(Ct(t)).digest(),r=e(new Uint8Array(16),0);return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=(t,r)=>e(t,r),t}const _t=Gt((e,t)=>new Ht(e,t));Gt((e,t)=>new zt(e,t));const jt=16,Vt=new Uint8Array(jt);function qt(e){return e<<1^283&-(e>>7)}function Yt(e,t){let r=0;for(;t>0;t>>=1)r^=e&-(1&t),e=qt(e);return r}const Zt=(()=>{const e=new Uint8Array(256);for(let t=0,r=1;t<256;t++,r^=qt(r))e[t]=r;const t=new Uint8Array(256);t[0]=99;for(let r=0;r<255;r++){let n=e[255-r];n|=n<<8,t[e[r]]=255&(n^n>>4^n>>5^n>>6^n>>7^99)}return It(e),t})(),Jt=Zt.map((e,t)=>Zt.indexOf(t)),Xt=e=>e<<8|e>>>24,Wt=e=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;function $t(e,t){if(256!==e.length)throw Error("Wrong sbox length");const r=new Uint32Array(256).map((r,n)=>t(e[n])),n=r.map(Xt),i=n.map(Xt),s=i.map(Xt),a=new Uint32Array(65536),o=new Uint32Array(65536),c=new Uint16Array(65536);for(let t=0;t<256;t++)for(let u=0;u<256;u++){const h=256*t+u;a[h]=r[t]^n[u],o[h]=i[t]^s[u],c[h]=e[t]<<8|e[u]}return{sbox:e,sbox2:c,T0:r,T1:n,T2:i,T3:s,T01:a,T23:o}}const er=$t(Zt,e=>Yt(e,3)<<24|e<<16|e<<8|Yt(e,2)),tr=$t(Jt,e=>Yt(e,11)<<24|Yt(e,13)<<16|Yt(e,9)<<8|Yt(e,14)),rr=(()=>{const e=new Uint8Array(16);for(let t=0,r=1;t<16;t++,r=qt(r))e[t]=r;return e})();function nr(e){bt(e);const t=e.length;if(![16,24,32].includes(t))throw Error("aes: invalid key size, should be 16, 24 or 32, got "+t);const{sbox2:r}=er,n=[];Tt(e)||n.push(e=Mt(e));const i=Bt(e),s=i.length,a=e=>ar(r,e,e,e,e),o=new Uint32Array(t+28);o.set(i);for(let e=s;e<o.length;e++){let t=o[e-1];e%s==0?t=a((c=t)<<24|c>>>8)^rr[e/s-1]:s>6&&e%s==4&&(t=a(t)),o[e]=o[e-s]^t}var c;return It(...n),o}function ir(e){const t=nr(e),r=t.slice(),n=t.length,{sbox2:i}=er,{T0:s,T1:a,T2:o,T3:c}=tr;for(let e=0;e<n;e+=4)for(let i=0;i<4;i++)r[e+i]=t[n-e-4+i];It(t);for(let e=4;e<n-4;e++){const t=r[e],n=ar(i,t,t,t,t);r[e]=s[255&n]^a[n>>>8&255]^o[n>>>16&255]^c[n>>>24]}return r}function sr(e,t,r,n,i,s){return e[r<<8&65280|n>>>8&255]^t[i>>>8&65280|s>>>24&255]}function ar(e,t,r,n,i){return e[255&t|65280&r]|e[n>>>16&255|i>>>16&65280]<<16}function or(e,t,r,n,i){const{sbox2:s,T01:a,T23:o}=er;let c=0;t^=e[c++],r^=e[c++],n^=e[c++],i^=e[c++];const u=e.length/4-2;for(let s=0;s<u;s++){const s=e[c++]^sr(a,o,t,r,n,i),u=e[c++]^sr(a,o,r,n,i,t),h=e[c++]^sr(a,o,n,i,t,r),f=e[c++]^sr(a,o,i,t,r,n);t=s,r=u,n=h,i=f}return{s0:e[c++]^ar(s,t,r,n,i),s1:e[c++]^ar(s,r,n,i,t),s2:e[c++]^ar(s,n,i,t,r),s3:e[c++]^ar(s,i,t,r,n)}}function cr(e,t,r,n,i){const{sbox2:s,T01:a,T23:o}=tr;let c=0;t^=e[c++],r^=e[c++],n^=e[c++],i^=e[c++];const u=e.length/4-2;for(let s=0;s<u;s++){const s=e[c++]^sr(a,o,t,i,n,r),u=e[c++]^sr(a,o,r,t,i,n),h=e[c++]^sr(a,o,n,r,t,i),f=e[c++]^sr(a,o,i,n,r,t);t=s,r=u,n=h,i=f}return{s0:e[c++]^ar(s,t,i,n,r),s1:e[c++]^ar(s,r,t,i,n),s2:e[c++]^ar(s,n,r,t,i),s3:e[c++]^ar(s,i,n,r,t)}}function ur(e,t,r,n){bt(t,jt),bt(r);const i=r.length;Ut(r,n=Qt(i,n));const s=t,a=Bt(s);let{s0:o,s1:c,s2:u,s3:h}=or(e,a[0],a[1],a[2],a[3]);const f=Bt(r),l=Bt(n);for(let t=0;t+4<=f.length;t+=4){l[t+0]=f[t+0]^o,l[t+1]=f[t+1]^c,l[t+2]=f[t+2]^u,l[t+3]=f[t+3]^h;let r=1;for(let e=s.length-1;e>=0;e--)r=r+(255&s[e])|0,s[e]=255&r,r>>>=8;({s0:o,s1:c,s2:u,s3:h}=or(e,a[0],a[1],a[2],a[3]))}const y=jt*Math.floor(f.length/4);if(y<i){const e=new Uint32Array([o,c,u,h]),t=vt(e);for(let e=y,s=0;e<i;e++,s++)n[e]=r[e]^t[s];It(e)}return n}function hr(e,t,r,n,i){bt(r,jt),bt(n),i=Qt(n.length,i);const s=r,a=Bt(s),o=St(s),c=Bt(n),u=Bt(i),h=t?0:12,f=n.length;let l=o.getUint32(h,t),{s0:y,s1:g,s2:p,s3:d}=or(e,a[0],a[1],a[2],a[3]);for(let r=0;r+4<=c.length;r+=4)u[r+0]=c[r+0]^y,u[r+1]=c[r+1]^g,u[r+2]=c[r+2]^p,u[r+3]=c[r+3]^d,l=l+1>>>0,o.setUint32(h,l,t),({s0:y,s1:g,s2:p,s3:d}=or(e,a[0],a[1],a[2],a[3]));const A=jt*Math.floor(c.length/4);if(A<f){const e=new Uint32Array([y,g,p,d]),t=vt(e);for(let e=A,r=0;e<f;e++,r++)i[e]=n[e]^t[r];It(e)}return i}const fr=xt({blockSize:16,nonceLength:16},function(e,t){function r(r,n){if(bt(r),void 0!==n&&(bt(n),!Tt(n)))throw Error("unaligned destination");const i=nr(e),s=Mt(t),a=[i,s];Tt(r)||a.push(r=Mt(r));const o=ur(i,s,r,n);return It(...a),o}return{encrypt:(e,t)=>r(e,t),decrypt:(e,t)=>r(e,t)}}),lr=xt({blockSize:16,nonceLength:16},function(e,t,r={}){const n=!r.disablePadding;return{encrypt(r,i){const s=nr(e),{b:a,o,out:c}=function(e,t,r){bt(e);let n=e.length;const i=n%jt;if(!t&&0!==i)throw Error("aec/(cbc-ecb): unpadded plaintext with disabled padding");Tt(e)||(e=Mt(e));const s=Bt(e);if(t){let e=jt-i;e||(e=jt),n+=e}return Ut(e,r=Qt(n,r)),{b:s,o:Bt(r),out:r}}(r,n,i);let u=t;const h=[s];Tt(u)||h.push(u=Mt(u));const f=Bt(u);let l=f[0],y=f[1],g=f[2],p=f[3],d=0;for(;d+4<=a.length;)l^=a[d+0],y^=a[d+1],g^=a[d+2],p^=a[d+3],({s0:l,s1:y,s2:g,s3:p}=or(s,l,y,g,p)),o[d++]=l,o[d++]=y,o[d++]=g,o[d++]=p;if(n){const e=function(e){const t=new Uint8Array(16),r=Bt(t);t.set(e);const n=jt-e.length;for(let e=jt-n;e<jt;e++)t[e]=n;return r}(r.subarray(4*d));l^=e[0],y^=e[1],g^=e[2],p^=e[3],({s0:l,s1:y,s2:g,s3:p}=or(s,l,y,g,p)),o[d++]=l,o[d++]=y,o[d++]=g,o[d++]=p}return It(...h),c},decrypt(r,i){!function(e){if(bt(e),e.length%jt!=0)throw Error("aes-(cbc/ecb).decrypt ciphertext should consist of blocks with size 16")}(r);const s=ir(e);let a=t;const o=[s];Tt(a)||o.push(a=Mt(a));const c=Bt(a);i=Qt(r.length,i),Tt(r)||o.push(r=Mt(r)),Ut(r,i);const u=Bt(r),h=Bt(i);let f=c[0],l=c[1],y=c[2],g=c[3];for(let e=0;e+4<=u.length;){const t=f,r=l,n=y,i=g;f=u[e+0],l=u[e+1],y=u[e+2],g=u[e+3];const{s0:a,s1:o,s2:c,s3:p}=cr(s,f,l,y,g);h[e++]=a^t,h[e++]=o^r,h[e++]=c^n,h[e++]=p^i}return It(...o),function(e,t){if(!t)return e;const r=e.length;if(!r)throw Error("aes/pcks5: empty ciphertext not allowed");const n=e[r-1];if(n<=0||n>16)throw Error("aes/pcks5: wrong padding");const i=e.subarray(0,-n);for(let t=0;t<n;t++)if(e[r-t-1]!==n)throw Error("aes/pcks5: wrong padding");return i}(i,n)}}}),yr=xt({blockSize:16,nonceLength:16},function(e,t){function r(r,n,i){bt(r);const s=r.length;if(Dt(r,i=Qt(s,i)))throw Error("overlapping src and dst not supported.");const a=nr(e);let o=t;const c=[a];Tt(o)||c.push(o=Mt(o)),Tt(r)||c.push(r=Mt(r));const u=Bt(r),h=Bt(i),f=n?h:u,l=Bt(o);let y=l[0],g=l[1],p=l[2],d=l[3];for(let e=0;e+4<=u.length;){const{s0:t,s1:r,s2:n,s3:i}=or(a,y,g,p,d);h[e+0]=u[e+0]^t,h[e+1]=u[e+1]^r,h[e+2]=u[e+2]^n,h[e+3]=u[e+3]^i,y=f[e++],g=f[e++],p=f[e++],d=f[e++]}const A=jt*Math.floor(u.length/4);if(A<s){({s0:y,s1:g,s2:p,s3:d}=or(a,y,g,p,d));const e=vt(new Uint32Array([y,g,p,d]));for(let t=A,n=0;t<s;t++,n++)i[t]=r[t]^e[n];It(e)}return It(...c),i}return{encrypt:(e,t)=>r(e,!0,t),decrypt:(e,t)=>r(e,!1,t)}}),gr=xt({blockSize:16,nonceLength:12,tagLength:16,varSizeNonce:!0},function(e,t,r){if(t.length<8)throw Error("aes/gcm: invalid nonce length");function n(e,t,n){const i=function(e,t,r,n,i){const s=i?i.length:0,a=e.create(r,n.length+s);i&&a.update(i);const o=function(e,t,r){const n=new Uint8Array(16),i=St(n);return Rt(i,0,BigInt(t),r),Rt(i,8,BigInt(e),r),n}(8*n.length,8*s,!1);a.update(n),a.update(o);const c=a.digest();return It(o),c}(_t,0,e,n,r);for(let e=0;e<t.length;e++)i[e]^=t[e];return i}function i(){const r=nr(e),n=Vt.slice(),i=Vt.slice();if(hr(r,!1,i,i,n),12===t.length)i.set(t);else{const e=Vt.slice();Rt(St(e),8,BigInt(8*t.length),!1);const r=_t.create(n).update(t).update(e);r.digestInto(i),r.destroy()}return{xk:r,authKey:n,counter:i,tagMask:hr(r,!1,i,Vt)}}return{encrypt(e){const{xk:t,authKey:r,counter:s,tagMask:a}=i(),o=new Uint8Array(e.length+16),c=[t,r,s,a];Tt(e)||c.push(e=Mt(e)),hr(t,!1,s,e,o.subarray(0,e.length));const u=n(r,a,o.subarray(0,o.length-16));return c.push(u),o.set(u,e.length),It(...c),o},decrypt(e){const{xk:t,authKey:r,counter:s,tagMask:a}=i(),o=[t,r,a,s];Tt(e)||o.push(e=Mt(e));const c=e.subarray(0,-16),u=e.subarray(-16),h=n(r,a,c);if(o.push(h),!Pt(h,u))throw Error("aes/gcm: invalid ghash tag");const f=hr(t,!1,s,c);return It(...o),f}}});function pr(e){return e instanceof Uint32Array||ArrayBuffer.isView(e)&&"Uint32Array"===e.constructor.name}function dr(e,t){if(bt(t,16),!pr(e))throw Error("_encryptBlock accepts result of expandKeyLE");const r=Bt(t);let{s0:n,s1:i,s2:s,s3:a}=or(e,r[0],r[1],r[2],r[3]);return r[0]=n,r[1]=i,r[2]=s,r[3]=a,t}function Ar(e,t){if(bt(t,16),!pr(e))throw Error("_decryptBlock accepts result of expandKeyLE");const r=Bt(t);let{s0:n,s1:i,s2:s,s3:a}=cr(e,r[0],r[1],r[2],r[3]);return r[0]=n,r[1]=i,r[2]=s,r[3]=a,t}const wr={encrypt(e,t){if(t.length>=2**32)throw Error("plaintext should be less than 4gb");const r=nr(e);if(16===t.length)dr(r,t);else{const e=Bt(t);let n=e[0],i=e[1];for(let t=0,s=1;t<6;t++)for(let t=2;t<e.length;t+=2,s++){const{s0:a,s1:o,s2:c,s3:u}=or(r,n,i,e[t],e[t+1]);n=a,i=o^Wt(s),e[t]=c,e[t+1]=u}e[0]=n,e[1]=i}r.fill(0)},decrypt(e,t){if(t.length-8>=2**32)throw Error("ciphertext should be less than 4gb");const r=ir(e),n=t.length/8-1;if(1===n)Ar(r,t);else{const e=Bt(t);let i=e[0],s=e[1];for(let t=0,a=6*n;t<6;t++)for(let t=2*n;t>=1;t-=2,a--){s^=Wt(a);const{s0:n,s1:o,s2:c,s3:u}=cr(r,i,s,e[t],e[t+1]);i=n,s=o,e[t]=c,e[t+1]=u}e[0]=i,e[1]=s}r.fill(0)}},mr=new Uint8Array(8).fill(166),br=xt({blockSize:8},e=>({encrypt(t){if(!t.length||t.length%8!=0)throw Error("invalid plaintext length");if(8===t.length)throw Error("8-byte keys not allowed in AESKW, use AESKWP instead");const r=function(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];bt(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}(mr,t);return wr.encrypt(e,r),r},decrypt(t){if(t.length%8!=0||t.length<24)throw Error("invalid ciphertext length");const r=Mt(t);if(wr.decrypt(e,r),!Pt(r.subarray(0,8),mr))throw Error("integrity check failed");return r.subarray(0,8).fill(0),r.subarray(8)}})),kr={expandKeyLE:nr,expandKeyDecLE:ir,encrypt:or,decrypt:cr,encryptBlock:dr,decryptBlock:Ar,ctrCounter:ur,ctr32:hr};async function Er(e){switch(e){case F.symmetric.aes128:case F.symmetric.aes192:case F.symmetric.aes256:throw Error("Not a legacy cipher");case F.symmetric.cast5:case F.symmetric.blowfish:case F.symmetric.twofish:case F.symmetric.tripledes:{const{legacyCiphers:t}=await Promise.resolve().then(function(){return Nl}),r=F.read(F.symmetric,e),n=t.get(r);if(!n)throw Error("Unsupported cipher algorithm");return n}default:throw Error("Unsupported cipher algorithm")}}function vr(e){switch(e){case F.symmetric.aes128:case F.symmetric.aes192:case F.symmetric.aes256:case F.symmetric.twofish:return 16;case F.symmetric.blowfish:case F.symmetric.cast5:case F.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function Br(e){switch(e){case F.symmetric.aes128:case F.symmetric.blowfish:case F.symmetric.cast5:return 16;case F.symmetric.aes192:case F.symmetric.tripledes:return 24;case F.symmetric.aes256:case F.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function Ir(e){return{keySize:Br(e),blockSize:vr(e)}}const Sr=O.getWebCrypto();async function Kr(e,t,r){const{keySize:n}=Ir(e);if(!O.isAES(e)||t.length!==n)throw Error("Unexpected algorithm or key size");try{const e=await Sr.importKey("raw",t,{name:"AES-KW"},!1,["wrapKey"]),n=await Sr.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),i=await Sr.wrapKey("raw",n,e,{name:"AES-KW"});return new Uint8Array(i)}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;O.printDebugError("Browser did not support operation: "+e.message)}return br(t).encrypt(r)}async function Cr(e,t,r){const{keySize:n}=Ir(e);if(!O.isAES(e)||t.length!==n)throw Error("Unexpected algorithm or key size");let i;try{i=await Sr.importKey("raw",t,{name:"AES-KW"},!1,["unwrapKey"])}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;return O.printDebugError("Browser did not support operation: "+e.message),br(t).decrypt(r)}try{const e=await Sr.unwrapKey("raw",r,i,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await Sr.exportKey("raw",e))}catch(e){if("OperationError"===e.name)throw Error("Key Data Integrity failed");throw e}}async function Dr(e,t,r,n,i){const s=O.getWebCrypto(),a=F.read(F.webHash,e);if(!a)throw Error("Hash algo not supported with HKDF");const o=await s.importKey("raw",t,"HKDF",!1,["deriveBits"]),c=await s.deriveBits({name:"HKDF",hash:a,salt:r,info:n},o,8*i);return new Uint8Array(c)}const Ur={x25519:O.encodeUTF8("OpenPGP X25519"),x448:O.encodeUTF8("OpenPGP X448")};async function Pr(e){switch(e){case F.publicKey.x25519:try{const e=O.getWebCrypto(),t=await e.generateKey("X25519",!0,["deriveKey","deriveBits"]).catch(e=>{if("OperationError"===e.name){const e=Error("Unexpected key generation issue");throw e.name="NotSupportedError",e}throw e}),r=await e.exportKey("jwk",t.privateKey),n=await e.exportKey("jwk",t.publicKey);if(r.x!==n.x){const e=Error("Unexpected mismatching public point");throw e.name="NotSupportedError",e}return{A:new Uint8Array(V(n.x)),k:V(r.d)}}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:t}=await Promise.resolve().then(function(){return Bl}),{secretKey:r,publicKey:n}=t.box.keyPair();return{A:n,k:r}}case F.publicKey.x448:{const e=await O.getNobleCurve(F.publicKey.x448),{secretKey:t,publicKey:r}=e.keygen();return{A:r,k:t}}default:throw Error("Unsupported ECDH algorithm")}}async function xr(e,t,r){switch(e){case F.publicKey.x25519:try{const{ephemeralPublicKey:n,sharedSecret:i}=await Mr(e,t),s=await Fr(e,n,t,r);return O.equalsUint8Array(i,s)}catch(e){return!1}case F.publicKey.x448:{const e=(await O.getNobleCurve(F.publicKey.x448)).getPublicKey(r);return O.equalsUint8Array(t,e)}default:return!1}}async function Qr(e,t,r){const{ephemeralPublicKey:n,sharedSecret:i}=await Mr(e,r),s=O.concatUint8Array([n,r,i]);switch(e){case F.publicKey.x25519:{const e=F.symmetric.aes128,{keySize:r}=Ir(e),i=await Dr(F.hash.sha256,s,new Uint8Array,Ur.x25519,r);return{ephemeralPublicKey:n,wrappedKey:await Kr(e,i,t)}}case F.publicKey.x448:{const e=F.symmetric.aes256,{keySize:r}=Ir(F.symmetric.aes256),i=await Dr(F.hash.sha512,s,new Uint8Array,Ur.x448,r);return{ephemeralPublicKey:n,wrappedKey:await Kr(e,i,t)}}default:throw Error("Unsupported ECDH algorithm")}}async function Rr(e,t,r,n,i){const s=await Fr(e,t,n,i),a=O.concatUint8Array([t,n,s]);switch(e){case F.publicKey.x25519:{const e=F.symmetric.aes128,{keySize:t}=Ir(e);return Cr(e,await Dr(F.hash.sha256,a,new Uint8Array,Ur.x25519,t),r)}case F.publicKey.x448:{const e=F.symmetric.aes256,{keySize:t}=Ir(F.symmetric.aes256);return Cr(e,await Dr(F.hash.sha512,a,new Uint8Array,Ur.x448,t),r)}default:throw Error("Unsupported ECDH algorithm")}}function Tr(e){switch(e){case F.publicKey.x25519:return 32;case F.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}}async function Mr(e,t){switch(e){case F.publicKey.x25519:try{const r=O.getWebCrypto(),n=await r.generateKey("X25519",!0,["deriveKey","deriveBits"]).catch(e=>{if("OperationError"===e.name){const e=Error("Unexpected key generation issue");throw e.name="NotSupportedError",e}throw e}),i=await r.exportKey("jwk",n.publicKey);if((await r.exportKey("jwk",n.privateKey)).x!==i.x){const e=Error("Unexpected mismatching public point");throw e.name="NotSupportedError",e}const s=Nr(e,t),a=await r.importKey("jwk",s,"X25519",!1,[]),o=await r.deriveBits({name:"X25519",public:a},n.privateKey,8*Tr(e));return{sharedSecret:new Uint8Array(o),ephemeralPublicKey:new Uint8Array(V(i.x))}}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:r}=await Promise.resolve().then(function(){return Bl}),{secretKey:n,publicKey:i}=r.box.keyPair(),s=r.scalarMult(n,t);return Lr(s),{ephemeralPublicKey:i,sharedSecret:s}}case F.publicKey.x448:{const e=await O.getNobleCurve(F.publicKey.x448),{secretKey:r,publicKey:n}=e.keygen(),i=e.getSharedSecret(r,t);return Lr(i),{ephemeralPublicKey:n,sharedSecret:i}}default:throw Error("Unsupported ECDH algorithm")}}async function Fr(e,t,r,n){switch(e){case F.publicKey.x25519:try{const i=O.getWebCrypto(),s=function(e,t,r){if(e===F.publicKey.x25519){const n=Nr(e,t);return n.d=q(r),n}throw Error("Unsupported ECDH algorithm")}(e,r,n),a=Nr(e,t),o=await i.importKey("jwk",s,"X25519",!1,["deriveKey","deriveBits"]),c=await i.importKey("jwk",a,"X25519",!1,[]),u=await i.deriveBits({name:"X25519",public:c},o,8*Tr(e));return new Uint8Array(u)}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:r}=await Promise.resolve().then(function(){return Bl}),i=r.scalarMult(n,t);return Lr(i),i}case F.publicKey.x448:{const e=(await O.getNobleCurve(F.publicKey.x448)).getSharedSecret(n,t);return Lr(e),e}default:throw Error("Unsupported ECDH algorithm")}}function Lr(e){let t=0;for(let r=0;r<e.length;r++)t|=e[r];if(0===t)throw Error("Unexpected low order point")}function Nr(e,t){if(e===F.publicKey.x25519)return{kty:"OKP",crv:"X25519",x:q(t),ext:!0};throw Error("Unsupported ECDH algorithm")}var Or=Object.freeze({__proto__:null,decrypt:Rr,encrypt:Qr,generate:Pr,generateEphemeralEncryptionMaterial:Mr,getPayloadSize:Tr,recomputeSharedSecret:Fr,validateParams:xr});const Hr=O.getWebCrypto(),zr=O.getNodeCrypto(),Gr={[F.curve.nistP256]:"P-256",[F.curve.nistP384]:"P-384",[F.curve.nistP521]:"P-521"},_r=zr?zr.getCurves():[],jr=zr?{[F.curve.secp256k1]:_r.includes("secp256k1")?"secp256k1":void 0,[F.curve.nistP256]:_r.includes("prime256v1")?"prime256v1":void 0,[F.curve.nistP384]:_r.includes("secp384r1")?"secp384r1":void 0,[F.curve.nistP521]:_r.includes("secp521r1")?"secp521r1":void 0,[F.curve.ed25519Legacy]:_r.includes("ED25519")?"ED25519":void 0,[F.curve.curve25519Legacy]:_r.includes("X25519")?"X25519":void 0,[F.curve.brainpoolP256r1]:_r.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[F.curve.brainpoolP384r1]:_r.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[F.curve.brainpoolP512r1]:_r.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},Vr={[F.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:F.publicKey.ecdsa,hash:F.hash.sha256,cipher:F.symmetric.aes128,node:jr[F.curve.nistP256],web:Gr[F.curve.nistP256],payloadSize:32,sharedSize:256,wireFormatLeadingByte:4},[F.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:F.publicKey.ecdsa,hash:F.hash.sha384,cipher:F.symmetric.aes192,node:jr[F.curve.nistP384],web:Gr[F.curve.nistP384],payloadSize:48,sharedSize:384,wireFormatLeadingByte:4},[F.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:F.publicKey.ecdsa,hash:F.hash.sha512,cipher:F.symmetric.aes256,node:jr[F.curve.nistP521],web:Gr[F.curve.nistP521],payloadSize:66,sharedSize:528,wireFormatLeadingByte:4},[F.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:F.publicKey.ecdsa,hash:F.hash.sha256,cipher:F.symmetric.aes128,node:jr[F.curve.secp256k1],payloadSize:32,wireFormatLeadingByte:4},[F.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:F.publicKey.eddsaLegacy,hash:F.hash.sha512,node:!1,payloadSize:32,wireFormatLeadingByte:64},[F.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:F.publicKey.ecdh,hash:F.hash.sha256,cipher:F.symmetric.aes128,node:!1,payloadSize:32,wireFormatLeadingByte:64},[F.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:F.publicKey.ecdsa,hash:F.hash.sha256,cipher:F.symmetric.aes128,node:jr[F.curve.brainpoolP256r1],payloadSize:32,wireFormatLeadingByte:4},[F.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:F.publicKey.ecdsa,hash:F.hash.sha384,cipher:F.symmetric.aes192,node:jr[F.curve.brainpoolP384r1],payloadSize:48,wireFormatLeadingByte:4},[F.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:F.publicKey.ecdsa,hash:F.hash.sha512,cipher:F.symmetric.aes256,node:jr[F.curve.brainpoolP512r1],payloadSize:64,wireFormatLeadingByte:4}};class qr{constructor(e){try{this.name=e instanceof We?e.getName():F.write(F.curve,e)}catch(e){throw new at("Unknown curve")}const t=Vr[this.name];this.keyType=t.keyType,this.oid=t.oid,this.hash=t.hash,this.cipher=t.cipher,this.node=t.node,this.web=t.web,this.payloadSize=t.payloadSize,this.sharedSize=t.sharedSize,this.wireFormatLeadingByte=t.wireFormatLeadingByte,this.web&&O.getWebCrypto()?this.type="web":this.node&&O.getNodeCrypto()?this.type="node":this.name===F.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===F.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(e,t){const r=await Hr.generateKey({name:"ECDSA",namedCurve:Gr[e]},!0,["sign","verify"]),n=await Hr.exportKey("jwk",r.privateKey);return{publicKey:$r(await Hr.exportKey("jwk",r.publicKey),t),privateKey:V(n.d)}}(this.name,this.wireFormatLeadingByte)}catch(e){return O.printDebugError("Browser did not support generating ec key "+e.message),Wr(this.name)}case"node":return async function(e){const t=zr.createECDH(jr[e]);return await t.generateKeys(),{publicKey:new Uint8Array(t.getPublicKey()),privateKey:new Uint8Array(t.getPrivateKey())}}(this.name);case"curve25519Legacy":{const{k:e,A:t}=await Pr(F.publicKey.x25519),r=e.slice().reverse();return r[0]=127&r[0]|64,r[31]&=248,{publicKey:O.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t]),privateKey:r}}case"ed25519Legacy":{const{seed:e,A:t}=await ht(F.publicKey.ed25519);return{publicKey:O.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t]),privateKey:e}}default:return Wr(this.name)}}}async function Yr(e){const t=new qr(e),{oid:r,hash:n,cipher:i}=t,s=await t.genKeyPair();return{oid:r,Q:s.publicKey,secret:O.leftPad(s.privateKey,t.payloadSize),hash:n,cipher:i}}function Zr(e){return Vr[e.getName()].hash}async function Jr(e,t,r,n){const i={[F.curve.nistP256]:!0,[F.curve.nistP384]:!0,[F.curve.nistP521]:!0,[F.curve.secp256k1]:!0,[F.curve.curve25519Legacy]:e===F.publicKey.ecdh,[F.curve.brainpoolP256r1]:!0,[F.curve.brainpoolP384r1]:!0,[F.curve.brainpoolP512r1]:!0},s=t.getName();if(!i[s])return!1;if(s===F.curve.curve25519Legacy){const e=n.slice().reverse();return!(r.length<1||64!==r[0])&&xr(F.publicKey.x25519,r.subarray(1),e)}const a=(await O.getNobleCurve(F.publicKey.ecdsa,s)).getPublicKey(n,!1);return!!O.equalsUint8Array(a,r)}function Xr(e,t){const{payloadSize:r,wireFormatLeadingByte:n,name:i}=e,s=i===F.curve.curve25519Legacy||i===F.curve.ed25519Legacy?r:2*r;if(t[0]!==n||t.length!==s+1)throw Error("Invalid point encoding")}async function Wr(e){const t=await O.getNobleCurve(F.publicKey.ecdsa,e),{secretKey:r}=t.keygen();return{publicKey:t.getPublicKey(r,!1),privateKey:r}}function $r(e,t){const r=V(e.x),n=V(e.y),i=new Uint8Array(r.length+n.length+1);return i[0]=t,i.set(r,1),i.set(n,r.length+1),i}function en(e,t,r){const n=e,i=r.slice(1,n+1),s=r.slice(n+1,2*n+1);return{kty:"EC",crv:t,x:q(i),y:q(s),ext:!0}}function tn(e,t,r,n){const i=en(e,t,r);return i.d=q(n),i}const rn=O.getWebCrypto(),nn=O.getNodeCrypto();async function sn(e,t,r,n,i,s){const a=new qr(e);if(Xr(a,n),r&&!O.isStream(r)){const s={publicKey:n,privateKey:i};switch(a.type){case"web":try{return await async function(e,t,r,n){const i=e.payloadSize,s=tn(e.payloadSize,Gr[e.name],n.publicKey,n.privateKey),a=await rn.importKey("jwk",s,{name:"ECDSA",namedCurve:Gr[e.name],hash:{name:F.read(F.webHash,e.hash)}},!1,["sign"]),o=new Uint8Array(await rn.sign({name:"ECDSA",namedCurve:Gr[e.name],hash:{name:F.read(F.webHash,t)}},a,r));return{r:o.slice(0,i),s:o.slice(i,i<<1)}}(a,t,r,s)}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;O.printDebugError("Browser did not support signing: "+e.message)}break;case"node":return async function(e,t,r,n){const i=O.nodeRequire("eckey-utils"),s=O.getNodeBuffer(),{privateKey:a}=i.generateDer({curveName:jr[e.name],privateKey:s.from(n)}),o=nn.createSign(F.read(F.hash,t));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),u=e.payloadSize;return{r:c.subarray(0,u),s:c.subarray(u,u<<1)}}(a,t,r,i)}}const o=(await O.getNobleCurve(F.publicKey.ecdsa,a.name)).sign(s,i,{lowS:!1});return{r:ge(o.r,"be",a.payloadSize),s:ge(o.s,"be",a.payloadSize)}}async function an(e,t,r,n,i,s){const a=new qr(e);Xr(a,i);const o=async()=>0===s[0]&&on(a,r,s.subarray(1),i);if(n&&!O.isStream(n))switch(a.type){case"web":try{const e=await async function(e,t,{r,s:n},i,s){const a=en(e.payloadSize,Gr[e.name],s),o=await rn.importKey("jwk",a,{name:"ECDSA",namedCurve:Gr[e.name],hash:{name:F.read(F.webHash,e.hash)}},!1,["verify"]),c=O.concatUint8Array([r,n]).buffer;return rn.verify({name:"ECDSA",namedCurve:Gr[e.name],hash:{name:F.read(F.webHash,t)}},o,c,i)}(a,t,r,n,i);return e||o()}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;O.printDebugError("Browser did not support verifying: "+e.message)}break;case"node":{const e=await async function(e,t,{r,s:n},i,s){const a=O.nodeRequire("eckey-utils"),o=O.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:jr[e.name],publicKey:o.from(s)}),u=nn.createVerify(F.read(F.hash,t));u.write(i),u.end();const h=O.concatUint8Array([r,n]);try{return u.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},h)}catch(e){return!1}}(a,t,r,n,i);return e||o()}}return await on(a,r,s,i)||o()}async function on(e,t,r,n){return(await O.getNobleCurve(F.publicKey.ecdsa,e.name)).verify(O.concatUint8Array([t.r,t.s]),r,n,{lowS:!1})}var cn=Object.freeze({__proto__:null,sign:sn,validateParams:async function(e,t,r){const n=new qr(e);if(n.keyType!==F.publicKey.ecdsa)return!1;switch(n.type){case"web":case"node":{const n=de(8),i=F.hash.sha256,s=await Me(i,n);try{const a=await sn(e,i,n,t,r,s);return await an(e,i,a,n,t,s)}catch(e){return!1}}default:return Jr(F.publicKey.ecdsa,e,t,r)}},verify:an});async function un(e,t,r,n,i,s){if(Xr(new qr(e),n),Fe(t)<Fe(F.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const{RS:a}=await ft(F.publicKey.ed25519,t,0,n.subarray(1),i,s);return{r:a.subarray(0,32),s:a.subarray(32)}}async function hn(e,t,{r,s:n},i,s,a){if(Xr(new qr(e),s),Fe(t)<Fe(F.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const o=O.concatUint8Array([r,n]);return lt(F.publicKey.ed25519,t,{RS:o},0,s.subarray(1),a)}async function fn(e,t,r){return e.getName()===F.curve.ed25519Legacy&&!(t.length<1||64!==t[0])&&yt(F.publicKey.ed25519,t.subarray(1),r)}var ln=Object.freeze({__proto__:null,sign:un,validateParams:fn,verify:hn});function yn(e){const t=e.length;if(t>0){const r=e[t-1];if(r>=1){const n=e.subarray(t-r),i=new Uint8Array(r).fill(r);if(O.equalsUint8Array(n,i))return e.subarray(0,t-r)}}throw Error("Invalid padding")}function gn(e,t,r,n){return O.concatUint8Array([t.write(),new Uint8Array([e]),r.write(),O.stringToUint8Array("Anonymous Sender "),n])}async function pn(e,t,r,n,i=!1,s=!1){let a;if(i){for(a=0;a<t.length&&0===t[a];a++);t=t.subarray(a)}if(s){for(a=t.length-1;a>=0&&0===t[a];a--);t=t.subarray(0,a+1)}return(await Me(e,O.concatUint8Array([new Uint8Array([0,0,0,1]),t,n]))).subarray(0,r)}async function dn(e,t,r,n,i){const s=function(e){const t=8-e.length%8,r=new Uint8Array(e.length+t).fill(t);return r.set(e),r}(r),a=new qr(e);Xr(a,n);const{publicKey:o,sharedKey:c}=await async function(e,t){switch(e.type){case"curve25519Legacy":{const{sharedSecret:r,ephemeralPublicKey:n}=await Mr(F.publicKey.x25519,t.subarray(1));return{publicKey:O.concatUint8Array([new Uint8Array([e.wireFormatLeadingByte]),n]),sharedKey:r}}case"web":if(e.web&&O.getWebCrypto())try{return await async function(e,t){const r=O.getWebCrypto(),n=en(e.payloadSize,e.web,t);let i=r.generateKey({name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]),s=r.importKey("jwk",n,{name:"ECDH",namedCurve:e.web},!1,[]);[i,s]=await Promise.all([i,s]);let a=r.deriveBits({name:"ECDH",namedCurve:e.web,public:s},i.privateKey,e.sharedSize),o=r.exportKey("jwk",i.publicKey);[a,o]=await Promise.all([a,o]);const c=new Uint8Array(a);return{publicKey:new Uint8Array($r(o,e.wireFormatLeadingByte)),sharedKey:c}}(e,t)}catch(r){return O.printDebugError(r),mn(e,t)}break;case"node":return async function(e,t){const r=O.getNodeCrypto().createECDH(e.node);r.generateKeys();const n=new Uint8Array(r.computeSecret(t));return{publicKey:new Uint8Array(r.getPublicKey()),sharedKey:n}}(e,t);default:return mn(e,t)}}(a,n),u=gn(F.publicKey.ecdh,e,t,i),{keySize:h}=Ir(t.cipher),f=await pn(t.hash,c,h,u);return{publicKey:o,wrappedKey:await Kr(t.cipher,f,s)}}async function An(e,t,r,n,i,s,a){const o=new qr(e);Xr(o,i),Xr(o,r);const{sharedKey:c}=await async function(e,t,r,n){if(n.length!==e.payloadSize){const t=new Uint8Array(e.payloadSize);t.set(n,e.payloadSize-n.length),n=t}switch(e.type){case"curve25519Legacy":{const e=n.slice().reverse();return{secretKey:e,sharedKey:await Fr(F.publicKey.x25519,t.subarray(1),r.subarray(1),e)}}case"web":if(e.web&&O.getWebCrypto())try{return await async function(e,t,r,n){const i=O.getWebCrypto(),s=tn(e.payloadSize,e.web,r,n);let a=i.importKey("jwk",s,{name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]);const o=en(e.payloadSize,e.web,t);let c=i.importKey("jwk",o,{name:"ECDH",namedCurve:e.web},!0,[]);[a,c]=await Promise.all([a,c]);let u=i.deriveBits({name:"ECDH",namedCurve:e.web,public:c},a,e.sharedSize),h=i.exportKey("jwk",a);[u,h]=await Promise.all([u,h]);const f=new Uint8Array(u);return{secretKey:V(h.d),sharedKey:f}}(e,t,r,n)}catch(r){return O.printDebugError(r),wn(e,t,n)}break;case"node":return async function(e,t,r){const n=O.getNodeCrypto().createECDH(e.node);n.setPrivateKey(r);const i=new Uint8Array(n.computeSecret(t));return{secretKey:new Uint8Array(n.getPrivateKey()),sharedKey:i}}(e,t,n);default:return wn(e,t,n)}}(o,r,i,s),u=gn(F.publicKey.ecdh,e,t,a),{keySize:h}=Ir(t.cipher);let f;for(let r=0;r<3;r++)try{const e=await pn(t.hash,c,h,u,1===r,2===r);return yn(await Cr(t.cipher,e,n))}catch(e){f=e}throw f}async function wn(e,t,r){return{secretKey:r,sharedKey:(await O.getNobleCurve(F.publicKey.ecdh,e.name)).getSharedSecret(r,t).subarray(1)}}async function mn(e,t){const r=await O.getNobleCurve(F.publicKey.ecdh,e.name),{publicKey:n,privateKey:i}=await e.genKeyPair();return{publicKey:n,sharedKey:r.getSharedSecret(i,t).subarray(1)}}var bn=Object.freeze({__proto__:null,CurveWithOID:qr,ecdh:Object.freeze({__proto__:null,decrypt:An,encrypt:dn,validateParams:async function(e,t,r){return Jr(F.publicKey.ecdh,e,t,r)}}),ecdhX:Or,ecdsa:cn,eddsa:wt,eddsaLegacy:ln,generate:Yr,getPreferredHashAlgo:Zr});const kn=BigInt(0),En=BigInt(1);class vn{constructor(e){e&&(this.data=e)}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.data=e.subarray(1,1+t),1+this.data.length}throw Error("Invalid symmetric key")}write(){return O.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class Bn{constructor(e){if(e){const{hash:t,cipher:r}=e;this.hash=t,this.cipher=r}else this.hash=null,this.cipher=null}read(e){if(e.length<4||3!==e[0]||1!==e[1])throw new at("Cannot read KDFParams");return this.hash=e[2],this.cipher=e[3],4}write(){return new Uint8Array([3,1,this.hash,this.cipher])}}class In{static fromObject({wrappedKey:e,algorithm:t}){const r=new In;return r.wrappedKey=e,r.algorithm=t,r}read(e){let t=0,r=e[t++];this.algorithm=r%2?e[t++]:null,r-=r%2,this.wrappedKey=O.readExactSubarray(e,t,t+r),t+=r}write(){return O.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}function Sn(e,t,r){let n=0;switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:{const e=O.readMPI(t.subarray(n));n+=e.length+2;const r=O.readMPI(t.subarray(n));n+=r.length+2;const i=O.readMPI(t.subarray(n));n+=i.length+2;const s=O.readMPI(t.subarray(n));return n+=s.length+2,{read:n,privateParams:{d:e,p:r,q:i,u:s}}}case F.publicKey.dsa:case F.publicKey.elgamal:{const e=O.readMPI(t.subarray(n));return n+=e.length+2,{read:n,privateParams:{x:e}}}case F.publicKey.ecdsa:case F.publicKey.ecdh:{const i=Un(e,r.oid);let s=O.readMPI(t.subarray(n));return n+=s.length+2,s=O.leftPad(s,i),{read:n,privateParams:{d:s}}}case F.publicKey.eddsaLegacy:{const i=Un(e,r.oid);if(r.oid.getName()!==F.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let s=O.readMPI(t.subarray(n));return n+=s.length+2,s=O.leftPad(s,i),{read:n,privateParams:{seed:s}}}case F.publicKey.ed25519:case F.publicKey.ed448:{const r=Un(e),i=O.readExactSubarray(t,n,n+r);return n+=i.length,{read:n,privateParams:{seed:i}}}case F.publicKey.x25519:case F.publicKey.x448:{const r=Un(e),i=O.readExactSubarray(t,n,n+r);return n+=i.length,{read:n,privateParams:{k:i}}}default:throw new at("Unknown public key encryption algorithm.")}}function Kn(e,t){const r=new Set([F.publicKey.ed25519,F.publicKey.x25519,F.publicKey.ed448,F.publicKey.x448]),n=Object.keys(t).map(n=>{const i=t[n];return O.isUint8Array(i)?r.has(e)?i:O.uint8ArrayToMPI(i):i.write()});return O.concatUint8Array(n)}function Cn(e){const{keySize:t}=Ir(e);return de(t)}function Dn(e){try{e.getName()}catch(e){throw new at("Unknown curve OID")}}function Un(e,t){switch(e){case F.publicKey.ecdsa:case F.publicKey.ecdh:case F.publicKey.eddsaLegacy:return new qr(t).payloadSize;case F.publicKey.ed25519:case F.publicKey.ed448:return gt(e);case F.publicKey.x25519:case F.publicKey.x448:return Tr(e);default:throw Error("Unknown elliptic algo")}}const Pn=O.getWebCrypto(),xn=O.getNodeCrypto(),Qn=xn?xn.getCiphers():[],Rn={idea:Qn.includes("idea-cfb")?"idea-cfb":void 0,tripledes:Qn.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:Qn.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:Qn.includes("bf-cfb")?"bf-cfb":void 0,aes128:Qn.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:Qn.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:Qn.includes("aes-256-cfb")?"aes-256-cfb":void 0};async function Tn(e){const{blockSize:t}=Ir(e),r=await de(t),n=new Uint8Array([r[r.length-2],r[r.length-1]]);return O.concat([r,n])}async function Mn(e,t,r,n,i){const s=F.read(F.symmetric,e);if(O.getNodeCrypto()&&Rn[s])return function(e,t,r,n){const i=F.read(F.symmetric,e),s=new xn.createCipheriv(Rn[i],t,n);return B(r,e=>new Uint8Array(s.update(e)))}(e,t,r,n);if(O.isAES(e))return async function(e,t,r,n){if(Pn&&await Ln.isSupported(e)){const i=new Ln(e,t,n);return O.isStream(r)?B(r,e=>i.encryptChunk(e),()=>i.finish()):i.encrypt(r)}if(O.isStream(r)){const i=new Nn(!0,e,t,n);return B(r,e=>i.processChunk(e),()=>i.finish())}return yr(t,n).encrypt(r)}(e,t,r,n);const a=new(await Er(e))(t),o=a.blockSize,c=n.slice();let u=new Uint8Array;const h=e=>{e&&(u=O.concatUint8Array([u,e]));const t=new Uint8Array(u.length);let r,n=0;for(;e?u.length>=o:u.length;){const e=a.encrypt(c);for(r=0;r<o;r++)c[r]=u[r]^e[r],t[n++]=c[r];u=u.subarray(o)}return t.subarray(0,n)};return B(r,h,h)}async function Fn(e,t,r,n){const i=F.read(F.symmetric,e);if(xn&&Rn[i])return function(e,t,r,n){const i=F.read(F.symmetric,e),s=new xn.createDecipheriv(Rn[i],t,n);return B(r,e=>new Uint8Array(s.update(e)))}(e,t,r,n);if(O.isAES(e))return async function(e,t,r,n){if(O.isStream(r)){const i=new Nn(!1,e,t,n);return B(r,e=>i.processChunk(e),()=>i.finish())}return yr(t,n).decrypt(r)}(e,t,r,n);const s=new(await Er(e))(t),a=s.blockSize;let o=n,c=new Uint8Array;const u=e=>{e&&(c=O.concatUint8Array([c,e]));const t=new Uint8Array(c.length);let r,n=0;for(;e?c.length>=a:c.length;){const e=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)t[n++]=o[r]^e[r];c=c.subarray(a)}return t.subarray(0,n)};return B(r,u,u)}class Ln{constructor(e,t,r){const{blockSize:n}=Ir(e);this.key=t,this.prevBlock=r,this.nextBlock=new Uint8Array(n),this.i=0,this.blockSize=n,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(e){const{keySize:t}=Ir(e);return Pn.importKey("raw",new Uint8Array(t),"aes-cbc",!1,["encrypt"]).then(()=>!0,()=>!1)}async _runCBC(e,t){const r="AES-CBC";this.keyRef=this.keyRef||await Pn.importKey("raw",this.key,r,!1,["encrypt"]);const n=await Pn.encrypt({name:r,iv:t||this.zeroBlock},this.keyRef,e);return new Uint8Array(n).subarray(0,e.length)}async encryptChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,n=O.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),i=O.concatUint8Array([this.prevBlock,n.subarray(0,n.length-this.blockSize)]),s=await this._runCBC(i);return On(s,n),this.prevBlock=s.slice(-this.blockSize),r>0&&this.nextBlock.set(e.subarray(-r)),this.i=r,s}let n;if(this.i+=r.length,this.i===this.nextBlock.length){const t=this.nextBlock;n=await this._runCBC(this.prevBlock),On(n,t),this.prevBlock=n.slice(),this.i=0;const i=e.subarray(r.length);this.nextBlock.set(i,this.i),this.i+=i.length}else n=new Uint8Array;return n}async finish(){let e;if(0===this.i)e=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const t=this.nextBlock,r=await this._runCBC(this.prevBlock);On(r,t),e=r.subarray(0,t.length)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(e){const t=(await this._runCBC(O.concatUint8Array([new Uint8Array(this.blockSize),e]),this.iv)).subarray(0,e.length);return On(t,e),this.clearSensitiveData(),t}}class Nn{constructor(e,t,r,n){this.forEncryption=e;const{blockSize:i}=Ir(t);this.key=kr.expandKeyLE(r),n.byteOffset%4!=0&&(n=n.slice()),this.prevBlock=Hn(n),this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i}_runCFB(e){const t=Hn(e),r=new Uint8Array(e.length),n=Hn(r);for(let e=0;e+4<=n.length;e+=4){const{s0:r,s1:i,s2:s,s3:a}=kr.encrypt(this.key,this.prevBlock[0],this.prevBlock[1],this.prevBlock[2],this.prevBlock[3]);n[e+0]=t[e+0]^r,n[e+1]=t[e+1]^i,n[e+2]=t[e+2]^s,n[e+3]=t[e+3]^a,this.prevBlock=(this.forEncryption?n:t).slice(e,e+4)}return r}async processChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,n=O.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),i=this._runCFB(n);return r>0&&this.nextBlock.set(e.subarray(-r)),this.i=r,i}let n;if(this.i+=r.length,this.i===this.nextBlock.length){n=this._runCFB(this.nextBlock),this.i=0;const t=e.subarray(r.length);this.nextBlock.set(t,this.i),this.i+=t.length}else n=new Uint8Array;return n}async finish(){let e;return e=0===this.i?new Uint8Array:this._runCFB(this.nextBlock).subarray(0,this.i),this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.key.fill(0)}}function On(e,t){const r=Math.min(e.length,t.length);for(let n=0;n<r;n++)e[n]=e[n]^t[n]}const Hn=e=>new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4)),zn=O.getWebCrypto(),Gn=O.getNodeCrypto(),_n=16;function jn(e,t){const r=e.length-_n;for(let n=0;n<_n;n++)e[n+r]^=t[n];return e}const Vn=new Uint8Array(_n);const qn=O.getWebCrypto(),Yn=O.getNodeCrypto(),Zn=O.getNodeBuffer(),Jn=new Uint8Array(16),Xn=new Uint8Array(16);Xn[15]=1;const Wn=new Uint8Array(16);async function $n(e){const t=await async function(e){const t=await async function(e){if(O.getNodeCrypto())return async function(t){const r=new Gn.createCipheriv("aes-"+8*e.length+"-cbc",e,Vn).update(t);return new Uint8Array(r)};if(O.getWebCrypto())try{return e=await zn.importKey("raw",e,{name:"AES-CBC",length:8*e.length},!1,["encrypt"]),async function(t){const r=await zn.encrypt({name:"AES-CBC",iv:Vn,length:128},e,t);return new Uint8Array(r).subarray(0,r.byteLength-_n)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;O.printDebugError("Browser did not support operation: "+t.message)}return async function(t){return lr(e,Vn,{disablePadding:!0}).encrypt(t)}}(e),r=O.double(await t(Vn)),n=O.double(r);return async function(e){return(await t(function(e,t,r){if(e.length&&e.length%_n==0)return jn(e,t);const n=new Uint8Array(e.length+(_n-e.length%_n));return n.set(e),n[e.length]=128,jn(n,r)}(e,r,n))).subarray(-16)}}(e);return function(e,r){return t(O.concatUint8Array([e,r]))}}async function ei(e){if(O.getNodeCrypto())return async function(t,r){const n=new Yn.createCipheriv("aes-"+8*e.length+"-ctr",e,r),i=Zn.concat([n.update(t),n.final()]);return new Uint8Array(i)};if(O.getWebCrypto())try{const t=await qn.importKey("raw",e,{name:"AES-CTR",length:8*e.length},!1,["encrypt"]);return async function(e,r){const n=await qn.encrypt({name:"AES-CTR",counter:r,length:128},t,e);return new Uint8Array(n)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;O.printDebugError("Browser did not support operation: "+t.message)}return async function(t,r){return fr(e,r).encrypt(t)}}async function ti(e,t){if(e!==F.symmetric.aes128&&e!==F.symmetric.aes192&&e!==F.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,n]=await Promise.all([$n(t),ei(t)]);return{encrypt:async function(e,t,i){const[s,a]=await Promise.all([r(Jn,t),r(Xn,i)]),o=await n(e,s),c=await r(Wn,o);for(let e=0;e<16;e++)c[e]^=a[e]^s[e];return O.concatUint8Array([o,c])},decrypt:async function(e,t,i){if(e.length<16)throw Error("Invalid EAX ciphertext");const s=e.subarray(0,-16),a=e.subarray(-16),[o,c,u]=await Promise.all([r(Jn,t),r(Xn,i),r(Wn,s)]),h=u;for(let e=0;e<16;e++)h[e]^=c[e]^o[e];if(!O.equalsUint8Array(a,h))throw Error("Authentication tag mismatch");return await n(s,o)}}}Wn[15]=2,ti.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[8+e]^=t[e];return r},ti.blockLength=16,ti.ivLength=16,ti.tagLength=16;const ri=16;function ni(e){let t=0;for(let r=1;!(e&r);r<<=1)t++;return t}function ii(e,t){for(let r=0;r<e.length;r++)e[r]^=t[r];return e}function si(e,t){return ii(e.slice(),t)}const ai=new Uint8Array(ri),oi=new Uint8Array([1]);async function ci(e,t){const{keySize:r}=Ir(e);if(!O.isAES(e)||t.length!==r)throw Error("Unexpected algorithm or key size");let n=0;const i=e=>lr(t,ai,{disablePadding:!0}).encrypt(e),s=e=>lr(t,ai,{disablePadding:!0}).decrypt(e);let a;function o(e,t,r,s){const o=t.length/ri|0;!function(e,t){const r=O.nbits(Math.max(e.length,t.length)/ri|0)-1;for(let e=n+1;e<=r;e++)a[e]=O.double(a[e-1]);n=r}(t,s);const c=O.concatUint8Array([ai.subarray(0,15-r.length),oi,r]),u=63&c[15];c[15]&=192;const h=i(c),f=O.concatUint8Array([h,si(h.subarray(0,8),h.subarray(1,9))]),l=O.shiftRight(f.subarray(0+(u>>3),17+(u>>3)),8-(7&u)).subarray(1),y=new Uint8Array(ri),g=new Uint8Array(t.length+16);let p,d=0;for(p=0;p<o;p++)ii(l,a[ni(p+1)]),g.set(ii(e(si(l,t)),l),d),ii(y,e===i?t:g.subarray(d)),t=t.subarray(ri),d+=ri;if(t.length){ii(l,a.x);const r=i(l);g.set(si(t,r),d);const n=new Uint8Array(ri);n.set(e===i?t:g.subarray(d,-16),0),n[t.length]=128,ii(y,n),d+=t.length}const A=ii(i(ii(ii(y,l),a.$)),function(e){if(!e.length)return ai;const t=e.length/ri|0,r=new Uint8Array(ri),n=new Uint8Array(ri);for(let s=0;s<t;s++)ii(r,a[ni(s+1)]),ii(n,i(si(r,e))),e=e.subarray(ri);if(e.length){ii(r,a.x);const t=new Uint8Array(ri);t.set(e,0),t[e.length]=128,ii(t,r),ii(n,i(t))}return n}(s));return g.set(A,d),g}return function(){const e=i(ai),t=O.double(e);a=[],a[0]=O.double(t),a.x=e,a.$=t}(),{encrypt:async function(e,t,r){return o(i,e,t,r)},decrypt:async function(e,t,r){if(e.length<16)throw Error("Invalid OCB ciphertext");const n=e.subarray(-16);e=e.subarray(0,-16);const i=o(s,e,t,r);if(O.equalsUint8Array(n,i.subarray(-16)))return i.subarray(0,-16);throw Error("Authentication tag mismatch")}}}ci.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[7+e]^=t[e];return r},ci.blockLength=ri,ci.ivLength=15,ci.tagLength=16;const ui=O.getWebCrypto(),hi=O.getNodeCrypto(),fi=O.getNodeBuffer(),li="AES-GCM";async function yi(e,t){if(e!==F.symmetric.aes128&&e!==F.symmetric.aes192&&e!==F.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(O.getNodeCrypto())return{encrypt:async function(e,r,n=new Uint8Array){const i=new hi.createCipheriv("aes-"+8*t.length+"-gcm",t,r);i.setAAD(n);const s=fi.concat([i.update(e),i.final(),i.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(e,r,n=new Uint8Array){const i=new hi.createDecipheriv("aes-"+8*t.length+"-gcm",t,r);i.setAAD(n),i.setAuthTag(e.slice(e.length-16,e.length));const s=fi.concat([i.update(e.slice(0,e.length-16)),i.final()]);return new Uint8Array(s)}};if(O.getWebCrypto())try{const e=await ui.importKey("raw",t,{name:li},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(n,i,s=new Uint8Array){if(r&&!n.length)return gr(t,i,s).encrypt(n);const a=await ui.encrypt({name:li,iv:i,additionalData:s,tagLength:128},e,n);return new Uint8Array(a)},decrypt:async function(n,i,s=new Uint8Array){if(r&&16===n.length)return gr(t,i,s).decrypt(n);try{const t=await ui.decrypt({name:li,iv:i,additionalData:s,tagLength:128},e,n);return new Uint8Array(t)}catch(e){if("OperationError"===e.name)throw Error("Authentication tag mismatch")}}}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;O.printDebugError("Browser did not support operation: "+e.message)}return{encrypt:async function(e,r,n){return gr(t,r,n).encrypt(e)},decrypt:async function(e,r,n){return gr(t,r,n).decrypt(e)}}}function gi(e,t=!1){switch(e){case F.aead.eax:return ti;case F.aead.ocb:return ci;case F.aead.gcm:return yi;case F.aead.experimentalGCM:if(!t)throw Error("Unexpected non-standard `experimentalGCM` AEAD algorithm provided in `config.preferredAEADAlgorithm`: use `gcm` instead");return yi;default:throw Error("Unsupported AEAD mode")}}yi.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[4+e]^=t[e];return r},yi.blockLength=16,yi.ivLength=12,yi.tagLength=16;class pi extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,pi),this.name="Argon2OutOfMemoryError"}}let di,Ai;class wi{constructor(e=L){const{passes:t,parallelism:r,memoryExponent:n}=e.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=t,this.p=r,this.encodedM=n}generateSalt(){this.salt=de(16)}read(e){let t=0;return this.salt=e.subarray(t,t+16),t+=16,this.t=e[t++],this.p=e[t++],this.encodedM=e[t++],t}write(){const e=[new Uint8Array([F.write(F.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return O.concatUint8Array(e)}async produceKey(e,t){const r=2<<this.encodedM-1;try{di=di||(await Promise.resolve().then(function(){return py})).default,Ai=Ai||di();const n=(await Ai)({version:19,type:2,password:O.encodeUTF8(e),salt:this.salt,tagLength:t,memorySize:r,parallelism:this.p,passes:this.t});return r>1048576&&(Ai=di(),Ai.catch(()=>{})),n}catch(e){throw e.message&&(e.message.includes("Unable to grow instance memory")||e.message.includes("failed to grow memory")||e.message.includes("WebAssembly.Memory.grow")||e.message.includes("Out of memory"))?new pi("Could not allocate required memory for Argon2"):e}}}class mi{constructor(e,t=L){this.algorithm=F.hash.sha256,this.type=F.read(F.s2k,e),this.c=t.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=de(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(e){let t=0;switch(this.algorithm=e[t++],this.type){case"simple":break;case"salted":this.salt=e.subarray(t,t+8),t+=8;break;case"iterated":this.salt=e.subarray(t,t+8),t+=8,this.c=e[t++];break;case"gnu":if("GNU"!==O.uint8ArrayToString(e.subarray(t,t+3)))throw new at("Unknown s2k type.");if(t+=3,1001!==1e3+e[t++])throw new at("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new at("Unknown s2k type.")}return t}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...O.stringToUint8Array("GNU"),1]);const e=[new Uint8Array([F.write(F.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":e.push(this.salt);break;case"iterated":e.push(this.salt),e.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return O.concatUint8Array(e)}async produceKey(e,t){e=O.encodeUTF8(e);const r=[];let n=0,i=0;for(;n<t;){let t;switch(this.type){case"simple":t=O.concatUint8Array([new Uint8Array(i),e]);break;case"salted":t=O.concatUint8Array([new Uint8Array(i),this.salt,e]);break;case"iterated":{const r=O.concatUint8Array([this.salt,e]);let n=r.length;const s=Math.max(this.getCount(),n);t=new Uint8Array(i+s),t.set(r,i);for(let e=i+n;e<s;e+=n,n*=2)t.copyWithin(e,i,e);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await Me(this.algorithm,t);r.push(s),n+=s.length,i++}return O.concatUint8Array(r).subarray(0,t)}}const bi=new Set([F.s2k.argon2,F.s2k.iterated]);function ki(e,t=L){switch(e){case F.s2k.argon2:return new wi(t);case F.s2k.iterated:case F.s2k.gnu:case F.s2k.salted:case F.s2k.simple:return new mi(e,t);default:throw new at("Unsupported S2K type")}}function Ei(e){const{s2kType:t}=e;if(!bi.has(t))throw Error("The provided `config.s2kType` value is not allowed");return ki(t,e)}var vi=Uint8Array,Bi=Uint16Array,Ii=Int32Array,Si=new vi([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),Ki=new vi([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),Ci=new vi([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),Di=function(e,t){for(var r=new Bi(31),n=0;n<31;++n)r[n]=t+=1<<e[n-1];var i=new Ii(r[30]);for(n=1;n<30;++n)for(var s=r[n];s<r[n+1];++s)i[s]=s-r[n]<<5|n;return{b:r,r:i}},Ui=Di(Si,2),Pi=Ui.b,xi=Ui.r;Pi[28]=258,xi[258]=28;for(var Qi=Di(Ki,0),Ri=Qi.b,Ti=Qi.r,Mi=new Bi(32768),Fi=0;Fi<32768;++Fi){var Li=(43690&Fi)>>1|(21845&Fi)<<1;Li=(61680&(Li=(52428&Li)>>2|(13107&Li)<<2))>>4|(3855&Li)<<4,Mi[Fi]=((65280&Li)>>8|(255&Li)<<8)>>1}var Ni=function(e,t,r){for(var n=e.length,i=0,s=new Bi(t);i<n;++i)e[i]&&++s[e[i]-1];var a,o=new Bi(t);for(i=1;i<t;++i)o[i]=o[i-1]+s[i-1]<<1;if(r){a=new Bi(1<<t);var c=15-t;for(i=0;i<n;++i)if(e[i])for(var u=i<<4|e[i],h=t-e[i],f=o[e[i]-1]++<<h,l=f|(1<<h)-1;f<=l;++f)a[Mi[f]>>c]=u}else for(a=new Bi(n),i=0;i<n;++i)e[i]&&(a[i]=Mi[o[e[i]-1]++]>>15-e[i]);return a},Oi=new vi(288);for(Fi=0;Fi<144;++Fi)Oi[Fi]=8;for(Fi=144;Fi<256;++Fi)Oi[Fi]=9;for(Fi=256;Fi<280;++Fi)Oi[Fi]=7;for(Fi=280;Fi<288;++Fi)Oi[Fi]=8;var Hi=new vi(32);for(Fi=0;Fi<32;++Fi)Hi[Fi]=5;var zi=Ni(Oi,9,0),Gi=Ni(Oi,9,1),_i=Ni(Hi,5,0),ji=Ni(Hi,5,1),Vi=function(e){for(var t=e[0],r=1;r<e.length;++r)e[r]>t&&(t=e[r]);return t},qi=function(e,t,r){var n=t/8|0;return(e[n]|e[n+1]<<8)>>(7&t)&r},Yi=function(e,t){var r=t/8|0;return(e[r]|e[r+1]<<8|e[r+2]<<16)>>(7&t)},Zi=function(e){return(e+7)/8|0},Ji=function(e,t,r){return(null==t||t<0)&&(t=0),(null==r||r>e.length)&&(r=e.length),new vi(e.subarray(t,r))},Xi=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],Wi=function(e,t,r){var n=Error(t||Xi[e]);if(n.code=e,Error.captureStackTrace&&Error.captureStackTrace(n,Wi),!r)throw n;return n},$i=function(e,t,r){r<<=7&t;var n=t/8|0;e[n]|=r,e[n+1]|=r>>8},es=function(e,t,r){r<<=7&t;var n=t/8|0;e[n]|=r,e[n+1]|=r>>8,e[n+2]|=r>>16},ts=function(e,t){for(var r=[],n=0;n<e.length;++n)e[n]&&r.push({s:n,f:e[n]});var i=r.length,s=r.slice();if(!i)return{t:cs,l:0};if(1==i){var a=new vi(r[0].s+1);return a[r[0].s]=1,{t:a,l:1}}r.sort(function(e,t){return e.f-t.f}),r.push({s:-1,f:25001});var o=r[0],c=r[1],u=0,h=1,f=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};h!=i-1;)o=r[r[u].f<r[f].f?u++:f++],c=r[u!=h&&r[u].f<r[f].f?u++:f++],r[h++]={s:-1,f:o.f+c.f,l:o,r:c};var l=s[0].s;for(n=1;n<i;++n)s[n].s>l&&(l=s[n].s);var y=new Bi(l+1),g=rs(r[h-1],y,0);if(g>t){n=0;var p=0,d=g-t,A=1<<d;for(s.sort(function(e,t){return y[t.s]-y[e.s]||e.f-t.f});n<i;++n){var w=s[n].s;if(!(y[w]>t))break;p+=A-(1<<g-y[w]),y[w]=t}for(p>>=d;p>0;){var m=s[n].s;y[m]<t?p-=1<<t-y[m]++-1:++n}for(;n>=0&&p;--n){var b=s[n].s;y[b]==t&&(--y[b],++p)}g=t}return{t:new vi(y),l:g}},rs=function(e,t,r){return-1==e.s?Math.max(rs(e.l,t,r+1),rs(e.r,t,r+1)):t[e.s]=r},ns=function(e){for(var t=e.length;t&&!e[--t];);for(var r=new Bi(++t),n=0,i=e[0],s=1,a=function(e){r[n++]=e},o=1;o<=t;++o)if(e[o]==i&&o!=t)++s;else{if(!i&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(i),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(i);s=1,i=e[o]}return{c:r.subarray(0,n),n:t}},is=function(e,t){for(var r=0,n=0;n<t.length;++n)r+=e[n]*t[n];return r},ss=function(e,t,r){var n=r.length,i=Zi(t+2);e[i]=255&n,e[i+1]=n>>8,e[i+2]=255^e[i],e[i+3]=255^e[i+1];for(var s=0;s<n;++s)e[i+s+4]=r[s];return 8*(i+4+n)},as=function(e,t,r,n,i,s,a,o,c,u,h){$i(t,h++,r),++i[256];for(var f=ts(i,15),l=f.t,y=f.l,g=ts(s,15),p=g.t,d=g.l,A=ns(l),w=A.c,m=A.n,b=ns(p),k=b.c,E=b.n,v=new Bi(19),B=0;B<w.length;++B)++v[31&w[B]];for(B=0;B<k.length;++B)++v[31&k[B]];for(var I=ts(v,7),S=I.t,K=I.l,C=19;C>4&&!S[Ci[C-1]];--C);var D,U,P,x,Q=u+5<<3,R=is(i,Oi)+is(s,Hi)+a,T=is(i,l)+is(s,p)+a+14+3*C+is(v,S)+2*v[16]+3*v[17]+7*v[18];if(c>=0&&Q<=R&&Q<=T)return ss(t,h,e.subarray(c,c+u));if($i(t,h,1+(T<R)),h+=2,T<R){D=Ni(l,y,0),U=l,P=Ni(p,d,0),x=p;var M=Ni(S,K,0);for($i(t,h,m-257),$i(t,h+5,E-1),$i(t,h+10,C-4),h+=14,B=0;B<C;++B)$i(t,h+3*B,S[Ci[B]]);h+=3*C;for(var F=[w,k],L=0;L<2;++L){var N=F[L];for(B=0;B<N.length;++B){var O=31&N[B];$i(t,h,M[O]),h+=S[O],O>15&&($i(t,h,N[B]>>5&127),h+=N[B]>>12)}}}else D=zi,U=Oi,P=_i,x=Hi;for(B=0;B<o;++B){var H=n[B];if(H>255){es(t,h,D[257+(O=H>>18&31)]),h+=U[O+257],O>7&&($i(t,h,H>>23&31),h+=Si[O]);var z=31&H;es(t,h,P[z]),h+=x[z],z>3&&(es(t,h,H>>5&8191),h+=Ki[z])}else es(t,h,D[H]),h+=U[H]}return es(t,h,D[256]),h+U[256]},os=new Ii([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),cs=new vi(0),us=function(){var e=1,t=0;return{p:function(r){for(var n=e,i=t,s=0|r.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)i+=n+=r[a];n=(65535&n)+15*(n>>16),i=(65535&i)+15*(i>>16)}e=n,t=i},d:function(){return(255&(e%=65521))<<24|(65280&e)<<8|(255&(t%=65521))<<8|t>>8}}},hs=function(e,t,r,n,i){if(!i&&(i={l:1},t.dictionary)){var s=t.dictionary.subarray(-32768),a=new vi(s.length+e.length);a.set(s),a.set(e,s.length),e=a,i.w=s.length}return function(e,t,r,n,i,s){var a=s.z||e.length,o=new vi(n+a+5*(1+Math.ceil(a/7e3))+i),c=o.subarray(n,o.length-i),u=s.l,h=7&(s.r||0);if(t){h&&(c[0]=s.r>>3);for(var f=os[t-1],l=f>>13,y=8191&f,g=(1<<r)-1,p=s.p||new Bi(32768),d=s.h||new Bi(g+1),A=Math.ceil(r/3),w=2*A,m=function(t){return(e[t]^e[t+1]<<A^e[t+2]<<w)&g},b=new Ii(25e3),k=new Bi(288),E=new Bi(32),v=0,B=0,I=s.i||0,S=0,K=s.w||0,C=0;I+2<a;++I){var D=m(I),U=32767&I,P=d[D];if(p[U]=P,d[D]=U,K<=I){var x=a-I;if((v>7e3||S>24576)&&(x>423||!u)){h=as(e,c,0,b,k,E,B,S,C,I-C,h),S=v=B=0,C=I;for(var Q=0;Q<286;++Q)k[Q]=0;for(Q=0;Q<30;++Q)E[Q]=0}var R=2,T=0,M=y,F=U-P&32767;if(x>2&&D==m(I-F))for(var L=Math.min(l,x)-1,N=Math.min(32767,I),O=Math.min(258,x);F<=N&&--M&&U!=P;){if(e[I+R]==e[I+R-F]){for(var H=0;H<O&&e[I+H]==e[I+H-F];++H);if(H>R){if(R=H,T=F,H>L)break;var z=Math.min(F,H-2),G=0;for(Q=0;Q<z;++Q){var _=I-F+Q&32767,j=_-p[_]&32767;j>G&&(G=j,P=_)}}}F+=(U=P)-(P=p[U])&32767}if(T){b[S++]=268435456|xi[R]<<18|Ti[T];var V=31&xi[R],q=31&Ti[T];B+=Si[V]+Ki[q],++k[257+V],++E[q],K=I+R,++v}else b[S++]=e[I],++k[e[I]]}}for(I=Math.max(I,K);I<a;++I)b[S++]=e[I],++k[e[I]];h=as(e,c,u,b,k,E,B,S,C,I-C,h),u||(s.r=7&h|c[h/8|0]<<3,h-=7,s.h=d,s.p=p,s.i=I,s.w=K)}else{for(I=s.w||0;I<a+u;I+=65535){var Y=I+65535;Y>=a&&(c[h/8|0]=u,Y=a),h=ss(c,h+1,e.subarray(I,Y))}s.i=a}return Ji(o,0,n+Zi(h)+i)}(e,null==t.level?6:t.level,null==t.mem?i.l?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(e.length)))):20:12+t.mem,r,n,i)},fs=function(e,t,r){for(;r;++t)e[t]=r,r>>>=8},ls=function(){function e(e,t){if("function"==typeof e&&(t=e,e={}),this.ondata=t,this.o=e||{},this.s={l:0,i:32768,w:32768,z:32768},this.b=new vi(98304),this.o.dictionary){var r=this.o.dictionary.subarray(-32768);this.b.set(r,32768-r.length),this.s.i=32768-r.length}}return e.prototype.p=function(e,t){this.ondata(hs(e,this.o,0,0,this.s),t)},e.prototype.push=function(e,t){this.ondata||Wi(5),this.s.l&&Wi(4);var r=e.length+this.s.z;if(r>this.b.length){if(r>2*this.b.length-32768){var n=new vi(-32768&r);n.set(this.b.subarray(0,this.s.z)),this.b=n}var i=this.b.length-this.s.z;this.b.set(e.subarray(0,i),this.s.z),this.s.z=this.b.length,this.p(this.b,!1),this.b.set(this.b.subarray(-32768)),this.b.set(e.subarray(i),32768),this.s.z=e.length-i+32768,this.s.i=32766,this.s.w=32768}else this.b.set(e,this.s.z),this.s.z+=e.length;this.s.l=1&t,(this.s.z>this.s.w+8191||t)&&(this.p(this.b,t||!1),this.s.w=this.s.i,this.s.i-=2)},e.prototype.flush=function(){this.ondata||Wi(5),this.s.l&&Wi(4),this.p(this.b,!1),this.s.w=this.s.i,this.s.i-=2},e}(),ys=function(){function e(e,t){"function"==typeof e&&(t=e,e={}),this.ondata=t;var r=e&&e.dictionary&&e.dictionary.subarray(-32768);this.s={i:0,b:r?r.length:0},this.o=new vi(32768),this.p=new vi(0),r&&this.o.set(r)}return e.prototype.e=function(e){if(this.ondata||Wi(5),this.d&&Wi(4),this.p.length){if(e.length){var t=new vi(this.p.length+e.length);t.set(this.p),t.set(e,this.p.length),this.p=t}}else this.p=e},e.prototype.c=function(e){this.s.i=+(this.d=e||!1);var t=this.s.b,r=function(e,t,r){var n=e.length;if(!n||t.f&&!t.l)return r||new vi(0);var i=!r,s=i||2!=t.i,a=t.i;i&&(r=new vi(3*n));var o=function(e){var t=r.length;if(e>t){var n=new vi(Math.max(2*t,e));n.set(r),r=n}},c=t.f||0,u=t.p||0,h=t.b||0,f=t.l,l=t.d,y=t.m,g=t.n,p=8*n;do{if(!f){c=qi(e,u,1);var d=qi(e,u+1,3);if(u+=3,!d){var A=e[(C=Zi(u)+4)-4]|e[C-3]<<8,w=C+A;if(w>n){a&&Wi(0);break}s&&o(h+A),r.set(e.subarray(C,w),h),t.b=h+=A,t.p=u=8*w,t.f=c;continue}if(1==d)f=Gi,l=ji,y=9,g=5;else if(2==d){var m=qi(e,u,31)+257,b=qi(e,u+10,15)+4,k=m+qi(e,u+5,31)+1;u+=14;for(var E=new vi(k),v=new vi(19),B=0;B<b;++B)v[Ci[B]]=qi(e,u+3*B,7);u+=3*b;var I=Vi(v),S=(1<<I)-1,K=Ni(v,I,1);for(B=0;B<k;){var C,D=K[qi(e,u,S)];if(u+=15&D,(C=D>>4)<16)E[B++]=C;else{var U=0,P=0;for(16==C?(P=3+qi(e,u,3),u+=2,U=E[B-1]):17==C?(P=3+qi(e,u,7),u+=3):18==C&&(P=11+qi(e,u,127),u+=7);P--;)E[B++]=U}}var x=E.subarray(0,m),Q=E.subarray(m);y=Vi(x),g=Vi(Q),f=Ni(x,y,1),l=Ni(Q,g,1)}else Wi(1);if(u>p){a&&Wi(0);break}}s&&o(h+131072);for(var R=(1<<y)-1,T=(1<<g)-1,M=u;;M=u){var F=(U=f[Yi(e,u)&R])>>4;if((u+=15&U)>p){a&&Wi(0);break}if(U||Wi(2),F<256)r[h++]=F;else{if(256==F){M=u,f=null;break}var L=F-254;if(F>264){var N=Si[B=F-257];L=qi(e,u,(1<<N)-1)+Pi[B],u+=N}var O=l[Yi(e,u)&T],H=O>>4;if(O||Wi(3),u+=15&O,Q=Ri[H],H>3&&(N=Ki[H],Q+=Yi(e,u)&(1<<N)-1,u+=N),u>p){a&&Wi(0);break}s&&o(h+131072);var z=h+L;if(h<Q){var G=0-Q,_=Math.min(Q,z);for(G+h<0&&Wi(3);h<_;++h)r[h]=(void 0)[G+h]}for(;h<z;++h)r[h]=r[h-Q]}}t.l=f,t.p=M,t.b=h,t.f=c,f&&(c=1,t.m=y,t.d=l,t.n=g)}while(!c);return h!=r.length&&i?Ji(r,0,h):r.subarray(0,h)}(this.p,this.s,this.o);this.ondata(Ji(r,t,this.s.b),this.d),this.o=Ji(r,this.s.b-32768),this.s.b=this.o.length,this.p=Ji(this.p,this.s.p/8|0),this.s.p&=7},e.prototype.push=function(e,t){this.e(e),this.c(t)},e}(),gs=function(){function e(e,t){this.c=us(),this.v=1,ls.call(this,e,t)}return e.prototype.push=function(e,t){this.c.p(e),ls.prototype.push.call(this,e,t)},e.prototype.p=function(e,t){var r=hs(e,this.o,this.v&&(this.o.dictionary?6:2),t&&4,this.s);this.v&&(function(e,t){var r=t.level,n=0==r?0:r<6?1:9==r?3:2;if(e[0]=120,e[1]=n<<6|(t.dictionary&&32),e[1]|=31-(e[0]<<8|e[1])%31,t.dictionary){var i=us();i.p(t.dictionary),fs(e,2,i.d())}}(r,this.o),this.v=0),t&&fs(r,r.length-4,this.c.d()),this.ondata(r,t)},e.prototype.flush=function(){ls.prototype.flush.call(this)},e}(),ps=function(){function e(e,t){ys.call(this,e,t),this.v=e&&e.dictionary?2:1}return e.prototype.push=function(e,t){if(ys.prototype.e.call(this,e),this.v){if(this.p.length<6&&!t)return;this.p=this.p.subarray((r=this.p,n=this.v-1,(8!=(15&r[0])||r[0]>>4>7||(r[0]<<8|r[1])%31)&&Wi(6,"invalid zlib data"),(r[1]>>5&1)==+!n&&Wi(6,"invalid zlib data: "+(32&r[1]?"need":"unexpected")+" dictionary"),2+(r[1]>>3&4))),this.v=0}var r,n;t&&(this.p.length<4&&Wi(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),ys.prototype.c.call(this,t)},e}(),ds="undefined"!=typeof TextDecoder&&new TextDecoder;try{ds.decode(cs,{stream:!0})}catch(n){}class As{static get tag(){return F.packet.literalData}constructor(e=new Date){this.format=F.literal.utf8,this.date=O.normalizeDate(e),this.text=null,this.data=null,this.filename=""}setText(e,t=F.literal.utf8){this.format=t,this.text=e,this.data=null}getText(e=!1){return(null===this.text||O.isStream(this.text))&&(this.text=O.decodeUTF8(O.nativeEOL(this.getBytes(e)))),this.text}setBytes(e,t){this.format=t,this.data=e,this.text=null}getBytes(e=!1){return null===this.data&&(this.data=O.canonicalizeEOL(O.encodeUTF8(this.text))),e?C(this.data):this.data}setFilename(e){this.filename=e}getFilename(){return this.filename}async read(e){await S(e,async e=>{const t=await e.readByte(),r=await e.readByte();this.filename=O.decodeUTF8(await e.readBytes(r)),this.date=O.readDate(await e.readBytes(4));let n=e.remainder();h(n)&&(n=await P(n)),this.setBytes(n,t)})}writeHeader(){const e=O.encodeUTF8(this.filename),t=new Uint8Array([e.length]),r=new Uint8Array([this.format]),n=O.writeDate(this.date);return O.concatUint8Array([r,t,e,n])}write(){const e=this.writeHeader(),t=this.getBytes();return O.concat([e,t])}}class ws{constructor(){this.bytes=""}read(e){return this.bytes=O.uint8ArrayToString(e.subarray(0,8)),this.bytes.length}write(){return O.stringToUint8Array(this.bytes)}toHex(){return O.uint8ArrayToHex(O.stringToUint8Array(this.bytes))}equals(e,t=!1){return t&&(e.isWildcard()||this.isWildcard())||this.bytes===e.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(e){return e.toHex()}static fromID(e){const t=new ws;return t.read(O.hexToUint8Array(e)),t}static wildcard(){const e=new ws;return e.read(new Uint8Array(8)),e}}const ms=Symbol("verified"),bs="salt@notations.openpgpjs.org",ks=new Set([F.signatureSubpacket.issuerKeyID,F.signatureSubpacket.issuerFingerprint,F.signatureSubpacket.embeddedSignature]);class Es{static get tag(){return F.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.unknownSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new ws,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[ms]=null}read(e,t=L){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new at("Support for v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4!==this.version&&5!==this.version&&6!==this.version)throw new at(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=e[r++],this.publicKeyAlgorithm=e[r++],this.hashAlgorithm=e[r++],r+=this.readSubPackets(e.subarray(r,e.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=e.subarray(0,r),r+=this.readSubPackets(e.subarray(r,e.length),!1),this.signedHashValue=e.subarray(r,r+2),r+=2,6===this.version){const t=e[r++];this.salt=e.subarray(r,r+t),r+=t}const n=e.subarray(r,e.length),{read:i,signatureParams:s}=function(e,t){let r=0;switch(e){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.rsaSign:{const e=O.readMPI(t.subarray(r));return r+=e.length+2,{read:r,signatureParams:{s:e}}}case F.publicKey.dsa:case F.publicKey.ecdsa:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const n=O.readMPI(t.subarray(r));return r+=n.length+2,{read:r,signatureParams:{r:e,s:n}}}case F.publicKey.eddsaLegacy:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const n=O.readMPI(t.subarray(r));return r+=n.length+2,{read:r,signatureParams:{r:e,s:n}}}case F.publicKey.ed25519:case F.publicKey.ed448:{const n=2*gt(e),i=O.readExactSubarray(t,r,r+n);return r+=i.length,{read:r,signatureParams:{RS:i}}}default:throw new at("Unknown signature algorithm.")}}(this.publicKeyAlgorithm,n);if(i<n.length)throw Error("Error reading MPIs");this.params=s}writeParams(){return this.params instanceof Promise?Q(async()=>Kn(this.publicKeyAlgorithm,await this.params)):Kn(this.publicKeyAlgorithm,this.params)}write(){const e=[];return e.push(this.signatureData),e.push(this.writeUnhashedSubPackets()),e.push(this.signedHashValue),6===this.version&&(e.push(new Uint8Array([this.salt.length])),e.push(this.salt)),e.push(this.writeParams()),O.concat(e)}async sign(e,t,r=new Date,n=!1,i){this.version=e.version,this.created=O.normalizeDate(r),this.issuerKeyVersion=e.version,this.issuerFingerprint=e.getFingerprintBytes(),this.issuerKeyID=e.getKeyID();const s=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(6===this.version){const e=Bs(this.hashAlgorithm);if(null===this.salt)this.salt=de(e);else if(e!==this.salt.length)throw Error("Provided salt does not have the required length")}else if(i.nonDeterministicSignaturesViaNotation){if(0!==this.rawNotations.filter(({name:e})=>e===bs).length)throw Error("Unexpected existing salt notation");{const e=de(Bs(this.hashAlgorithm));this.rawNotations.push({name:bs,value:e,humanReadable:!1,critical:!1})}}s.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=O.concat(s);const a=this.toHash(this.signatureType,t,n),o=await this.hash(this.signatureType,t,a,n);this.signedHashValue=U(K(o),0,2);const c=async()=>async function(e,t,r,n,i,s){if(!r||!n)throw Error("Missing key parameters");switch(e){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.rsaSign:{const{n:e,e:a}=r,{d:o,p:c,q:u,u:h}=n;return{s:await je(t,i,e,a,o,c,u,h,s)}}case F.publicKey.dsa:{const{g:e,p:t,q:i}=r,{x:a}=n;return async function(e,t,r,n,i,s){const a=BigInt(0);let o,c,u,h;n=se(n),i=se(i),r=se(r),s=se(s),r=ae(r,n),s=ae(s,i);const f=ae(se(t.subarray(0,ye(i))),i);for(;;){if(o=Ae(En,i),c=ae(oe(r,o,n),i),c===a)continue;const e=ae(s*c,i);if(h=ae(f+e,i),u=ae(ue(o,i)*h,i),u!==a)break}return{r:ge(c,"be",ye(n)),s:ge(u,"be",ye(n))}}(0,s,e,t,i,a)}case F.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case F.publicKey.ecdsa:{const{oid:e,Q:a}=r,{d:o}=n;return sn(e,t,i,a,o,s)}case F.publicKey.eddsaLegacy:{const{oid:e,Q:i}=r,{seed:a}=n;return un(e,t,0,i,a,s)}case F.publicKey.ed25519:case F.publicKey.ed448:{const{A:i}=r,{seed:a}=n;return ft(e,t,0,i,a,s)}default:throw Error("Unknown signature algorithm.")}}(this.publicKeyAlgorithm,this.hashAlgorithm,e.publicParams,e.privateParams,a,await P(o));O.isStream(o)?this.params=c():(this.params=await c(),this[ms]=!0)}writeHashedSubPackets(){const e=F.signatureSubpacket,t=[];let r;if(null===this.created)throw Error("Missing signature creation time");t.push(vs(e.signatureCreationTime,!0,O.writeDate(this.created))),null!==this.signatureExpirationTime&&t.push(vs(e.signatureExpirationTime,!0,O.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&t.push(vs(e.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),t.push(vs(e.trustSignature,!0,r))),null!==this.regularExpression&&t.push(vs(e.regularExpression,!0,this.regularExpression)),null!==this.revocable&&t.push(vs(e.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&t.push(vs(e.keyExpirationTime,!0,O.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredSymmetricAlgorithms)),t.push(vs(e.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=O.concat([r,this.revocationKeyFingerprint]),t.push(vs(e.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&t.push(vs(e.issuerKeyID,!1,this.issuerKeyID.write())),this.rawNotations.forEach(({name:n,value:i,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=O.encodeUTF8(n);r.push(O.writeNumber(o.length,2)),r.push(O.writeNumber(i.length,2)),r.push(o),r.push(i),r=O.concat(r),t.push(vs(e.notationData,a,r))}),null!==this.preferredHashAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredHashAlgorithms)),t.push(vs(e.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredCompressionAlgorithms)),t.push(vs(e.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.keyServerPreferences)),t.push(vs(e.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&t.push(vs(e.preferredKeyServer,!1,O.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&t.push(vs(e.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&t.push(vs(e.policyURI,!1,O.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.keyFlags)),t.push(vs(e.keyFlags,!0,r))),null!==this.signersUserID&&t.push(vs(e.signersUserID,!1,O.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=O.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),t.push(vs(e.reasonForRevocation,!0,r))),null!==this.features&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.features)),t.push(vs(e.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(O.stringToUint8Array(this.signatureTargetHash)),r=O.concat(r),t.push(vs(e.signatureTarget,!0,r))),null!==this.embeddedSignature&&t.push(vs(e.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=O.concat(r),t.push(vs(e.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredAEADAlgorithms)),t.push(vs(e.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),t.push(vs(e.preferredCipherSuites,!1,r)));const n=O.concat(t),i=O.writeNumber(n.length,6===this.version?4:2);return O.concat([i,n])}writeUnhashedSubPackets(){const e=this.unhashedSubpackets.map(({type:e,critical:t,body:r})=>vs(e,t,r)),t=O.concat(e),r=O.writeNumber(t.length,6===this.version?4:2);return O.concat([r,t])}readSubPacket(e,t=!0){let r=0;const n=!!(128&e[r]),i=127&e[r];if(r++,t||(this.unhashedSubpackets.push({type:i,critical:n,body:e.subarray(r,e.length)}),ks.has(i)))switch(i){case F.signatureSubpacket.signatureCreationTime:this.created=O.readDate(e.subarray(r,e.length));break;case F.signatureSubpacket.signatureExpirationTime:{const t=O.readNumber(e.subarray(r,e.length));this.signatureNeverExpires=0===t,this.signatureExpirationTime=t;break}case F.signatureSubpacket.exportableCertification:this.exportable=1===e[r++];break;case F.signatureSubpacket.trustSignature:this.trustLevel=e[r++],this.trustAmount=e[r++];break;case F.signatureSubpacket.regularExpression:this.regularExpression=e[r];break;case F.signatureSubpacket.revocable:this.revocable=1===e[r++];break;case F.signatureSubpacket.keyExpirationTime:{const t=O.readNumber(e.subarray(r,e.length));this.keyExpirationTime=t,this.keyNeverExpires=0===t;break}case F.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.revocationKey:this.revocationKeyClass=e[r++],this.revocationKeyAlgorithm=e[r++],this.revocationKeyFingerprint=e.subarray(r,r+20);break;case F.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(e.subarray(r,e.length));else if(t)throw Error("Unexpected Issuer Key ID subpacket");break;case F.signatureSubpacket.notationData:{const t=!!(128&e[r]);r+=4;const i=O.readNumber(e.subarray(r,r+2));r+=2;const s=O.readNumber(e.subarray(r,r+2));r+=2;const a=O.decodeUTF8(e.subarray(r,r+i)),o=e.subarray(r+i,r+i+s);this.rawNotations.push({name:a,humanReadable:t,value:o,critical:n}),t&&(this.notations[a]=O.decodeUTF8(o));break}case F.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=O.decodeUTF8(e.subarray(r,e.length));break;case F.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==e[r++];break;case F.signatureSubpacket.policyURI:this.policyURI=O.decodeUTF8(e.subarray(r,e.length));break;case F.signatureSubpacket.keyFlags:this.keyFlags=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.signersUserID:this.signersUserID=O.decodeUTF8(e.subarray(r,e.length));break;case F.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=e[r++],this.reasonForRevocationString=O.decodeUTF8(e.subarray(r,e.length));break;case F.signatureSubpacket.features:this.features=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=e[r++],this.signatureTargetHashAlgorithm=e[r++];const t=Fe(this.signatureTargetHashAlgorithm);this.signatureTargetHash=O.uint8ArrayToString(e.subarray(r,r+t));break}case F.signatureSubpacket.embeddedSignature:this.embeddedSignature=new Es,this.embeddedSignature.read(e.subarray(r,e.length));break;case F.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=e[r++],this.issuerFingerprint=e.subarray(r,e.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case F.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let t=r;t<e.length;t+=2)this.preferredCipherSuites.push([e[t],e[t+1]]);break;default:this.unknownSubpackets.push({type:i,critical:n,body:e.subarray(r,e.length)})}}readSubPackets(e,t=!0,r){const n=6===this.version?4:2,i=O.readNumber(e.subarray(0,n));let s=n;for(;s<2+i;){const n=$e(e.subarray(s,e.length));s+=n.offset,this.readSubPacket(e.subarray(s,s+n.len),t,r),s+=n.len}return s}toSign(e,t){const r=F.signature;switch(e){case r.binary:return null!==t.text?O.encodeUTF8(t.getText(!0)):t.getBytes(!0);case r.text:{const e=t.getBytes(!0);return O.canonicalizeEOL(e)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let e,n;if(t.userID)n=180,e=t.userID;else{if(!t.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");n=209,e=t.userAttribute}const i=e.write();return O.concat([this.toSign(r.key,t),new Uint8Array([n]),O.writeNumber(i.length,4),i])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return O.concat([this.toSign(r.key,t),this.toSign(r.key,{key:t.bind})]);case r.key:if(void 0===t.key)throw Error("Key packet is required for this signature.");return t.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,t);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(e,t){let r=0;return B(K(this.signatureData),e=>{r+=e.length},()=>{const n=[];return 5!==this.version||this.signatureType!==F.signature.binary&&this.signatureType!==F.signature.text||(t?n.push(new Uint8Array(6)):n.push(e.writeHeader())),n.push(new Uint8Array([this.version,255])),5===this.version&&n.push(new Uint8Array(4)),n.push(O.writeNumber(r,4)),O.concat(n)})}toHash(e,t,r=!1){const n=this.toSign(e,t);return O.concat([this.salt||new Uint8Array,n,this.signatureData,this.calculateTrailer(t,r)])}async hash(e,t,r,n=!1){if(6===this.version&&this.salt.length!==Bs(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(e,t,n)),Me(this.hashAlgorithm,r)}async verify(e,t,r,n=new Date,i=!1,s=L){if(!this.issuerKeyID.equals(e.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=t===F.signature.binary||t===F.signature.text;if(!this[ms]||a){let n,s;if(this.hashed?s=await this.hashed:(n=this.toHash(t,r,i),s=await this.hash(t,r,n)),s=await P(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");if(this.params=await this.params,this[ms]=await async function(e,t,r,n,i,s){switch(e){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.rsaSign:{const{n:e,e:a}=n;return async function(e,t,r,n,i,s){if(t&&!O.isStream(t))if(O.getWebCrypto())try{return await async function(e,t,r,n,i){const s=Ye(n,i),a=await ze.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:e}},!1,["verify"]);return ze.verify("RSASSA-PKCS1-v1_5",a,r,t)}(F.read(F.webHash,e),t,r,n,i)}catch(e){O.printDebugError(e)}else if(O.getNodeCrypto())return async function(e,t,r,n,i){const s={key:Ye(n,i),format:"jwk",type:"pkcs1"},a=Ge.createVerify(F.read(F.hash,e));a.write(t),a.end();try{return a.verify(s,r)}catch(e){return!1}}(e,t,r,n,i);return async function(e,t,r,n,i){if(r=se(r),t=se(t),n=se(n),t>=r)throw Error("Signature size cannot exceed modulus size");const s=ge(oe(t,n,r),"be",ye(r)),a=He(e,i,ye(r));return O.equalsUint8Array(s,a)}(e,r,n,i,s)}(t,i,O.leftPad(r.s,e.length),e,a,s)}case F.publicKey.dsa:{const{g:e,p:t,q:i,y:a}=n,{r:o,s:c}=r;return async function(e,t,r,n,i,s,a,o){if(t=se(t),r=se(r),s=se(s),a=se(a),i=se(i),o=se(o),t<=kn||t>=a||r<=kn||r>=a)return O.printDebug("invalid DSA Signature"),!1;const c=ae(se(n.subarray(0,ye(a))),a),u=ue(r,a);if(u===kn)return O.printDebug("invalid DSA Signature"),!1;i=ae(i,s),o=ae(o,s);const h=ae(c*u,a),f=ae(t*u,a);return ae(ae(oe(i,h,s)*oe(o,f,s),s),a)===t}(0,o,c,s,e,t,i,a)}case F.publicKey.ecdsa:{const{oid:e,Q:a}=n,o=new qr(e).payloadSize;return an(e,t,{r:O.leftPad(r.r,o),s:O.leftPad(r.s,o)},i,a,s)}case F.publicKey.eddsaLegacy:{const{oid:e,Q:i}=n,a=new qr(e).payloadSize;return hn(e,t,{r:O.leftPad(r.r,a),s:O.leftPad(r.s,a)},0,i,s)}case F.publicKey.ed25519:case F.publicKey.ed448:{const{A:i}=n;return lt(e,t,r,0,i,s)}default:throw Error("Unknown signature algorithm.")}}(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,e.publicParams,n,s),!this[ms])throw Error("Signature verification failed")}const o=O.normalizeDate(n);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+F.read(F.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[F.signature.binary,F.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+F.read(F.hash,this.hashAlgorithm).toUpperCase());if(this.unknownSubpackets.forEach(({type:e,critical:t})=>{if(t)throw Error("Unknown critical signature subpacket type "+e)}),this.rawNotations.forEach(({name:e,critical:t})=>{if(t&&s.knownNotations.indexOf(e)<0)throw Error("Unknown critical notation: "+e)}),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(e=new Date){const t=O.normalizeDate(e);return null!==t&&!(this.created<=t&&t<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function vs(e,t,r){const n=[];return n.push(et(r.length+1)),n.push(new Uint8Array([(t?128:0)|e])),n.push(r),O.concat(n)}function Bs(e){switch(e){case F.hash.sha256:return 16;case F.hash.sha384:return 24;case F.hash.sha512:return 32;case F.hash.sha224:case F.hash.sha3_256:return 16;case F.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class Is{static get tag(){return F.packet.onePassSignature}static fromSignaturePacket(e,t){const r=new Is;return r.version=6===e.version?6:3,r.signatureType=e.signatureType,r.hashAlgorithm=e.hashAlgorithm,r.publicKeyAlgorithm=e.publicKeyAlgorithm,r.issuerKeyID=e.issuerKeyID,r.salt=e.salt,r.issuerFingerprint=e.issuerFingerprint,r.flags=t?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new at(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=e[t++],this.hashAlgorithm=e[t++],this.publicKeyAlgorithm=e[t++],6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r,this.issuerFingerprint=e.subarray(t,t+32),t+=32,this.issuerKeyID=new ws,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new ws,this.issuerKeyID.read(e.subarray(t,t+8)),t+=8;return this.flags=e[t++],this}write(){const e=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?e.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):e.push(this.issuerKeyID.write()),e.push(new Uint8Array([this.flags])),O.concatUint8Array(e)}calculateTrailer(...e){return Q(async()=>Es.prototype.calculateTrailer.apply(await this.correspondingSig,e))}async verify(){const e=await this.correspondingSig;if(!e||e.constructor.tag!==F.packet.signature)throw Error("Corresponding signature packet missing");if(e.signatureType!==this.signatureType||e.hashAlgorithm!==this.hashAlgorithm||e.publicKeyAlgorithm!==this.publicKeyAlgorithm||!e.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===e.version||6===this.version&&6!==e.version||6===this.version&&!O.equalsUint8Array(e.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!O.equalsUint8Array(e.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return e.hashed=this.hashed,e.verify.apply(e,arguments)}}function Ss(e,t){if(!t[e]){let r;try{r=F.read(F.packet,e)}catch(t){throw new ot("Unknown packet type with tag: "+e)}throw Error("Packet not allowed in this context: "+r)}return new t[e]}Is.prototype.hash=Es.prototype.hash,Is.prototype.toHash=Es.prototype.toHash,Is.prototype.toSign=Es.prototype.toSign;class Ks extends Array{static async fromBinary(e,t,r=L,n=null,i=!1){const s=new Ks;return await s.read(e,t,r,n,i),s}async read(e,t,r=L,n=null,i=!1){let s;r.additionalAllowedPackets.length&&(s=O.constructAllowedPackets(r.additionalAllowedPackets),t={...t,...s}),this.stream=I(e,async(e,a)=>{const o=R(e),c=T(a);try{let a=O.isStream(e);for(;;){let u,h;if(await c.ready,await st(o,a,async e=>{try{if(e.tag===F.packet.marker||e.tag===F.packet.trust||e.tag===F.packet.padding)return;const i=Ss(e.tag,t);try{n?.recordPacket(e.tag,s)}catch(e){if(r.enforceGrammar)throw e;O.printDebugError(e)}i.packets=new Ks,i.fromStream=O.isStream(e.packet),h=i.fromStream;try{await i.read(e.packet,r)}catch(e){if(!(e instanceof at))throw O.wrapError(new ct(`Parsing ${i.constructor.name} failed`),e);throw e}await c.write(i)}catch(t){const n=t instanceof ot&&e.tag<=39,s=t instanceof at&&!(t instanceof ot)&&!r.ignoreUnsupportedPackets,a=t instanceof ct&&!r.ignoreMalformedPackets,o=it(e.tag);if(n||s||a||o||!(t instanceof ot||t instanceof at||t instanceof ct))i?u=t:await c.abort(t);else{const t=new ut(e.tag,e.packet);await c.write(t)}O.printDebugError(t)}}),h&&(a=null),u)throw await o.readToEnd(),u;const f=await o.peekBytes(2);if(!f||!f.length){try{n?.recordEnd()}catch(e){if(r.enforceGrammar)throw e;O.printDebugError(e)}return await c.ready,void await c.close()}}}catch(e){await c.abort(e)}});const a=R(this.stream);for(;;){const{done:e,value:t}=await a.read();if(e?this.stream=null:this.push(t),e||it(t.constructor.tag))break}a.releaseLock()}write(){const e=[];for(let t=0;t<this.length;t++){const r=this[t]instanceof ut?this[t].tag:this[t].constructor.tag,n=this[t].write();if(O.isStream(n)&&it(this[t].constructor.tag)){let t=[],i=0;const s=512;e.push(rt(r)),e.push(B(n,e=>{if(t.push(e),i+=e.length,i>=s){const e=Math.min(Math.log(i)/Math.LN2|0,30),r=2**e,n=O.concat([tt(e)].concat(t));return t=[n.subarray(1+r)],i=t[0].length,n.subarray(0,1+r)}},()=>O.concat([et(i)].concat(t))))}else{if(O.isStream(n)){let t=0;e.push(B(K(n),e=>{t+=e.length},()=>nt(r,t)))}else e.push(nt(r,n.length));e.push(n)}}return O.concat(e)}filterByTag(...e){const t=new Ks,r=e=>t=>e===t;for(let n=0;n<this.length;n++)e.some(r(this[n].constructor.tag))&&t.push(this[n]);return t}findPacket(e){return this.find(t=>t.constructor.tag===e)}indexOfTag(...e){const t=[],r=this,n=e=>t=>e===t;for(let i=0;i<this.length;i++)e.some(n(r[i].constructor.tag))&&t.push(i);return t}}class Cs extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,Cs),this.name="GrammarError"}}var Ds;!function(e){e[e.EmptyMessage=0]="EmptyMessage",e[e.PlaintextOrEncryptedData=1]="PlaintextOrEncryptedData",e[e.EncryptedSessionKeys=2]="EncryptedSessionKeys",e[e.StandaloneAdditionalAllowedData=3]="StandaloneAdditionalAllowedData"}(Ds||(Ds={}));class Us{constructor(){this.state=Ds.EmptyMessage,this.leadingOnePassSignatureCounter=0}recordPacket(e,t){switch(this.state){case Ds.EmptyMessage:case Ds.StandaloneAdditionalAllowedData:switch(e){case F.packet.literalData:case F.packet.compressedData:case F.packet.aeadEncryptedData:case F.packet.symEncryptedIntegrityProtectedData:case F.packet.symmetricallyEncryptedData:return void(this.state=Ds.PlaintextOrEncryptedData);case F.packet.signature:if(this.state===Ds.StandaloneAdditionalAllowedData&&--this.leadingOnePassSignatureCounter<0)throw new Cs("Trailing signature packet without OPS");return;case F.packet.onePassSignature:if(this.state===Ds.StandaloneAdditionalAllowedData)throw new Cs("OPS following StandaloneAdditionalAllowedData");return void this.leadingOnePassSignatureCounter++;case F.packet.publicKeyEncryptedSessionKey:case F.packet.symEncryptedSessionKey:return void(this.state=Ds.EncryptedSessionKeys);default:if(!t?.[e])throw new Cs(`Unexpected packet ${e} in state ${this.state}`);return void(this.state=Ds.StandaloneAdditionalAllowedData)}case Ds.PlaintextOrEncryptedData:if(e===F.packet.signature){if(--this.leadingOnePassSignatureCounter<0)throw new Cs("Trailing signature packet without OPS");return void(this.state=Ds.PlaintextOrEncryptedData)}if(!t?.[e])throw new Cs(`Unexpected packet ${e} in state ${this.state}`);return void(this.state=Ds.PlaintextOrEncryptedData);case Ds.EncryptedSessionKeys:switch(e){case F.packet.publicKeyEncryptedSessionKey:case F.packet.symEncryptedSessionKey:return void(this.state=Ds.EncryptedSessionKeys);case F.packet.symEncryptedIntegrityProtectedData:case F.packet.aeadEncryptedData:case F.packet.symmetricallyEncryptedData:return void(this.state=Ds.PlaintextOrEncryptedData);case F.packet.signature:if(--this.leadingOnePassSignatureCounter<0)throw new Cs("Trailing signature packet without OPS");return void(this.state=Ds.PlaintextOrEncryptedData);default:if(!t?.[e])throw new Cs(`Unexpected packet ${e} in state ${this.state}`);this.state=Ds.EncryptedSessionKeys}}}recordEnd(){switch(this.state){case Ds.EmptyMessage:case Ds.PlaintextOrEncryptedData:case Ds.EncryptedSessionKeys:case Ds.StandaloneAdditionalAllowedData:if(this.leadingOnePassSignatureCounter>0)throw new Cs("Missing trailing signature packets")}}}const Ps=O.constructAllowedPackets([As,Is,Es]);class xs{static get tag(){return F.packet.compressedData}constructor(e=L){this.packets=null,this.algorithm=e.preferredCompressionAlgorithm,this.compressed=null}async read(e,t=L){await S(e,async e=>{this.algorithm=await e.readByte(),this.compressed=e.remainder(),await this.decompress(t)})}write(){return null===this.compressed&&this.compress(),O.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(e=L){const t=F.read(F.compression,this.algorithm),r=Fs[t];if(!r)throw Error(t+" decompression not supported");this.packets=await Ks.fromBinary(await r(this.compressed),Ps,e,new Us)}compress(){const e=F.read(F.compression,this.algorithm),t=Ms[e];if(!t)throw Error(e+" compression not supported");this.compressed=t(this.packets.write())}}function Qs(e,t){return r=>{if(!O.isStream(r)||h(r))return Q(()=>P(r).then(e=>new Promise((r,n)=>{const i=new t,s=[];i.ondata=(e,t)=>{s.push(e),t&&r(O.concatUint8Array(s))};try{i.push(e,!0)}catch(e){n(e)}})));if(e)try{const t=e();return r.pipeThrough(t)}catch(e){if("TypeError"!==e.name)throw e}const n=r.getReader(),i=new t;return new ReadableStream({async start(e){for(i.ondata=async(t,r)=>{e.enqueue(t),r&&e.close()};;){const{done:e,value:t}=await n.read();if(e)return void i.push(new Uint8Array,!0);t.length&&i.push(t)}}})}}function Rs(){return async function(e){const{decode:t}=await Promise.resolve().then(function(){return Ay});return Q(async()=>t(await P(e)))}}const Ts=e=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(e)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(e))}),Ms={zip:Qs(Ts("deflate-raw").compressor,ls),zlib:Qs(Ts("deflate").compressor,gs)},Fs={uncompressed:e=>e,zip:Qs(Ts("deflate-raw").decompressor,ys),zlib:Qs(Ts("deflate").decompressor,ps),bzip2:Rs()},Ls=O.constructAllowedPackets([As,xs,Is,Es]);class Ns{static get tag(){return F.packet.symEncryptedIntegrityProtectedData}static fromObject({version:e,aeadAlgorithm:t}){if(1!==e&&2!==e)throw Error("Unsupported SEIPD version");const r=new Ns;return r.version=e,2===e&&(r.aeadAlgorithm=t),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(e){await S(e,async e=>{if(this.version=await e.readByte(),1!==this.version&&2!==this.version)throw new at(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte(),this.salt=await e.readBytes(32)),this.encrypted=e.remainder()})}write(){return 2===this.version?O.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):O.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(e,t,r=L){const{blockSize:n,keySize:i}=Ir(e);if(t.length!==i)throw Error("Unexpected session key size");let s=this.packets.write();if(h(s)&&(s=await P(s)),2===this.version)this.cipherAlgorithm=e,this.salt=de(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await Os(this,"encrypt",t,s);else{const r=await Tn(e),i=new Uint8Array([211,20]),a=O.concat([r,s,i]),o=await Me(F.hash.sha1,C(a)),c=O.concat([a,o]);this.encrypted=await Mn(e,t,c,new Uint8Array(n))}return!0}async decrypt(e,t,r=L){if(t.length!==Ir(e).keySize)throw Error("Unexpected session key size");let n,i=K(this.encrypted);h(i)&&(i=await P(i));let s=!1;if(2===this.version){if(this.cipherAlgorithm!==e)throw Error("Unexpected session key algorithm");n=await Os(this,"decrypt",t,i)}else{const{blockSize:a}=Ir(e),o=await Fn(e,t,i,new Uint8Array(a)),c=U(C(o),-20),u=U(o,0,-20),h=Promise.all([P(await Me(F.hash.sha1,C(u))),P(c)]).then(([e,t])=>{if(!O.equalsUint8Array(e,t))throw Error("Modification detected.");return new Uint8Array}),f=U(u,a+2);n=U(f,0,-2),n=b([n,Q(()=>h)]),O.isStream(i)&&r.allowUnauthenticatedStream?s=!0:n=await P(n)}return this.packets=await Ks.fromBinary(n,Ls,r,new Us,s),!0}}async function Os(e,t,r,n){const i=e instanceof Ns&&2===e.version,s=!i&&e.constructor.tag===F.packet.aeadEncryptedData;if(!i&&!s)throw Error("Unexpected packet type");const a=gi(e.aeadAlgorithm,s),o="decrypt"===t?a.tagLength:0,c="encrypt"===t?a.tagLength:0,u=2**(e.chunkSizeByte+6)+o,h=s?8:0,f=new ArrayBuffer(13+h),l=new Uint8Array(f,0,5+h),y=new Uint8Array(f),g=new DataView(f),p=new Uint8Array(f,5,8);l.set([192|e.constructor.tag,e.version,e.cipherAlgorithm,e.aeadAlgorithm,e.chunkSizeByte],0);let d,A,w=0,m=Promise.resolve(),b=0,E=0;if(i){const{keySize:t}=Ir(e.cipherAlgorithm),{ivLength:n}=a,i=new Uint8Array(f,0,5),s=await Dr(F.hash.sha256,r,e.salt,i,t+n);r=s.subarray(0,t),d=s.subarray(t),d.fill(0,d.length-8),A=new DataView(d.buffer,d.byteOffset,d.byteLength)}else d=e.iv;const v=await a(e.cipherAlgorithm,r);return I(n,async(r,n)=>{if("array"!==O.isStream(r)){const t=new TransformStream({},{highWaterMark:O.getHardwareConcurrency()*2**(e.chunkSizeByte+6),size:e=>e.length});k(t.readable,n),n=t.writable}const s=R(r),a=T(n);try{for(;;){let e=await s.readBytes(u+o)||new Uint8Array;const r=e.subarray(e.length-o);let n,f,k;if(e=e.subarray(0,e.length-o),i)k=d;else{k=d.slice();for(let e=0;e<8;e++)k[d.length-8+e]^=p[e]}if(!w||e.length?(s.unshift(r),n=v[t](e,k,l),n.catch(()=>{}),E+=e.length-o+c):(g.setInt32(5+h+4,b),n=v[t](r,k,y),n.catch(()=>{}),E+=c,f=!0),b+=e.length-o,m=m.then(()=>n).then(async e=>{await a.ready,await a.write(e),E-=e.length}).catch(e=>a.abort(e)),(f||E>a.desiredSize)&&await m,f){await a.close();break}i?A.setInt32(d.length-4,++w):g.setInt32(9,++w)}}catch(e){await a.ready.catch(()=>{}),await a.abort(e)}})}const Hs=O.constructAllowedPackets([As,xs,Is,Es]);class zs{static get tag(){return F.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=F.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(e){await S(e,async e=>{const t=await e.readByte();if(1!==t)throw new at(`Version ${t} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte();const r=gi(this.aeadAlgorithm,!0);this.iv=await e.readBytes(r.ivLength),this.encrypted=e.remainder()})}write(){return O.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(e,t,r=L){this.packets=await Ks.fromBinary(await Os(this,"decrypt",t,K(this.encrypted)),Hs,r,new Us)}async encrypt(e,t,r=L){this.cipherAlgorithm=e;const{ivLength:n}=gi(this.aeadAlgorithm,!0);this.iv=de(n),this.chunkSizeByte=r.aeadChunkSizeByte;const i=this.packets.write();this.encrypted=await Os(this,"encrypt",t,i)}}class Gs{static get tag(){return F.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new ws,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:e,encryptionKeyPacket:t,anonymousRecipient:r,sessionKey:n,sessionKeyAlgorithm:i}){const s=new Gs;if(3!==e&&6!==e)throw Error("Unsupported PKESK version");return s.version=e,6===e&&(s.publicKeyVersion=r?null:t.version,s.publicKeyFingerprint=r?null:t.getFingerprintBytes()),s.publicKeyID=r?ws.wildcard():t.getKeyID(),s.publicKeyAlgorithm=t.algorithm,s.sessionKey=n,s.sessionKeyAlgorithm=i,s}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new at(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=e[t++];if(r){this.publicKeyVersion=e[t++];const n=r-1;this.publicKeyFingerprint=e.subarray(t,t+n),t+=n,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=ws.wildcard()}else t+=this.publicKeyID.read(e.subarray(t,t+8));if(this.publicKeyAlgorithm=e[t++],this.encrypted=function(e,t){let r=0;switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:return{c:O.readMPI(t.subarray(r))};case F.publicKey.elgamal:{const e=O.readMPI(t.subarray(r));return r+=e.length+2,{c1:e,c2:O.readMPI(t.subarray(r))}}case F.publicKey.ecdh:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const n=new vn;return n.read(t.subarray(r)),{V:e,C:n}}case F.publicKey.x25519:case F.publicKey.x448:{const n=Un(e),i=O.readExactSubarray(t,r,r+n);r+=i.length;const s=new In;return s.read(t.subarray(r)),{ephemeralPublicKey:i,C:s}}default:throw new at("Unknown public key encryption algorithm.")}}(this.publicKeyAlgorithm,e.subarray(t)),this.publicKeyAlgorithm===F.publicKey.x25519||this.publicKeyAlgorithm===F.publicKey.x448)if(3===this.version)this.sessionKeyAlgorithm=F.write(F.symmetric,this.encrypted.C.algorithm);else if(null!==this.encrypted.C.algorithm)throw Error("Unexpected cleartext symmetric algorithm")}write(){const e=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(e.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),e.push(this.publicKeyFingerprint)):e.push(new Uint8Array([0])):e.push(this.publicKeyID.write()),e.push(new Uint8Array([this.publicKeyAlgorithm]),Kn(this.publicKeyAlgorithm,this.encrypted)),O.concatUint8Array(e)}async encrypt(e){const t=F.write(F.publicKey,this.publicKeyAlgorithm),r=3===this.version?this.sessionKeyAlgorithm:null,n=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),i=_s(this.version,t,r,this.sessionKey);this.encrypted=await async function(e,t,r,n,i){switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:{const{n:e,e:t}=r;return{c:await Ve(n,e,t)}}case F.publicKey.elgamal:{const{p:e,g:t,y:i}=r;return async function(e,t,r,n){t=se(t),r=se(r),n=se(n);const i=se(Ne(e,ye(t))),s=Ae(Je,t-Je);return{c1:ge(oe(r,s,t)),c2:ge(ae(oe(n,s,t)*i,t))}}(n,e,t,i)}case F.publicKey.ecdh:{const{oid:e,Q:t,kdfParams:s}=r,{publicKey:a,wrappedKey:o}=await dn(e,s,n,t,i);return{V:a,C:new vn(o)}}case F.publicKey.x25519:case F.publicKey.x448:{if(t&&!O.isAES(t))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:i}=r,{ephemeralPublicKey:s,wrappedKey:a}=await Qr(e,n,i);return{ephemeralPublicKey:s,C:In.fromObject({algorithm:t,wrappedKey:a})}}default:return[]}}(t,r,e.publicParams,i,n)}async decrypt(e,t){if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Decryption error");const r=t?_s(this.version,this.publicKeyAlgorithm,t.sessionKeyAlgorithm,t.sessionKey):null,n=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),i=await async function(e,t,r,n,i,s){switch(e){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:{const{c:e}=n,{n:i,e:a}=t,{d:o,p:c,q:u,u:h}=r;return async function(e,t,r,n,i,s,a,o){if(O.getNodeCrypto()&&!o)try{return await async function(e,t,r,n,i,s,a){const o={key:await qe(t,r,n,i,s,a),format:"jwk",type:"pkcs1",padding:Ge.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(Ge.privateDecrypt(o,e))}catch(e){throw Error("Decryption error")}}(e,t,r,n,i,s,a)}catch(e){O.printDebugError(e)}return async function(e,t,r,n,i,s,a,o){if(e=se(e),t=se(t),r=se(r),n=se(n),i=se(i),s=se(s),a=se(a),e>=t)throw Error("Data too large.");const c=ae(n,s-_e),u=ae(n,i-_e),h=Ae(BigInt(2),t),f=oe(ue(h,t),r,t),l=oe(e=ae(e*f,t),u,i);let y=ae(a*(oe(e,c,s)-l),s)*i+l;return y=ae(y*h,t),Oe(ge(y,"be",ye(t)),o)}(e,t,r,n,i,s,a,o)}(e,i,a,o,c,u,h,s)}case F.publicKey.elgamal:{const{c1:e,c2:i}=n;return async function(e,t,r,n,i){return e=se(e),t=se(t),r=se(r),Oe(ge(ae(ue(oe(e,n=se(n),r),r)*t,r),"be",ye(r)),i)}(e,i,t.p,r.x,s)}case F.publicKey.ecdh:{const{oid:e,Q:s,kdfParams:a}=t,{d:o}=r,{V:c,C:u}=n;return An(e,a,c,u.data,s,o,i)}case F.publicKey.x25519:case F.publicKey.x448:{const{A:i}=t,{k:s}=r,{ephemeralPublicKey:a,C:o}=n;if(null!==o.algorithm&&!O.isAES(o.algorithm))throw Error("AES session key expected");return Rr(e,a,o.wrappedKey,i,s)}default:throw Error("Unknown public key encryption algorithm.")}}(this.publicKeyAlgorithm,e.publicParams,e.privateParams,this.encrypted,n,r),{sessionKey:s,sessionKeyAlgorithm:a}=function(e,t,r,n){switch(t){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.elgamal:case F.publicKey.ecdh:{const t=r.subarray(0,r.length-2),i=r.subarray(r.length-2),s=O.writeChecksum(t.subarray(t.length%8)),a=s[0]===i[0]&s[1]===i[1],o=6===e?{sessionKeyAlgorithm:null,sessionKey:t}:{sessionKeyAlgorithm:t[0],sessionKey:t.subarray(1)};if(n){const t=a&o.sessionKeyAlgorithm===n.sessionKeyAlgorithm&o.sessionKey.length===n.sessionKey.length;return{sessionKey:O.selectUint8Array(t,o.sessionKey,n.sessionKey),sessionKeyAlgorithm:6===e?null:O.selectUint8(t,o.sessionKeyAlgorithm,n.sessionKeyAlgorithm)}}if(a&&(6===e||F.read(F.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case F.publicKey.x25519:case F.publicKey.x448:return{sessionKeyAlgorithm:null,sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,i,t);if(3===this.version){const e=this.publicKeyAlgorithm!==F.publicKey.x25519&&this.publicKeyAlgorithm!==F.publicKey.x448;if(this.sessionKeyAlgorithm=e?a:this.sessionKeyAlgorithm,s.length!==Ir(this.sessionKeyAlgorithm).keySize)throw Error("Unexpected session key size")}this.sessionKey=s}}function _s(e,t,r,n){switch(t){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.elgamal:case F.publicKey.ecdh:return O.concatUint8Array([new Uint8Array(6===e?[]:[r]),n,O.writeChecksum(n.subarray(n.length%8))]);case F.publicKey.x25519:case F.publicKey.x448:return n;default:throw Error("Unsupported public key algorithm")}}class js{static get tag(){return F.packet.symEncryptedSessionKey}constructor(e=L){this.version=e.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=null,this.aeadAlgorithm=F.write(F.aead,e.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new at(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&t++;const r=e[t++];this.version>=5&&(this.aeadAlgorithm=e[t++],6===this.version&&t++);const n=e[t++];if(this.s2k=ki(n),t+=this.s2k.read(e.subarray(t,e.length)),this.version>=5){const r=gi(this.aeadAlgorithm,!0);this.iv=e.subarray(t,t+=r.ivLength)}this.version>=5||t<e.length?(this.encrypted=e.subarray(t,e.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const e=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let t;const r=this.s2k.write();if(6===this.version){const n=r.length,i=3+n+this.iv.length;t=O.concatUint8Array([new Uint8Array([this.version,i,e,this.aeadAlgorithm,n]),r,this.iv,this.encrypted])}else 5===this.version?t=O.concatUint8Array([new Uint8Array([this.version,e,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(t=O.concatUint8Array([new Uint8Array([this.version,e]),r]),null!==this.encrypted&&(t=O.concatUint8Array([t,this.encrypted])));return t}async decrypt(e){const t=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:n}=Ir(t),i=await this.s2k.produceKey(e,n);if(this.version>=5){const e=gi(this.aeadAlgorithm,!0),r=new Uint8Array([192|js.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await Dr(F.hash.sha256,i,new Uint8Array,r,n):i,a=await e(t,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const e=await Fn(t,i,this.encrypted,new Uint8Array(r));if(this.sessionKeyAlgorithm=F.write(F.symmetric,e[0]),this.sessionKey=e.subarray(1,e.length),this.sessionKey.length!==Ir(this.sessionKeyAlgorithm).keySize)throw Error("Unexpected session key size")}else this.sessionKey=i}async encrypt(e,t=L){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=Ei(t),this.s2k.generateSalt();const{blockSize:n,keySize:i}=Ir(r),s=await this.s2k.produceKey(e,i);if(null===this.sessionKey&&(this.sessionKey=Cn(this.sessionKeyAlgorithm)),this.version>=5){const e=gi(this.aeadAlgorithm);this.iv=de(e.ivLength);const t=new Uint8Array([192|js.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),n=6===this.version?await Dr(F.hash.sha256,s,new Uint8Array,t,i):s,a=await e(r,n);this.encrypted=await a.encrypt(this.sessionKey,this.iv,t)}else{const e=O.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await Mn(r,s,e,new Uint8Array(n))}}}class Vs{static get tag(){return F.packet.publicKey}constructor(e=new Date,t=L){this.version=t.v6Keys?6:4,this.created=O.normalizeDate(e),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(e){const t=new Vs,{version:r,created:n,algorithm:i,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=n,t.algorithm=i,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}async read(e,t=L){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new at("Support for parsing v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4===this.version||5===this.version||6===this.version){this.created=O.readDate(e.subarray(r,r+4)),r+=4,this.algorithm=e[r++],this.version>=5&&(r+=4);const{read:t,publicParams:n}=function(e,t){let r=0;switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const n=O.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{n:e,e:n}}}case F.publicKey.dsa:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const n=O.readMPI(t.subarray(r));r+=n.length+2;const i=O.readMPI(t.subarray(r));r+=i.length+2;const s=O.readMPI(t.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:e,q:n,g:i,y:s}}}case F.publicKey.elgamal:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const n=O.readMPI(t.subarray(r));r+=n.length+2;const i=O.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{p:e,g:n,y:i}}}case F.publicKey.ecdsa:{const e=new We;r+=e.read(t),Dn(e);const n=O.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{oid:e,Q:n}}}case F.publicKey.eddsaLegacy:{const e=new We;if(r+=e.read(t),Dn(e),e.getName()!==F.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let n=O.readMPI(t.subarray(r));return r+=n.length+2,n=O.leftPad(n,33),{read:r,publicParams:{oid:e,Q:n}}}case F.publicKey.ecdh:{const e=new We;r+=e.read(t),Dn(e);const n=O.readMPI(t.subarray(r));r+=n.length+2;const i=new Bn;return r+=i.read(t.subarray(r)),{read:r,publicParams:{oid:e,Q:n,kdfParams:i}}}case F.publicKey.ed25519:case F.publicKey.ed448:case F.publicKey.x25519:case F.publicKey.x448:{const n=O.readExactSubarray(t,r,r+Un(e));return r+=n.length,{read:r,publicParams:{A:n}}}default:throw new at("Unknown public key encryption algorithm.")}}(this.algorithm,e.subarray(r));if(6===this.version&&n.oid&&(n.oid.getName()===F.curve.curve25519Legacy||n.oid.getName()===F.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");return this.publicParams=n,r+=t,await this.computeFingerprintAndKeyID(),r}throw new at(`Version ${this.version} of the key packet is unsupported.`)}write(){const e=[];e.push(new Uint8Array([this.version])),e.push(O.writeDate(this.created)),e.push(new Uint8Array([this.algorithm]));const t=Kn(this.algorithm,this.publicParams);return this.version>=5&&e.push(O.writeNumber(t.length,4)),e.push(t),O.concatUint8Array(e)}writeForHash(e){const t=this.writePublicKey(),r=149+e,n=e>=5?4:2;return O.concatUint8Array([new Uint8Array([r]),O.writeNumber(t.length,n),t])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new ws,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const e=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await Me(F.hash.sha256,e);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await Me(F.hash.sha1,e)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return O.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(e){return this.version===e.version&&O.equalsUint8Array(this.writePublicKey(),e.writePublicKey())}getAlgorithmInfo(){const e={};e.algorithm=F.read(F.publicKey,this.algorithm);const t=this.publicParams.n||this.publicParams.p;return t?e.bits=O.uint8ArrayBitLength(t):this.publicParams.oid&&(e.curve=this.publicParams.oid.getName()),e}}Vs.prototype.readPublicKey=Vs.prototype.read,Vs.prototype.writePublicKey=Vs.prototype.write;const qs=O.constructAllowedPackets([As,xs,Is,Es]);class Ys{static get tag(){return F.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(e){this.encrypted=e}write(){return this.encrypted}async decrypt(e,t,r=L){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:n}=Ir(e),i=await P(K(this.encrypted)),s=await Fn(e,t,i.subarray(n+2),i.subarray(2,n+2));this.packets=await Ks.fromBinary(s,qs,r)}async encrypt(e,t,r=L){const n=this.packets.write(),{blockSize:i}=Ir(e),s=await Tn(e),a=await Mn(e,t,s,new Uint8Array(i)),o=await Mn(e,t,n,a.subarray(2));this.encrypted=O.concat([a,o])}}class Zs{static get tag(){return F.packet.marker}read(e){return 80===e[0]&&71===e[1]&&80===e[2]}write(){return new Uint8Array([80,71,80])}}class Js extends Vs{static get tag(){return F.packet.publicSubkey}constructor(e,t){super(e,t)}static fromSecretSubkeyPacket(e){const t=new Js,{version:r,created:n,algorithm:i,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=n,t.algorithm=i,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}}class Xs{static get tag(){return F.packet.userAttribute}constructor(){this.attributes=[]}read(e){let t=0;for(;t<e.length;){const r=$e(e.subarray(t,e.length));t+=r.offset,this.attributes.push(O.uint8ArrayToString(e.subarray(t,t+r.len))),t+=r.len}}write(){const e=[];for(let t=0;t<this.attributes.length;t++)e.push(et(this.attributes[t].length)),e.push(O.stringToUint8Array(this.attributes[t]));return O.concatUint8Array(e)}equals(e){return!!(e&&e instanceof Xs)&&this.attributes.every(function(t,r){return t===e.attributes[r]})}}class Ws extends Vs{static get tag(){return F.packet.secretKey}constructor(e=new Date,t=L){super(e,t),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(e,t=L){let r=await this.readPublicKey(e,t);const n=r;this.s2kUsage=e[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=e[r++],253===this.s2kUsage&&(this.aead=e[r++]),6===this.version&&r++;const t=e[r++];if(this.s2k=ki(t),r+=this.s2k.read(e.subarray(r,e.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&t.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=e.subarray(r,r+Ir(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=e.subarray(r,r+gi(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(t){if(!this.s2kUsage)throw t;this.unparseableKeyMaterial=e.subarray(n),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=e.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let t;if(6===this.version)t=this.keyMaterial;else if(t=this.keyMaterial.subarray(0,-2),!O.equalsUint8Array(O.writeChecksum(t),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:e,privateParams:r}=Sn(this.algorithm,t,this.publicParams);if(e<t.length)throw Error("Error reading MPIs");this.privateParams=r}catch(e){if(e instanceof at)throw e;throw Error("Error reading MPIs")}}}write(){const e=this.writePublicKey();if(this.unparseableKeyMaterial)return O.concatUint8Array([e,this.unparseableKeyMaterial]);const t=[e];t.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const e=this.s2k.write();6===this.version&&r.push(e.length),r.push(...e)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&t.push(new Uint8Array([r.length])),t.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=Kn(this.algorithm,this.privateParams)),5===this.version&&t.push(O.writeNumber(this.keyMaterial.length,4)),t.push(this.keyMaterial),this.s2kUsage||6===this.version||t.push(O.writeChecksum(this.keyMaterial))),O.concatUint8Array(t)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(e=L){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=ki(F.s2k.gnu,e),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=F.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(e,t=L){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!e)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=Ei(t),this.s2k.generateSalt();const r=Kn(this.algorithm,this.privateParams);this.symmetric=F.symmetric.aes256;const{blockSize:n}=Ir(this.symmetric);if(t.aeadProtect){this.s2kUsage=253,this.aead=t.preferredAEADAlgorithm;const i=gi(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const s=rt(this.constructor.tag),a=await $s(this.version,this.s2k,e,this.symmetric,this.aead,s,this.isLegacyAEAD),o=await i(this.symmetric,a);this.iv=this.isLegacyAEAD?de(n):de(i.ivLength);const c=this.isLegacyAEAD?new Uint8Array:O.concatUint8Array([s,this.writePublicKey()]);this.keyMaterial=await o.encrypt(r,this.iv.subarray(0,i.ivLength),c)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const t=await $s(this.version,this.s2k,e,this.symmetric);this.iv=de(n),this.keyMaterial=await Mn(this.symmetric,t,O.concatUint8Array([r,await Me(F.hash.sha1,r)]),this.iv)}}async decrypt(e){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let t;const r=rt(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let n;if(t=await $s(this.version,this.s2k,e,this.symmetric,this.aead,r,this.isLegacyAEAD),253===this.s2kUsage){const i=gi(this.aead,!0),s=await i(this.symmetric,t);try{const e=this.isLegacyAEAD?new Uint8Array:O.concatUint8Array([r,this.writePublicKey()]);n=await s.decrypt(this.keyMaterial,this.iv.subarray(0,i.ivLength),e)}catch(e){if("Authentication tag mismatch"===e.message)throw Error("Incorrect key passphrase: "+e.message);throw e}}else{const e=await Fn(this.symmetric,t,this.keyMaterial,this.iv);n=e.subarray(0,-20);const r=await Me(F.hash.sha1,n);if(!O.equalsUint8Array(r,e.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:e}=Sn(this.algorithm,n,this.publicParams);this.privateParams=e}catch(e){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let e;try{e=await async function(e,t,r){if(!t||!r)throw Error("Missing key parameters");switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:{const{n:e,e:n}=t,{d:i,p:s,q:a,u:o}=r;return async function(e,t,r,n,i,s){if(e=se(e),(n=se(n))*(i=se(i))!==e)return!1;const a=BigInt(2);if(ae(n*(s=se(s)),i)!==BigInt(1))return!1;t=se(t),r=se(r);const o=Ae(a,a<<BigInt(Math.floor(le(e)/3))),c=o*r*t;return!(ae(c,n-_e)!==o||ae(c,i-_e)!==o)}(e,n,i,s,a,o)}case F.publicKey.dsa:{const{p:e,q:n,g:i,y:s}=t,{x:a}=r;return async function(e,t,r,n,i){if(e=se(e),t=se(t),r=se(r),n=se(n),r<=En||r>=e)return!1;if(ae(e-En,t)!==kn)return!1;if(oe(r,t,e)!==En)return!1;const s=BigInt(le(t));if(s<BigInt(150)||!be(t,null,32))return!1;i=se(i);const a=BigInt(2);return n===oe(r,t*Ae(a<<s-En,a<<s)+i,e)}(e,n,i,s,a)}case F.publicKey.elgamal:{const{p:e,g:n,y:i}=t,{x:s}=r;return async function(e,t,r,n){if(e=se(e),t=se(t),r=se(r),t<=Je||t>=e)return!1;const i=BigInt(le(e));if(i<BigInt(1023))return!1;if(oe(t,e-Je,e)!==Je)return!1;let s=t,a=BigInt(1);const o=BigInt(2),c=o<<BigInt(17);for(;a<c;){if(s=ae(s*t,e),s===Je)return!1;a++}n=se(n);const u=Ae(o<<i-Je,o<<i);return r===oe(t,(e-Je)*u+n,e)}(e,n,i,s)}case F.publicKey.ecdsa:case F.publicKey.ecdh:{const n=bn[F.read(F.publicKey,e)],{oid:i,Q:s}=t,{d:a}=r;return n.validateParams(i,s,a)}case F.publicKey.eddsaLegacy:{const{Q:e,oid:n}=t,{seed:i}=r;return fn(n,e,i)}case F.publicKey.ed25519:case F.publicKey.ed448:{const{A:n}=t,{seed:i}=r;return yt(e,n,i)}case F.publicKey.x25519:case F.publicKey.x448:{const{A:n}=t,{k:i}=r;return xr(e,n,i)}default:throw Error("Unknown public key algorithm.")}}(this.algorithm,this.publicParams,this.privateParams)}catch(t){e=!1}if(!e)throw Error("Key is invalid")}async generate(e,t){if(6===this.version&&(this.algorithm===F.publicKey.ecdh&&t===F.curve.curve25519Legacy||this.algorithm===F.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${t}. Generate a key of type 'curve25519' instead`);const{privateParams:r,publicParams:n}=await function(e,t,r){switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:return async function(e,t){if(t=BigInt(t),O.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:ge(t),hash:{name:"SHA-1"}},n=await ze.generateKey(r,!0,["sign","verify"]);return Ze(await ze.exportKey("jwk",n.privateKey),t)}if(O.getNodeCrypto()){const r={modulusLength:e,publicExponent:he(t),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},n=await new Promise((e,t)=>{Ge.generateKeyPair("rsa",r,(r,n,i)=>{r?t(r):e(i)})});return Ze(n,t)}let r,n,i;do{n=me(e-(e>>1),t,40),r=me(e>>1,t,40),i=r*n}while(le(i)!==e);const s=(r-_e)*(n-_e);return n<r&&([r,n]=[n,r]),{n:ge(i),e:ge(t),d:ge(ue(t,s)),p:ge(r),q:ge(n),u:ge(ue(r,n))}}(t,65537).then(({n:e,e:t,d:r,p:n,q:i,u:s})=>({privateParams:{d:r,p:n,q:i,u:s},publicParams:{n:e,e:t}}));case F.publicKey.ecdsa:return Yr(r).then(({oid:e,Q:t,secret:r})=>({privateParams:{d:r},publicParams:{oid:new We(e),Q:t}}));case F.publicKey.eddsaLegacy:return Yr(r).then(({oid:e,Q:t,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new We(e),Q:t}}));case F.publicKey.ecdh:return Yr(r).then(({oid:e,Q:t,secret:r,hash:n,cipher:i})=>({privateParams:{d:r},publicParams:{oid:new We(e),Q:t,kdfParams:new Bn({hash:n,cipher:i})}}));case F.publicKey.ed25519:case F.publicKey.ed448:return ht(e).then(({A:e,seed:t})=>({privateParams:{seed:t},publicParams:{A:e}}));case F.publicKey.x25519:case F.publicKey.x448:return Pr(e).then(({A:e,k:t})=>({privateParams:{k:t},publicParams:{A:e}}));case F.publicKey.dsa:case F.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}}(this.algorithm,e,t);this.privateParams=r,this.publicParams=n,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach(e=>{this.privateParams[e].fill(0),delete this.privateParams[e]}),this.privateParams=null,this.isEncrypted=!0)}}async function $s(e,t,r,n,i,s,a){if("argon2"===t.type&&!i)throw Error("Using Argon2 S2K without AEAD is not allowed");if("simple"===t.type&&6===e)throw Error("Using Simple S2K with version 6 keys is not allowed");const{keySize:o}=Ir(n),c=await t.produceKey(r,o);if(!i||5===e||a)return c;const u=O.concatUint8Array([s,new Uint8Array([e,n,i])]);return Dr(F.hash.sha256,c,new Uint8Array,u,o)}class ea{static get tag(){return F.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(e){if(O.isString(e)||e.name&&!O.isString(e.name)||e.email&&!O.isEmailAddress(e.email)||e.comment&&!O.isString(e.comment))throw Error("Invalid user ID format");const t=new ea;Object.assign(t,e);const r=[];return t.name&&r.push(t.name),t.comment&&r.push(`(${t.comment})`),t.email&&r.push(`<${t.email}>`),t.userID=r.join(" "),t}read(e,t=L){const r=O.decodeUTF8(e);if(r.length>t.maxUserIDLength)throw Error("User ID string is too long");const n=e=>/^[^\s@]+@[^\s@]+$/.test(e),i=r.indexOf("<"),s=r.lastIndexOf(">");if(-1!==i&&-1!==s&&s>i){const e=r.substring(i+1,s);if(n(e)){this.email=e;const t=r.substring(0,i).trim(),n=t.indexOf("("),s=t.lastIndexOf(")");-1!==n&&-1!==s&&s>n?(this.comment=t.substring(n+1,s).trim(),this.name=t.substring(0,n).trim()):(this.name=t,this.comment="")}}else n(r.trim())&&(this.email=r.trim(),this.name="",this.comment="");this.userID=r}write(){return O.encodeUTF8(this.userID)}equals(e){return e&&e.userID===this.userID}}class ta extends Ws{static get tag(){return F.packet.secretSubkey}constructor(e=new Date,t=L){super(e,t)}}class ra{static get tag(){return F.packet.trust}read(){throw new at("Trust packets are not supported")}write(){throw new at("Trust packets are not supported")}}class na{static get tag(){return F.packet.padding}constructor(){this.padding=null}read(e){}write(){return this.padding}async createPadding(e){this.padding=await de(e)}}const ia=O.constructAllowedPackets([Es]);class sa{constructor(e){this.packets=e||new Ks}write(){return this.packets.write()}armor(e=L){const t=this.packets.some(e=>e.constructor.tag===Es.tag&&6!==e.version);return re(F.armor.signature,this.write(),void 0,void 0,void 0,t,e)}getSigningKeyIDs(){return this.packets.map(e=>e.issuerKeyID)}}async function aa({armoredSignature:e,binarySignature:t,config:r,...n}){r={...L,...r};let i=e||t;if(!i)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(e&&!O.isString(e))throw Error("readSignature: options.armoredSignature must be a string");if(t&&!O.isUint8Array(t))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:e,data:t}=await te(i);if(e!==F.armor.signature)throw Error("Armored text not of type signature");i=t}const a=await Ks.fromBinary(i,ia,r);return new sa(a)}async function oa(e,t){const r=new ta(e.date,t);return r.packets=null,r.algorithm=F.write(F.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve),await r.computeFingerprintAndKeyID(),r}async function ca(e,t){const r=new Ws(e.date,t);return r.packets=null,r.algorithm=F.write(F.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.config),await r.computeFingerprintAndKeyID(),r}async function ua(e,t,r,n,i=new Date,s){let a,o;for(let c=e.length-1;c>=0;c--)try{(!a||e[c].created>=a.created)&&(await e[c].verify(t,r,n,i,void 0,s),a=e[c])}catch(e){o=e}if(!a)throw O.wrapError(`Could not find valid ${F.read(F.signature,r)} signature in key ${t.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,(e,t,r)=>t+" "+r.toLowerCase()),o);return a}function ha(e,t,r=new Date){const n=O.normalizeDate(r);if(null!==n){const r=pa(e,t);return!(e.created<=n&&n<r)}return!1}async function fa(e,t,r,n){const i={};i.key=t,i.bind=e;const s={signatureType:F.signature.subkeyBinding};return r.sign?(s.keyFlags=[F.keyFlags.signData],s.embeddedSignature=await la(i,[],e,{signatureType:F.signature.keyBinding},r.date,void 0,void 0,void 0,n)):s.keyFlags=[F.keyFlags.encryptCommunication|F.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1),await la(i,[],t,s,r.date,void 0,void 0,void 0,n)}async function la(e,t,r,n,i,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const u=new Es;return Object.assign(u,n),u.publicKeyAlgorithm=r.algorithm,u.hashAlgorithm=await async function(e,t,r=new Date,n=[],i){const s=F.hash.sha256,a=i.preferredHashAlgorithm,o=await Promise.all(e.map(async(e,t)=>(await e.getPrimarySelfSignature(r,n[t],i)).preferredHashAlgorithms||[])),c=new Map;for(const e of o)for(const t of e)try{const e=F.write(F.hash,t);c.set(e,c.has(e)?c.get(e)+1:1)}catch{}const u=t=>0===e.length||c.get(t)===e.length||t===s,h=()=>{if(0===c.size)return s;const e=Array.from(c.keys()).filter(e=>u(e)).sort((e,t)=>Fe(e)-Fe(t))[0];return Fe(e)>=Fe(s)?e:s};if(new Set([F.publicKey.ecdsa,F.publicKey.eddsaLegacy,F.publicKey.ed25519,F.publicKey.ed448]).has(t.algorithm)){const e=function(e,t){switch(e){case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:return Zr(t);case F.publicKey.ed25519:case F.publicKey.ed448:return pt(e);default:throw Error("Unknown elliptic signing algo")}}(t.algorithm,t.publicParams.oid),r=u(a),n=Fe(a)>=Fe(e);if(r&&n)return a;{const t=h();return Fe(t)>=Fe(e)?t:e}}return u(a)?a:h()}(t,r,i,s,c),u.rawNotations=[...a],await u.sign(r,e,i,o,c),u}async function ya(e,t,r,n=new Date,i){(e=e[r])&&(t[r].length?await Promise.all(e.map(async function(e){e.isExpired(n)||i&&!await i(e)||t[r].some(function(t){return O.equalsUint8Array(t.writeParams(),e.writeParams())})||t[r].push(e)})):t[r]=e)}async function ga(e,t,r,n,i,s,a=new Date,o){s=s||e;const c=[];return await Promise.all(n.map(async function(e){try{if(!i||e.issuerKeyID.equals(i.issuerKeyID)){const n=![F.reasonForRevocation.keyRetired,F.reasonForRevocation.keySuperseded,F.reasonForRevocation.userIDInvalid].includes(e.reasonForRevocationFlag);await e.verify(s,t,r,n?null:a,!1,o),c.push(e.issuerKeyID)}}catch(e){}})),i?(i.revoked=!!c.some(e=>e.equals(i.issuerKeyID))||i.revoked||!1,i.revoked):c.length>0}function pa(e,t){let r;return!1===t.keyNeverExpires&&(r=e.created.getTime()+1e3*t.keyExpirationTime),r?new Date(r):1/0}function da(e,t={}){switch(e.type=e.type||t.type,e.curve=e.curve||t.curve,e.rsaBits=e.rsaBits||t.rsaBits,e.keyExpirationTime=void 0!==e.keyExpirationTime?e.keyExpirationTime:t.keyExpirationTime,e.passphrase=O.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e.sign=e.sign||!1,e.type){case"ecc":try{e.curve=F.write(F.curve,e.curve)}catch(e){throw Error("Unknown curve")}e.curve!==F.curve.ed25519Legacy&&e.curve!==F.curve.curve25519Legacy&&"ed25519"!==e.curve&&"curve25519"!==e.curve||(e.curve=e.sign?F.curve.ed25519Legacy:F.curve.curve25519Legacy),e.sign?e.algorithm=e.curve===F.curve.ed25519Legacy?F.publicKey.eddsaLegacy:F.publicKey.ecdsa:e.algorithm=F.publicKey.ecdh;break;case"curve25519":e.algorithm=e.sign?F.publicKey.ed25519:F.publicKey.x25519;break;case"curve448":e.algorithm=e.sign?F.publicKey.ed448:F.publicKey.x448;break;case"rsa":e.algorithm=F.publicKey.rsaEncryptSign;break;default:throw Error("Unsupported key type "+e.type)}return e}function Aa(e,t,r){switch(e.algorithm){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:case F.publicKey.dsa:case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:case F.publicKey.ed25519:case F.publicKey.ed448:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&F.keyFlags.signData);default:return!1}}function wa(e,t,r){switch(e.algorithm){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.elgamal:case F.publicKey.ecdh:case F.publicKey.x25519:case F.publicKey.x448:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&F.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&F.keyFlags.encryptStorage);default:return!1}}function ma(e,t,r){if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(e.algorithm){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.elgamal:case F.publicKey.ecdh:case F.publicKey.x25519:case F.publicKey.x448:return!((t.keyFlags&&!(t.keyFlags[0]&F.keyFlags.signData)||!r.allowInsecureDecryptionWithSigningKeys)&&t.keyFlags&&!(t.keyFlags[0]&F.keyFlags.encryptCommunication)&&!(t.keyFlags[0]&F.keyFlags.encryptStorage));default:return!1}}function ba(e,t){const r=F.write(F.publicKey,e.algorithm),n=e.getAlgorithmInfo();if(t.rejectPublicKeyAlgorithms.has(r))throw Error(n.algorithm+" keys are considered too weak.");switch(r){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:case F.publicKey.rsaEncrypt:if(n.bits<t.minRSABits)throw Error(`RSA keys shorter than ${t.minRSABits} bits are considered too weak.`);break;case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:case F.publicKey.ecdh:if(t.rejectCurves.has(n.curve))throw Error(`Support for ${n.algorithm} keys using curve ${n.curve} is disabled.`)}}class ka{constructor(e,t){this.userID=e.constructor.tag===F.packet.userID?e:null,this.userAttribute=e.constructor.tag===F.packet.userAttribute?e:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new Ks;return e.push(this.userID||this.userAttribute),e.push(...this.revocationSignatures),e.push(...this.selfCertifications),e.push(...this.otherCertifications),e}clone(){const e=new ka(this.userID||this.userAttribute,this.mainKey);return e.selfCertifications=[...this.selfCertifications],e.otherCertifications=[...this.otherCertifications],e.revocationSignatures=[...this.revocationSignatures],e}async certify(e,t,r){const n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n},s=new ka(i.userID||i.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(e.map(async function(e){if(!e.isPrivate())throw Error("Need private key for signing");if(e.hasSameFingerprintAs(n))throw Error("The user's own key can only be used for self-certifications");const s=await e.getSigningKey(void 0,t,void 0,r);return la(i,[e],s.keyPacket,{signatureType:F.signature.certGeneric,keyFlags:[F.keyFlags.certifyKeys|F.keyFlags.signData]},t,void 0,void 0,void 0,r)})),await s.update(this,t,r),s}async isRevoked(e,t,r=new Date,n=L){const i=this.mainKey.keyPacket;return ga(i,F.signature.certRevocation,{key:i,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,e,t,r,n)}async verifyCertificate(e,t,r=new Date,n){const i=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=e,c=t.filter(e=>e.getKeys(o).length>0);return 0===c.length?null:(await Promise.all(c.map(async t=>{const s=await t.getSigningKey(o,e.created,void 0,n);if(e.revoked||await i.isRevoked(e,s.keyPacket,r,n))throw Error("User certificate is revoked");try{await e.verify(s.keyPacket,F.signature.certGeneric,a,r,void 0,n)}catch(e){throw O.wrapError("User certificate is invalid",e)}})),!0)}async verifyAllCertifications(e,t=new Date,r){const n=this,i=this.selfCertifications.concat(this.otherCertifications);return Promise.all(i.map(async i=>({keyID:i.issuerKeyID,valid:await n.verifyCertificate(i,e,t,r).catch(()=>!1)})))}async verify(e=new Date,t){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,e,t))throw Error("Self-certification is revoked");try{await s.verify(n,F.signature.certGeneric,i,e,void 0,t)}catch(e){throw O.wrapError("Self-certification is invalid",e)}return!0}catch(e){s=e}throw s}async update(e,t,r){const n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n};await ya(e,this,"selfCertifications",t,async function(e){try{return await e.verify(n,F.signature.certGeneric,i,t,!1,r),!0}catch(e){return!1}}),await ya(e,this,"otherCertifications",t),await ya(e,this,"revocationSignatures",t,function(e){return ga(n,F.signature.certRevocation,i,[e],void 0,void 0,t,r)})}async revoke(e,{flag:t=F.reasonForRevocation.noReason,string:r=""}={},n=new Date,i=L){const s={userID:this.userID,userAttribute:this.userAttribute,key:e},a=new ka(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await la(s,[],e,{signatureType:F.signature.certRevocation,reasonForRevocationFlag:F.write(F.reasonForRevocation,t),reasonForRevocationString:r},n,void 0,void 0,!1,i)),await a.update(this),a}}class Ea{constructor(e,t){this.keyPacket=e,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new Ks;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.bindingSignatures),e}clone(){const e=new Ea(this.keyPacket,this.mainKey);return e.bindingSignatures=[...this.bindingSignatures],e.revocationSignatures=[...this.revocationSignatures],e}async isRevoked(e,t,r=new Date,n=L){const i=this.mainKey.keyPacket;return ga(i,F.signature.subkeyRevocation,{key:i,bind:this.keyPacket},this.revocationSignatures,e,t,r,n)}async verify(e=new Date,t=L){const r=this.mainKey.keyPacket,n={key:r,bind:this.keyPacket},i=await ua(this.bindingSignatures,r,F.signature.subkeyBinding,n,e,t);if(i.revoked||await this.isRevoked(i,null,e,t))throw Error("Subkey is revoked");if(ha(this.keyPacket,i,e))throw Error("Subkey is expired");return i}async getExpirationTime(e=new Date,t=L){const r=this.mainKey.keyPacket,n={key:r,bind:this.keyPacket};let i;try{i=await ua(this.bindingSignatures,r,F.signature.subkeyBinding,n,e,t)}catch(e){return null}const s=pa(this.keyPacket,i),a=i.getExpirationTime();return s<a?s:a}async update(e,t=new Date,r=L){const n=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(e))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===F.packet.publicSubkey&&e.keyPacket.constructor.tag===F.packet.secretSubkey&&(this.keyPacket=e.keyPacket);const i=this,s={key:n,bind:i.keyPacket};await ya(e,this,"bindingSignatures",t,async function(e){for(let t=0;t<i.bindingSignatures.length;t++)if(i.bindingSignatures[t].issuerKeyID.equals(e.issuerKeyID))return e.created>i.bindingSignatures[t].created&&(i.bindingSignatures[t]=e),!1;try{return await e.verify(n,F.signature.subkeyBinding,s,t,void 0,r),!0}catch(e){return!1}}),await ya(e,this,"revocationSignatures",t,function(e){return ga(n,F.signature.subkeyRevocation,s,[e],void 0,void 0,t,r)})}async revoke(e,{flag:t=F.reasonForRevocation.noReason,string:r=""}={},n=new Date,i=L){const s={key:e,bind:this.keyPacket},a=new Ea(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await la(s,[],e,{signatureType:F.signature.subkeyRevocation,reasonForRevocationFlag:F.write(F.reasonForRevocation,t),reasonForRevocationString:r},n,void 0,void 0,!1,i)),await a.update(this),a}hasSameFingerprintAs(e){return this.keyPacket.hasSameFingerprintAs(e.keyPacket||e)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach(e=>{Ea.prototype[e]=function(){return this.keyPacket[e]()}});const va=O.constructAllowedPackets([Es]),Ba=new Set([F.packet.publicKey,F.packet.privateKey]),Ia=new Set([F.packet.publicKey,F.packet.privateKey,F.packet.publicSubkey,F.packet.privateSubkey]);class Sa{packetListToStructure(e,t=new Set){let r,n,i,s;for(const a of e){if(a instanceof ut){Ia.has(a.tag)&&!s&&(s=Ba.has(a.tag)?Ba:Ia);continue}const e=a.constructor.tag;if(s){if(!s.has(e))continue;s=null}if(t.has(e))throw Error("Unexpected packet type: "+e);switch(e){case F.packet.publicKey:case F.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,n=this.getKeyID(),!n)throw Error("Missing Key ID");break;case F.packet.userID:case F.packet.userAttribute:r=new ka(a,this),this.users.push(r);break;case F.packet.publicSubkey:case F.packet.secretSubkey:r=null,i=new Ea(a,this),this.subkeys.push(i);break;case F.packet.signature:switch(a.signatureType){case F.signature.certGeneric:case F.signature.certPersona:case F.signature.certCasual:case F.signature.certPositive:if(!r){O.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(n)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case F.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case F.signature.key:this.directSignatures.push(a);break;case F.signature.subkeyBinding:if(!i){O.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}i.bindingSignatures.push(a);break;case F.signature.keyRevocation:this.revocationSignatures.push(a);break;case F.signature.subkeyRevocation:if(!i){O.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}i.revocationSignatures.push(a)}}}}toPacketList(){const e=new Ks;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.directSignatures),this.users.map(t=>e.push(...t.toPacketList())),this.subkeys.map(t=>e.push(...t.toPacketList())),e}clone(e=!1){const t=new this.constructor(this.toPacketList());return e&&t.getKeys().forEach(e=>{if(e.keyPacket=Object.create(Object.getPrototypeOf(e.keyPacket),Object.getOwnPropertyDescriptors(e.keyPacket)),!e.keyPacket.isDecrypted())return;const t={};Object.keys(e.keyPacket.privateParams).forEach(r=>{t[r]=new Uint8Array(e.keyPacket.privateParams[r])}),e.keyPacket.privateParams=t}),t}getSubkeys(e=null){return this.subkeys.filter(t=>!e||t.getKeyID().equals(e,!0))}getKeys(e=null){const t=[];return e&&!this.getKeyID().equals(e,!0)||t.push(this),t.concat(this.getSubkeys(e))}getKeyIDs(){return this.getKeys().map(e=>e.getKeyID())}getUserIDs(){return this.users.map(e=>e.userID?e.userID.userID:null).filter(e=>null!==e)}write(){return this.toPacketList().write()}async getSigningKey(e=null,t=new Date,r={},n=L){await this.verifyPrimaryKey(t,r,n);const i=this.keyPacket;try{ba(i,n)}catch(e){throw O.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort((e,t)=>t.keyPacket.created-e.keyPacket.created||t.keyPacket.algorithm-e.keyPacket.algorithm);let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,n);const e={key:i,bind:r.keyPacket},s=await ua(r.bindingSignatures,i,F.signature.subkeyBinding,e,t,n);if(!Aa(r.keyPacket,s,n))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await ua([s.embeddedSignature],r.keyPacket,F.signature.keyBinding,e,t,n),ba(r.keyPacket,n),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,n);if((!e||i.getKeyID().equals(e))&&Aa(i,s,n))return ba(i,n),this}catch(e){a=e}throw O.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(e,t=new Date,r={},n=L){await this.verifyPrimaryKey(t,r,n);const i=this.keyPacket;try{ba(i,n)}catch(e){throw O.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort((e,t)=>t.keyPacket.created-e.keyPacket.created||t.keyPacket.algorithm-e.keyPacket.algorithm);let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,n);const e={key:i,bind:r.keyPacket},s=await ua(r.bindingSignatures,i,F.signature.subkeyBinding,e,t,n);if(wa(r.keyPacket,s,n))return ba(r.keyPacket,n),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,n);if((!e||i.getKeyID().equals(e))&&wa(i,s,n))return ba(i,n),this}catch(e){a=e}throw O.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(e,t,r=new Date,n=L){return ga(this.keyPacket,F.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,e,t,r,n)}async verifyPrimaryKey(e=new Date,t={},r=L){const n=this.keyPacket;if(await this.isRevoked(null,null,e,r))throw Error("Primary key is revoked");if(ha(n,await this.getPrimarySelfSignature(e,t,r),e))throw Error("Primary key is expired");if(6!==n.version){const t=await ua(this.directSignatures,n,F.signature.key,{key:n},e,r).catch(()=>{});if(t&&ha(n,t,e))throw Error("Primary key is expired")}}async getExpirationTime(e,t=L){let r;try{const n=await this.getPrimarySelfSignature(null,e,t),i=pa(this.keyPacket,n),s=n.getExpirationTime(),a=6!==this.keyPacket.version&&await ua(this.directSignatures,this.keyPacket,F.signature.key,{key:this.keyPacket},null,t).catch(()=>{});if(a){const e=pa(this.keyPacket,a);r=Math.min(i,s,e)}else r=i<s?i:s}catch(e){r=null}return O.normalizeDate(r)}async getPrimarySelfSignature(e=new Date,t={},r=L){const n=this.keyPacket;if(6===n.version)return ua(this.directSignatures,n,F.signature.key,{key:n},e,r);const{selfCertification:i}=await this.getPrimaryUser(e,t,r);return i}async getPrimaryUser(e=new Date,t={},r=L){const n=this.keyPacket,i=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==t.name&&s.userID.name!==t.name||void 0!==t.email&&s.userID.email!==t.email||void 0!==t.comment&&s.userID.comment!==t.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:n},c=await ua(s.selfCertifications,n,F.signature.certGeneric,o,e,r);i.push({index:a,user:s,selfCertification:c})}catch(e){s=e}if(!i.length)throw s||Error("Could not find primary user");await Promise.all(i.map(async function(t){return t.selfCertification.revoked||t.user.isRevoked(t.selfCertification,null,e,r)}));const a=i.sort(function(e,t){const r=e.selfCertification,n=t.selfCertification;return n.revoked-r.revoked||r.isPrimaryUserID-n.isPrimaryUserID||r.created-n.created}).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,e,r))throw Error("Primary user is revoked");return a}async update(e,t=new Date,r=L){if(!this.hasSameFingerprintAs(e))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&e.isPrivate()){if(this.subkeys.length!==e.subkeys.length||!this.subkeys.every(t=>e.subkeys.some(e=>t.hasSameFingerprintAs(e))))throw Error("Cannot update public key with private key if subkeys mismatch");return e.update(this,r)}const n=this.clone();return await ya(e,n,"revocationSignatures",t,i=>ga(n.keyPacket,F.signature.keyRevocation,n,[i],null,e.keyPacket,t,r)),await ya(e,n,"directSignatures",t),await Promise.all(e.users.map(async e=>{const i=n.users.filter(t=>e.userID&&e.userID.equals(t.userID)||e.userAttribute&&e.userAttribute.equals(t.userAttribute));if(i.length>0)await Promise.all(i.map(n=>n.update(e,t,r)));else{const t=e.clone();t.mainKey=n,n.users.push(t)}})),await Promise.all(e.subkeys.map(async e=>{const i=n.subkeys.filter(t=>t.hasSameFingerprintAs(e));if(i.length>0)await Promise.all(i.map(n=>n.update(e,t,r)));else{const t=e.clone();t.mainKey=n,n.subkeys.push(t)}})),n}async getRevocationCertificate(e=new Date,t=L){const r={key:this.keyPacket},n=await ua(this.revocationSignatures,this.keyPacket,F.signature.keyRevocation,r,e,t),i=new Ks;i.push(n);const s=6!==this.keyPacket.version;return re(F.armor.publicKey,i.write(),null,null,"This is a revocation certificate",s,t)}async applyRevocationCertificate(e,t=new Date,r=L){const n=await te(e),i=(await Ks.fromBinary(n.data,va,r)).findPacket(F.packet.signature);if(!i||i.signatureType!==F.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!i.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await i.verify(this.keyPacket,F.signature.keyRevocation,{key:this.keyPacket},t,void 0,r)}catch(e){throw O.wrapError("Could not verify revocation signature",e)}const s=this.clone();return s.revocationSignatures.push(i),s}async signPrimaryUser(e,t,r,n=L){const{index:i,user:s}=await this.getPrimaryUser(t,r,n),a=await s.certify(e,t,n),o=this.clone();return o.users[i]=a,o}async signAllUsers(e,t=new Date,r=L){const n=this.clone();return n.users=await Promise.all(this.users.map(function(n){return n.certify(e,t,r)})),n}async verifyPrimaryUser(e,t=new Date,r,n=L){const i=this.keyPacket,{user:s}=await this.getPrimaryUser(t,r,n);return e?await s.verifyAllCertifications(e,t,n):[{keyID:i.getKeyID(),valid:await s.verify(t,n).catch(()=>!1)}]}async verifyAllUsers(e,t=new Date,r=L){const n=this.keyPacket,i=[];return await Promise.all(this.users.map(async s=>{const a=e?await s.verifyAllCertifications(e,t,r):[{keyID:n.getKeyID(),valid:await s.verify(t,r).catch(()=>!1)}];i.push(...a.map(e=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:e.keyID,valid:e.valid})))})),i}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach(e=>{Sa.prototype[e]=Ea.prototype[e]});class Ka extends Sa{constructor(e){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],e&&(this.packetListToStructure(e,new Set([F.packet.secretKey,F.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(e=L){const t=6!==this.keyPacket.version;return re(F.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}}class Ca extends Ka{constructor(e){if(super(),this.packetListToStructure(e,new Set([F.packet.publicKey,F.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const e=new Ks,t=this.toPacketList();for(const r of t)switch(r.constructor.tag){case F.packet.secretKey:{const t=Vs.fromSecretKeyPacket(r);e.push(t);break}case F.packet.secretSubkey:{const t=Js.fromSecretSubkeyPacket(r);e.push(t);break}default:e.push(r)}return new Ka(e)}armor(e=L){const t=6!==this.keyPacket.version;return re(F.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}async getDecryptionKeys(e,t=new Date,r={},n=L){const i=this.keyPacket,s=[];let a=null;for(let r=0;r<this.subkeys.length;r++)if(!e||this.subkeys[r].getKeyID().equals(e,!0)){if(this.subkeys[r].keyPacket.isDummy()){a=a||Error("Gnu-dummy key packets cannot be used for decryption");continue}try{const e={key:i,bind:this.subkeys[r].keyPacket},a=await ua(this.subkeys[r].bindingSignatures,i,F.signature.subkeyBinding,e,t,n);ma(this.subkeys[r].keyPacket,a,n)&&s.push(this.subkeys[r])}catch(e){a=e}}const o=await this.getPrimarySelfSignature(t,r,n);if(e&&!i.getKeyID().equals(e,!0)||!ma(i,o,n)||(i.isDummy()?a=a||Error("Gnu-dummy key packets cannot be used for decryption"):s.push(this)),0===s.length)throw a||Error("No decryption key packets found");return s}isDecrypted(){return this.getKeys().some(({keyPacket:e})=>e.isDecrypted())}async validate(e=L){if(!this.isPrivate())throw Error("Cannot validate a public key");let t;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...e,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(t=r.keyPacket)}else t=this.keyPacket;if(t)return t.validate();{const e=this.getKeys();if(e.map(e=>e.keyPacket.isDummy()).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(e.map(async e=>e.keyPacket.validate()))}}clearPrivateParams(){this.getKeys().forEach(({keyPacket:e})=>{e.isDecrypted()&&e.clearPrivateParams()})}async revoke({flag:e=F.reasonForRevocation.noReason,string:t=""}={},r=new Date,n=L){if(!this.isPrivate())throw Error("Need private key for revoking");const i={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await la(i,[],this.keyPacket,{signatureType:F.signature.keyRevocation,reasonForRevocationFlag:F.write(F.reasonForRevocation,e),reasonForRevocationString:t},r,void 0,void 0,void 0,n)),s}async addSubkey(e={}){const t={...L,...e.config};if(e.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(e.rsaBits<t.minRSABits)throw Error(`rsaBits should be at least ${t.minRSABits}, got: ${e.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const n=r.getAlgorithmInfo();n.type=function(e){switch(F.write(F.publicKey,e)){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:case F.publicKey.dsa:return"rsa";case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:return"ecc";case F.publicKey.ed25519:return"curve25519";case F.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(n.algorithm),n.rsaBits=n.bits||4096,n.curve=n.curve||"curve25519Legacy",e=da(e,n);const i=await oa(e,{...t,v6Keys:6===this.keyPacket.version});ba(i,t);const s=await fa(i,r,e,t),a=this.toPacketList();return a.push(i,s),new Ca(a)}}const Da=O.constructAllowedPackets([Vs,Js,Ws,ta,ea,Xs,Es]);function Ua(e){for(const t of e)switch(t.constructor.tag){case F.packet.secretKey:return new Ca(e);case F.packet.publicKey:return new Ka(e)}throw Error("No key packet found")}async function Pa(e,t,r,n){r.passphrase&&await e.encrypt(r.passphrase,n),await Promise.all(t.map(async function(e,t){const i=r.subkeys[t].passphrase;i&&await e.encrypt(i,n)}));const i=new Ks;function s(e,t){return[t,...e.filter(e=>e!==t)]}function a(){const e={};e.keyFlags=[F.keyFlags.certifyKeys|F.keyFlags.signData];const t=s([F.symmetric.aes256,F.symmetric.aes128],n.preferredSymmetricAlgorithm);if(e.preferredSymmetricAlgorithms=t,n.aeadProtect){const r=s([F.aead.gcm,F.aead.eax,F.aead.ocb],n.preferredAEADAlgorithm);e.preferredCipherSuites=r.flatMap(e=>t.map(t=>[t,e]))}return e.preferredHashAlgorithms=s([F.hash.sha512,F.hash.sha256,F.hash.sha3_512,F.hash.sha3_256],n.preferredHashAlgorithm),e.preferredCompressionAlgorithms=s([F.compression.uncompressed,F.compression.zlib,F.compression.zip],n.preferredCompressionAlgorithm),e.features=[0],e.features[0]|=F.features.modificationDetection,n.aeadProtect&&(e.features[0]|=F.features.seipdv2),r.keyExpirationTime>0&&(e.keyExpirationTime=r.keyExpirationTime,e.keyNeverExpires=!1),e}if(i.push(e),6===e.version){const t={key:e},s=a();s.signatureType=F.signature.key;const o=await la(t,[],e,s,r.date,void 0,void 0,void 0,n);i.push(o)}await Promise.all(r.userIDs.map(async function(t,i){const s=ea.fromObject(t),o={userID:s,key:e},c=6!==e.version?a():{};return c.signatureType=F.signature.certPositive,0===i&&(c.isPrimaryUserID=!0),{userIDPacket:s,signaturePacket:await la(o,[],e,c,r.date,void 0,void 0,void 0,n)}})).then(e=>{e.forEach(({userIDPacket:e,signaturePacket:t})=>{i.push(e),i.push(t)})}),await Promise.all(t.map(async function(t,i){const s=r.subkeys[i];return{secretSubkeyPacket:t,subkeySignaturePacket:await fa(t,e,s,n)}})).then(e=>{e.forEach(({secretSubkeyPacket:e,subkeySignaturePacket:t})=>{i.push(e),i.push(t)})});const o={key:e};return i.push(await la(o,[],e,{signatureType:F.signature.keyRevocation,reasonForRevocationFlag:F.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,n)),r.passphrase&&e.clearPrivateParams(),await Promise.all(t.map(async function(e,t){r.subkeys[t].passphrase&&e.clearPrivateParams()})),new Ca(i)}async function xa({armoredKey:e,binaryKey:t,config:r,...n}){if(r={...L,...r},!e&&!t)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!O.isString(e))throw Error("readKey: options.armoredKey must be a string");if(t&&!O.isUint8Array(t))throw Error("readKey: options.binaryKey must be a Uint8Array");const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));let s;if(e){const{type:t,data:r}=await te(e);if(t!==F.armor.publicKey&&t!==F.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=t;const a=await Ks.fromBinary(s,Da,r),o=a.indexOfTag(F.packet.publicKey,F.packet.secretKey);if(0===o.length)throw Error("No key packet found");return Ua(a.slice(o[0],o[1]))}async function Qa({armoredKey:e,binaryKey:t,config:r,...n}){if(r={...L,...r},!e&&!t)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!O.isString(e))throw Error("readPrivateKey: options.armoredKey must be a string");if(t&&!O.isUint8Array(t))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));let s;if(e){const{type:t,data:r}=await te(e);if(t!==F.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=t;const a=await Ks.fromBinary(s,Da,r),o=a.indexOfTag(F.packet.publicKey,F.packet.secretKey);for(let e=0;e<o.length;e++){if(a[o[e]].constructor.tag===F.packet.publicKey)continue;const t=a.slice(o[e],o[e+1]);return new Ca(t)}throw Error("No secret key packet found")}async function Ra({armoredKeys:e,binaryKeys:t,config:r,...n}){r={...L,...r};let i=e||t;if(!i)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!O.isString(e))throw Error("readKeys: options.armoredKeys must be a string");if(t&&!O.isUint8Array(t))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:t,data:r}=await te(e);if(t!==F.armor.publicKey&&t!==F.armor.privateKey)throw Error("Armored text not of type key");i=r}const a=[],o=await Ks.fromBinary(i,Da,r),c=o.indexOfTag(F.packet.publicKey,F.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let e=0;e<c.length;e++){const t=Ua(o.slice(c[e],c[e+1]));a.push(t)}return a}async function Ta({armoredKeys:e,binaryKeys:t,config:r}){r={...L,...r};let n=e||t;if(!n)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!O.isString(e))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(t&&!O.isUint8Array(t))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(e){const{type:t,data:r}=await te(e);if(t!==F.armor.privateKey)throw Error("Armored text not of type private key");n=r}const i=[],s=await Ks.fromBinary(n,Da,r),a=s.indexOfTag(F.packet.publicKey,F.packet.secretKey);for(let e=0;e<a.length;e++){if(s[a[e]].constructor.tag===F.packet.publicKey)continue;const t=s.slice(a[e],a[e+1]),r=new Ca(t);i.push(r)}if(0===i.length)throw Error("No secret key packet found");return i}const Ma=O.constructAllowedPackets([As,xs,zs,Ns,Ys,Gs,js,Is,Es]),Fa=O.constructAllowedPackets([js]),La=O.constructAllowedPackets([Es]);class Na{constructor(e){this.packets=e||new Ks}getEncryptionKeyIDs(){const e=[];return this.packets.filterByTag(F.packet.publicKeyEncryptedSessionKey).forEach(function(t){e.push(t.publicKeyID)}),e}getSigningKeyIDs(){const e=this.unwrapCompressed(),t=e.packets.filterByTag(F.packet.onePassSignature);return t.length>0?t.map(e=>e.issuerKeyID):e.packets.filterByTag(F.packet.signature).map(e=>e.issuerKeyID)}async decrypt(e,t,r,n=new Date,i=L){const s=this.packets.filterByTag(F.packet.symmetricallyEncryptedData,F.packet.symEncryptedIntegrityProtectedData,F.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(e,t,o,n,i);let u=null;const h=Promise.all(c.map(async({algorithm:e,data:t})=>{if(!O.isUint8Array(t)||!a.cipherAlgorithm&&!O.isString(e))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||F.write(F.symmetric,e);await a.decrypt(r,t,i)}catch(e){O.printDebugError(e),u=e}}));if(x(a.encrypted),a.encrypted=null,await h,!a.packets||!a.packets.length)throw u||Error("Decryption failed.");const f=new Na(a.packets);return a.packets=new Ks,f}async decryptSessionKeys(e,t,r,n=new Date,i=L){let s,a=[];if(t){const e=this.packets.filterByTag(F.packet.symEncryptedSessionKey);if(0===e.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(t.map(async function(t,r){let n;n=r?await Ks.fromBinary(e.write(),Fa,i):e,await Promise.all(n.map(async function(e){try{await e.decrypt(t),a.push(e)}catch(e){O.printDebugError(e),e instanceof pi&&(s=e)}}))}))}else{if(!e)throw Error("No key or password specified.");{const t=this.packets.filterByTag(F.packet.publicKeyEncryptedSessionKey);if(0===t.length)throw Error("No public key encrypted session key packet found.");await Promise.all(t.map(async function(t){await Promise.all(e.map(async function(e){let o;try{o=(await e.getDecryptionKeys(t.publicKeyID,null,void 0,i)).map(e=>e.keyPacket)}catch(e){return void(s=e)}let c=[F.symmetric.aes256,F.symmetric.aes128,F.symmetric.tripledes,F.symmetric.cast5];try{const t=await e.getPrimarySelfSignature(n,void 0,i);t.preferredSymmetricAlgorithms&&(c=c.concat(t.preferredSymmetricAlgorithms))}catch(e){}await Promise.all(o.map(async function(e){if(!e.isDecrypted())throw Error("Decryption key is not decrypted.");if(!i.constantTimePKCS1Decryption||t.publicKeyAlgorithm!==F.publicKey.rsaEncrypt&&t.publicKeyAlgorithm!==F.publicKey.rsaEncryptSign&&t.publicKeyAlgorithm!==F.publicKey.rsaSign&&t.publicKeyAlgorithm!==F.publicKey.elgamal)try{await t.decrypt(e);const n=r||t.sessionKeyAlgorithm;if(n&&!c.includes(F.write(F.symmetric,n)))throw Error("A non-preferred symmetric algorithm was used.");a.push(t)}catch(e){O.printDebugError(e),s=e}else{const n=t.write();await Promise.all((r?[r]:Array.from(i.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map(async t=>{const r=new Gs;r.read(n);const i={sessionKeyAlgorithm:t,sessionKey:Cn(t)};try{await r.decrypt(e,i),a.push(r)}catch(e){O.printDebugError(e),s=e}}))}}))})),x(t.encrypted),t.encrypted=null}))}}if(a.length>0){if(a.length>1){const e=new Set;a=a.filter(t=>{const r=t.sessionKeyAlgorithm+O.uint8ArrayToString(t.sessionKey);return!e.has(r)&&(e.add(r),!0)})}return a.map(e=>({data:e.sessionKey,algorithm:e.sessionKeyAlgorithm&&F.read(F.symmetric,e.sessionKeyAlgorithm)}))}throw s||Error("Session key decryption failed.")}getLiteralData(){const e=this.unwrapCompressed().packets.findPacket(F.packet.literalData);return e&&e.getBytes()||null}getFilename(){const e=this.unwrapCompressed().packets.findPacket(F.packet.literalData);return e&&e.getFilename()||null}getText(){const e=this.unwrapCompressed().packets.findPacket(F.packet.literalData);return e?e.getText():null}static async generateSessionKey(e=[],t=new Date,r=[],n=L){const{symmetricAlgo:i,aeadAlgo:s}=await async function(e=[],t=new Date,r=[],n=L){const i=await Promise.all(e.map((e,i)=>e.getPrimarySelfSignature(t,r[i],n)));if(e.length?i.every(e=>e.features&&e.features[0]&F.features.seipdv2):n.aeadProtect){const e={symmetricAlgo:F.symmetric.aes128,aeadAlgo:F.aead.ocb},t=[{symmetricAlgo:n.preferredSymmetricAlgorithm,aeadAlgo:n.preferredAEADAlgorithm},{symmetricAlgo:n.preferredSymmetricAlgorithm,aeadAlgo:F.aead.ocb},{symmetricAlgo:F.symmetric.aes128,aeadAlgo:n.preferredAEADAlgorithm}];for(const e of t)if(i.every(t=>t.preferredCipherSuites&&t.preferredCipherSuites.some(t=>t[0]===e.symmetricAlgo&&t[1]===e.aeadAlgo)))return e;return e}const s=F.symmetric.aes128,a=n.preferredSymmetricAlgorithm;return{symmetricAlgo:i.every(e=>e.preferredSymmetricAlgorithms&&e.preferredSymmetricAlgorithms.includes(a))?a:s,aeadAlgo:void 0}}(e,t,r,n),a=F.read(F.symmetric,i),o=s?F.read(F.aead,s):void 0;return await Promise.all(e.map(e=>e.getEncryptionKey().catch(()=>null).then(e=>{if(e&&(e.keyPacket.algorithm===F.publicKey.x25519||e.keyPacket.algorithm===F.publicKey.x448)&&!o&&!O.isAES(i))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")}))),{data:Cn(i),algorithm:a,aeadAlgorithm:o}}async encrypt(e,t,r,n=!1,i=[],s=new Date,a=[],o=L){if(r){if(!O.isUint8Array(r.data)||!O.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(e&&e.length)r=await Na.generateSessionKey(e,s,a,o);else{if(!t||!t.length)throw Error("No keys, passwords, or session key provided.");r=await Na.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:u,aeadAlgorithm:h}=r,f=await Na.encryptSessionKey(c,u,h,e,t,n,i,s,a,o),l=Ns.fromObject({version:h?2:1,aeadAlgorithm:h?F.write(F.aead,h):null});l.packets=this.packets;const y=F.write(F.symmetric,u);return await l.encrypt(y,c,o),f.packets.push(l),l.packets=new Ks,f}static async encryptSessionKey(e,t,r,n,i,s=!1,a=[],o=new Date,c=[],u=L){const h=new Ks,f=F.write(F.symmetric,t),l=r&&F.write(F.aead,r);if(n){const t=await Promise.all(n.map(async function(t,r){const n=await t.getEncryptionKey(a[r],o,c,u),i=Gs.fromObject({version:l?6:3,encryptionKeyPacket:n.keyPacket,anonymousRecipient:s,sessionKey:e,sessionKeyAlgorithm:f});return await i.encrypt(n.keyPacket),delete i.sessionKey,i}));h.push(...t)}if(i){const t=async function(e,t){try{return await e.decrypt(t),1}catch(e){return 0}},r=(e,t)=>e+t,n=async function(e,s,a,o){const c=new js(u);return c.sessionKey=e,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,u),u.passwordCollisionCheck&&1!==(await Promise.all(i.map(e=>t(c,e)))).reduce(r)?n(e,s,o):(delete c.sessionKey,c)},s=await Promise.all(i.map(t=>n(e,f,l,t)));h.push(...s)}return new Na(h)}async sign(e=[],t=[],r=null,n=[],i=new Date,s=[],a=[],o=[],c=L){const u=new Ks,h=this.packets.findPacket(F.packet.literalData);if(!h)throw Error("No literal data packet to sign.");const f=await Oa(h,e,t,r,n,i,s,a,o,!1,c),l=f.map((e,t)=>Is.fromSignaturePacket(e,0===t)).reverse();return u.push(...l),u.push(h),u.push(...f),new Na(u)}compress(e,t=L){if(e===F.compression.uncompressed)return this;const r=new xs(t);r.algorithm=e,r.packets=this.packets;const n=new Ks;return n.push(r),new Na(n)}async signDetached(e=[],t=[],r=null,n=[],i=[],s=new Date,a=[],o=[],c=L){const u=this.packets.findPacket(F.packet.literalData);if(!u)throw Error("No literal data packet to sign.");return new sa(await Oa(u,e,t,r,n,i,s,a,o,!0,c))}async verify(e,t=new Date,r=L){const n=this.unwrapCompressed(),i=n.packets.filterByTag(F.packet.literalData);if(1!==i.length)throw Error("Can only verify message with one literal data packet.");let s=n.packets;h(s.stream)&&(s=s.concat(await P(s.stream,e=>e||[])));const a=s.filterByTag(F.packet.onePassSignature).reverse(),o=s.filterByTag(F.packet.signature);return a.length&&!o.length&&O.isStream(s.stream)&&!h(s.stream)?(await Promise.all(a.map(async e=>{e.correspondingSig=new Promise((t,r)=>{e.correspondingSigResolve=t,e.correspondingSigReject=r}),e.signatureData=Q(async()=>(await e.correspondingSig).signatureData),e.hashed=P(await e.hash(e.signatureType,i[0],void 0,!1)),e.hashed.catch(()=>{})})),s.stream=I(s.stream,async(e,t)=>{const r=R(e),n=T(t);try{for(let e=0;e<a.length;e++){const{value:t}=await r.read();a[e].correspondingSigResolve(t)}await r.readToEnd(),await n.ready,await n.close()}catch(e){a.forEach(t=>{t.correspondingSigReject(e)}),await n.abort(e)}}),Ha(a,i,e,t,!1,r)):Ha(o,i,e,t,!1,r)}verifyDetached(e,t,r=new Date,n=L){const i=this.unwrapCompressed().packets.filterByTag(F.packet.literalData);if(1!==i.length)throw Error("Can only verify message with one literal data packet.");return Ha(e.packets.filterByTag(F.packet.signature),i,t,r,!0,n)}unwrapCompressed(){const e=this.packets.filterByTag(F.packet.compressedData);return e.length?new Na(e[0].packets):this}async appendSignature(e,t=L){await this.packets.read(O.isUint8Array(e)?e:(await te(e)).data,La,t)}write(){return this.packets.write()}armor(e=L){const t=this.packets[this.packets.length-1],r=t.constructor.tag===Ns.tag?2!==t.version:this.packets.some(e=>e.constructor.tag===Es.tag&&6!==e.version);return re(F.armor.message,this.write(),null,null,null,r,e)}}async function Oa(e,t,r=[],n=null,i=[],s=new Date,a=[],o=[],c=[],u=!1,h=L){const f=new Ks,l=null===e.text?F.signature.binary:F.signature.text;if(await Promise.all(t.map(async(t,n)=>{const f=a[n];if(!t.isPrivate())throw Error("Need private key for signing");const y=await t.getSigningKey(i[n],s,f,h);return la(e,r.length?r:[t],y.keyPacket,{signatureType:l},s,o,c,u,h)})).then(e=>{f.push(...e)}),n){const e=n.packets.filterByTag(F.packet.signature);f.push(...e)}return f}async function Ha(e,t,r,n=new Date,i=!1,s=L){return Promise.all(e.filter(function(e){return["text","binary"].includes(F.read(F.signature,e.signatureType))}).map(async function(e){return async function(e,t,r,n=new Date,i=!1,s=L){let a,o;for(const t of r){const r=t.getKeys(e.issuerKeyID);if(r.length>0){a=t,o=r[0];break}}const c=e instanceof Is?e.correspondingSig:e,u={keyID:e.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+e.issuerKeyID.toHex());await e.verify(o.keyPacket,e.signatureType,t[0],n,i,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(e){if(!s.allowInsecureVerificationWithReformattedKeys||!e.message.match(/Signature creation time is in the future/))throw e;await a.getSigningKey(o.getKeyID(),n,void 0,s)}return!0})(),signature:(async()=>{const e=await c,t=new Ks;return e&&t.push(e),new sa(t)})()};return u.signature.catch(()=>{}),u.verified.catch(()=>{}),u}(e,t,r,n,i,s)}))}async function za({armoredMessage:e,binaryMessage:t,config:r,...n}){r={...L,...r};let i=e||t;if(!i)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(e&&!O.isString(e)&&!O.isStream(e))throw Error("readMessage: options.armoredMessage must be a string or stream");if(t&&!O.isUint8Array(t)&&!O.isStream(t))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=O.isStream(i);if(e){const{type:e,data:t}=await te(i);if(e!==F.armor.message)throw Error("Armored text not of type message");i=t}const o=await Ks.fromBinary(i,Ma,r,new Us),c=new Na(o);return c.fromStream=a,c}async function Ga({text:e,binary:t,filename:r,date:n=new Date,format:i=(void 0!==e?"utf8":"binary"),...s}){const a=void 0!==e?e:t;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(e&&!O.isString(e)&&!O.isStream(e))throw Error("createMessage: options.text must be a string or stream");if(t&&!O.isUint8Array(t)&&!O.isStream(t))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=O.isStream(a),u=new As(n);void 0!==e?u.setText(a,F.write(F.literal,i)):u.setBytes(a,F.write(F.literal,i)),void 0!==r&&u.setFilename(r);const h=new Ks;h.push(u);const f=new Na(h);return f.fromStream=c,f}const _a=O.constructAllowedPackets([Es]);class ja{constructor(e,t){if(this.text=O.removeTrailingSpaces(e).replace(/\r?\n/g,"\r\n"),t&&!(t instanceof sa))throw Error("Invalid signature input");this.signature=t||new sa(new Ks)}getSigningKeyIDs(){const e=[];return this.signature.packets.forEach(function(t){e.push(t.issuerKeyID)}),e}async sign(e,t=[],r=null,n=[],i=new Date,s=[],a=[],o=[],c=L){const u=new As;u.setText(this.text);const h=new sa(await Oa(u,e,t,r,n,i,s,a,o,!0,c));return new ja(this.text,h)}verify(e,t=new Date,r=L){const n=this.signature.packets.filterByTag(F.packet.signature),i=new As;return i.setText(this.text),Ha(n,[i],e,t,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(e=L){const t=this.signature.packets.some(e=>6!==e.version),r={hash:t?Array.from(new Set(this.signature.packets.map(e=>F.read(F.hash,e.hashAlgorithm).toUpperCase()))).join():null,text:this.text,data:this.signature.packets.write()};return re(F.armor.signed,r,void 0,void 0,void 0,t,e)}}async function Va({cleartextMessage:e,config:t,...r}){if(t={...L,...t},!e)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!O.isString(e))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const n=Object.keys(r);if(n.length>0)throw Error("Unknown option: "+n.join(", "));const i=await te(e);if(i.type!==F.armor.signed)throw Error("No cleartext signed message.");const s=await Ks.fromBinary(i.data,_a,t);!function(e,t){const r=[];if(e.forEach(e=>{const t=e.match(/^Hash: (.+)$/);if(!t)throw Error('Only "Hash" header allowed in cleartext signed message');{const e=t[1].replace(/\s/g,"").split(",").map(e=>{try{return F.write(F.hash,e.toLowerCase())}catch(t){throw Error("Unknown hash algorithm in armor header: "+e.toLowerCase())}});r.push(...e)}}),r.length&&!function(e){const r=e=>t=>e.hashAlgorithm===t;for(let n=0;n<t.length;n++)if(t[n].constructor.tag===F.packet.signature&&!e.some(r(t[n])))return!1;return!0}(r))throw Error("Hash algorithm mismatch in armor header and signature")}(i.headers,s);const a=new sa(s);return new ja(i.text,a)}async function qa({text:e,...t}){if(!e)throw Error("createCleartextMessage: must pass options object containing `text`");if(!O.isString(e))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(t);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new ja(e)}async function Ya({userIDs:e=[],passphrase:t,type:r,curve:n,rsaBits:i=4096,keyExpirationTime:s=0,date:a=new Date,subkeys:o=[{}],format:c="armored",config:u,...h}){ho(u={...L,...u}),r||n?(r=r||"ecc",n=n||"curve25519Legacy"):(r=u.v6Keys?"curve25519":"ecc",n="curve25519Legacy"),e=fo(e);const f=Object.keys(h);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(0===e.length&&!u.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&i<u.minRSABits)throw Error(`rsaBits should be at least ${u.minRSABits}, got: ${i}`);const l={userIDs:e,passphrase:t,type:r,rsaBits:i,curve:n,keyExpirationTime:s,date:a,subkeys:o};try{const{key:e,revocationCertificate:t}=await async function(e,t){e.sign=!0,(e=da(e)).subkeys=e.subkeys.map((t,r)=>da(e.subkeys[r],e));let r=[ca(e,t)];r=r.concat(e.subkeys.map(e=>oa(e,t)));const n=await Promise.all(r),i=await Pa(n[0],n.slice(1),e,t),s=await i.getRevocationCertificate(e.date,t);return i.revocationSignatures=[],{key:i,revocationCertificate:s}}(l,u);return e.getKeys().forEach(({keyPacket:e})=>ba(e,u)),{privateKey:go(e,c,u),publicKey:go(e.toPublic(),c,u),revocationCertificate:t}}catch(e){throw O.wrapError("Error generating keypair",e)}}async function Za({privateKey:e,userIDs:t=[],passphrase:r,keyExpirationTime:n=0,date:i,format:s="armored",config:a,...o}){ho(a={...L,...a}),t=fo(t);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===t.length&&6!==e.keyPacket.version)throw Error("UserIDs are required for V4 keys");const u={privateKey:e,userIDs:t,passphrase:r,keyExpirationTime:n,date:i};try{const{key:e,revocationCertificate:t}=await async function(e,t){e=o(e);const{privateKey:r}=e;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every(({keyPacket:e})=>e.isDecrypted()))throw Error("Key is not decrypted");const n=r.keyPacket;e.subkeys||(e.subkeys=await Promise.all(r.subkeys.map(async e=>{const r=e.keyPacket,i={key:n,bind:r},s=await ua(e.bindingSignatures,n,F.signature.subkeyBinding,i,null,t).catch(()=>({}));return{sign:s.keyFlags&&s.keyFlags[0]&F.keyFlags.signData}})));const i=r.subkeys.map(e=>e.keyPacket);if(e.subkeys.length!==i.length)throw Error("Number of subkey options does not match number of subkeys");e.subkeys=e.subkeys.map(t=>o(t,e));const s=await Pa(n,i,e,t),a=await s.getRevocationCertificate(e.date,t);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(e,t={}){return e.keyExpirationTime=e.keyExpirationTime||t.keyExpirationTime,e.passphrase=O.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e}}(u,a);return{privateKey:go(e,s,a),publicKey:go(e.toPublic(),s,a),revocationCertificate:t}}catch(e){throw O.wrapError("Error reformatting keypair",e)}}async function Ja({key:e,revocationCertificate:t,reasonForRevocation:r,date:n=new Date,format:i="armored",config:s,...a}){ho(s={...L,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=t?await e.applyRevocationCertificate(t,n,s):await e.revoke(r,n,s);return a.isPrivate()?{privateKey:go(a,i,s),publicKey:go(a.toPublic(),i,s)}:{privateKey:null,publicKey:go(a,i,s)}}catch(e){throw O.wrapError("Error revoking key",e)}}async function Xa({privateKey:e,passphrase:t,config:r,...n}){ho(r={...L,...r});const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));if(!e.isPrivate())throw Error("Cannot decrypt a public key");const s=e.clone(!0),a=O.isArray(t)?t:[t];try{return await Promise.all(s.getKeys().map(e=>O.anyPromise(a.map(t=>e.keyPacket.decrypt(t))))),await s.validate(r),s}catch(e){throw s.clearPrivateParams(),O.wrapError("Error decrypting private key",e)}}async function Wa({privateKey:e,passphrase:t,config:r,...n}){ho(r={...L,...r});const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));if(!e.isPrivate())throw Error("Cannot encrypt a public key");const s=e.clone(!0),a=s.getKeys(),o=O.isArray(t)?t:Array(a.length).fill(t);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map(async(e,t)=>{const{keyPacket:n}=e;await n.encrypt(o[t],r),n.clearPrivateParams()})),s}catch(e){throw s.clearPrivateParams(),O.wrapError("Error encrypting private key",e)}}async function $a({message:e,encryptionKeys:t,signingKeys:r,passwords:n,sessionKey:i,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:u=[],date:h=new Date,signingUserIDs:f=[],encryptionUserIDs:l=[],signatureNotations:y=[],config:g,...p}){if(ho(g={...L,...g}),ao(e),co(s),t=fo(t),r=fo(r),n=fo(n),c=fo(c),u=fo(u),f=fo(f),l=fo(l),y=fo(y),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const d=Object.keys(p);if(d.length>0)throw Error("Unknown option: "+d.join(", "));r||(r=[]);try{if((r.length||a)&&(e=await e.sign(r,t,a,c,h,f,u,y,g)),e=e.compress(await async function(e=[],t=new Date,r=[],n=L){const i=F.compression.uncompressed,s=n.preferredCompressionAlgorithm,a=await Promise.all(e.map(async function(e,i){const a=(await e.getPrimarySelfSignature(t,r[i],n)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0}));return a.every(Boolean)?s:i}(t,h,l,g),g),e=await e.encrypt(t,n,i,o,u,h,l,g),"object"===s)return e;const p="armored"===s?e.armor(g):e.write();return await lo(p)}catch(e){throw O.wrapError("Error encrypting message",e)}}async function eo({message:e,decryptionKeys:t,passwords:r,sessionKeys:n,verificationKeys:i,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:u,...h}){if(ho(u={...L,...u}),ao(e),i=fo(i),t=fo(t),r=fo(r),n=fo(n),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(h.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const f=Object.keys(h);if(f.length>0)throw Error("Unknown option: "+f.join(", "));try{const h=await e.decrypt(t,r,n,c,u);i||(i=[]);const f={};if(f.signatures=o?await h.verifyDetached(o,i,c,u):await h.verify(i,c,u),f.data="binary"===a?h.getLiteralData():h.getText(),f.filename=h.getFilename(),yo(f,e,...new Set([h,h.unwrapCompressed()])),s){if(0===i.length)throw Error("Verification keys are required to verify message signatures");if(0===f.signatures.length)throw Error("Message is not signed");f.data=b([f.data,Q(async()=>(await O.anyPromise(f.signatures.map(e=>e.verified)),"binary"===a?new Uint8Array:""))])}return f.data=await lo(f.data),f}catch(e){throw O.wrapError("Error decrypting message",e)}}async function to({message:e,signingKeys:t,recipientKeys:r=[],format:n="armored",detached:i=!1,signingKeyIDs:s=[],date:a=new Date,signingUserIDs:o=[],recipientUserIDs:c=[],signatureNotations:u=[],config:h,...f}){if(ho(h={...L,...h}),oo(e),co(n),t=fo(t),s=fo(s),o=fo(o),r=fo(r),c=fo(c),u=fo(u),f.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==f.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const l=Object.keys(f);if(l.length>0)throw Error("Unknown option: "+l.join(", "));if(e instanceof ja&&"binary"===n)throw Error("Cannot return signed cleartext message in binary format");if(e instanceof ja&&i)throw Error("Cannot detach-sign a cleartext message");if(!t||0===t.length)throw Error("No signing keys provided");try{let f;return f=i?await e.signDetached(t,r,void 0,s,a,o,c,u,h):await e.sign(t,r,void 0,s,a,o,c,u,h),"object"===n?f:(f="armored"===n?f.armor(h):f.write(),i&&(f=I(e.packets.write(),async(e,t)=>{await Promise.all([k(f,t),P(e).catch(()=>{})])})),await lo(f))}catch(e){throw O.wrapError("Error signing message",e)}}async function ro({message:e,verificationKeys:t,expectSigned:r=!1,format:n="utf8",signature:i=null,date:s=new Date,config:a,...o}){if(ho(a={...L,...a}),oo(e),t=fo(t),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(e instanceof ja&&"binary"===n)throw Error("Can't return cleartext message data as binary");if(e instanceof ja&&i)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=i?await e.verifyDetached(i,t,s,a):await e.verify(t,s,a),o.data="binary"===n?e.getLiteralData():e.getText(),e.fromStream&&!i&&yo(o,...new Set([e,e.unwrapCompressed()])),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=b([o.data,Q(async()=>(await O.anyPromise(o.signatures.map(e=>e.verified)),"binary"===n?new Uint8Array:""))])}return o.data=await lo(o.data),o}catch(e){throw O.wrapError("Error verifying signed message",e)}}async function no({encryptionKeys:e,date:t=new Date,encryptionUserIDs:r=[],config:n,...i}){if(ho(n={...L,...n}),e=fo(e),r=fo(r),i.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await Na.generateSessionKey(e,t,r,n)}catch(e){throw O.wrapError("Error generating session key",e)}}async function io({data:e,algorithm:t,aeadAlgorithm:r,encryptionKeys:n,passwords:i,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:u=[],config:h,...f}){if(ho(h={...L,...h}),function(e){if(!O.isUint8Array(e))throw Error("Parameter [data] must be of type Uint8Array")}(e),function(e){if(!O.isString(e))throw Error("Parameter [algorithm] must be of type String")}(t),co(s),n=fo(n),i=fo(i),o=fo(o),u=fo(u),f.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const l=Object.keys(f);if(l.length>0)throw Error("Unknown option: "+l.join(", "));if(!(n&&0!==n.length||i&&0!==i.length))throw Error("No encryption keys or passwords provided.");try{return go(await Na.encryptSessionKey(e,t,r,n,i,a,o,c,u,h),s,h)}catch(e){throw O.wrapError("Error encrypting session key",e)}}async function so({message:e,decryptionKeys:t,passwords:r,date:n=new Date,config:i,...s}){if(ho(i={...L,...i}),ao(e),t=fo(t),r=fo(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await e.decryptSessionKeys(t,r,void 0,n,i)}catch(e){throw O.wrapError("Error decrypting session keys",e)}}function ao(e){if(!(e instanceof Na))throw Error("Parameter [message] needs to be of type Message")}function oo(e){if(!(e instanceof ja||e instanceof Na))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function co(e){if("armored"!==e&&"binary"!==e&&"object"!==e)throw Error("Unsupported format "+e)}const uo=Object.keys(L).length;function ho(e){const t=Object.keys(e);if(t.length!==uo)for(const e of t)if(void 0===L[e])throw Error("Unknown config property: "+e)}function fo(e){return e&&!O.isArray(e)&&(e=[e]),e}async function lo(e){return"array"===O.isStream(e)?P(e):e}function yo(e,t,...r){e.data=I(t.packets.stream,async(t,n)=>{await k(e.data,n,{preventClose:!0});const i=T(n);try{await P(t,e=>e),await Promise.all(r.map(e=>P(e.packets.stream,e=>e))),await i.close()}catch(e){await i.abort(e)}})}function go(e,t,r){switch(t){case"object":return e;case"armored":return e.armor(r);case"binary":return e.write();default:throw Error("Unsupported format "+t)}}const po="object"==typeof n&&"crypto"in n?n.crypto:void 0;function Ao(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&"Uint8Array"===e.constructor.name}function wo(e){if(!Number.isSafeInteger(e)||e<0)throw Error("positive integer expected, got "+e)}function mo(e,...t){if(!Ao(e))throw Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw Error("Uint8Array expected of length "+t+", got length="+e.length)}function bo(e){if("function"!=typeof e||"function"!=typeof e.create)throw Error("Hash should be wrapped by utils.createHasher");wo(e.outputLen),wo(e.blockLen)}function ko(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Eo(e,t){mo(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}function vo(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Bo(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Io(e,t){return e<<32-t|e>>>t}function So(e,t){return e<<t|e>>>32-t>>>0}const Ko=(()=>68===new Uint8Array(new Uint32Array([287454020]).buffer)[0])()?e=>e:function(e){for(let r=0;r<e.length;r++)e[r]=(t=e[r])<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255;var t;return e},Co=(()=>"function"==typeof Uint8Array.from([]).toHex&&"function"==typeof Uint8Array.fromHex)(),Do=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Uo(e){if(mo(e),Co)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=Do[e[r]];return t}function Po(e){return e>=48&&e<=57?e-48:e>=65&&e<=70?e-55:e>=97&&e<=102?e-87:void 0}function xo(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);if(Co)return Uint8Array.fromHex(e);const t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);const n=new Uint8Array(r);for(let t=0,i=0;t<r;t++,i+=2){const r=Po(e.charCodeAt(i)),s=Po(e.charCodeAt(i+1));if(void 0===r||void 0===s){const t=e[i]+e[i+1];throw Error('hex string expected, got non-hex character "'+t+'" at index '+i)}n[t]=16*r+s}return n}function Qo(e){return"string"==typeof e&&(e=function(e){if("string"!=typeof e)throw Error("string expected");return new Uint8Array((new TextEncoder).encode(e))}(e)),mo(e),e}function Ro(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];mo(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}class To{}function Mo(e){const t=t=>e().update(Qo(t)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}const Fo=Mo;function Lo(e=32){if(po&&"function"==typeof po.getRandomValues)return po.getRandomValues(new Uint8Array(e));if(po&&"function"==typeof po.randomBytes)return Uint8Array.from(po.randomBytes(e));throw Error("crypto.getRandomValues must be defined")}const No=BigInt(0),Oo=BigInt(1);function Ho(e,t=""){if("boolean"!=typeof e)throw Error((t&&`"${t}"`)+"expected boolean, got type="+typeof e);return e}function zo(e,t,r=""){const n=Ao(e),i=e?.length,s=void 0!==t;if(!n||s&&i!==t)throw Error((r&&`"${r}" `)+"expected Uint8Array"+(s?" of length "+t:"")+", got "+(n?"length="+i:"type="+typeof e));return e}function Go(e){const t=e.toString(16);return 1&t.length?"0"+t:t}function _o(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);return""===e?No:BigInt("0x"+e)}function jo(e){return _o(Uo(e))}function Vo(e){return mo(e),_o(Uo(Uint8Array.from(e).reverse()))}function qo(e,t){return xo(e.toString(16).padStart(2*t,"0"))}function Yo(e,t){return qo(e,t).reverse()}function Zo(e,t,r){let n;if("string"==typeof t)try{n=xo(t)}catch(t){throw Error(e+" must be hex string or Uint8Array, cause: "+t)}else{if(!Ao(t))throw Error(e+" must be hex string or Uint8Array");n=Uint8Array.from(t)}const i=n.length;if("number"==typeof r&&i!==r)throw Error(e+" of length "+r+" expected, got "+i);return n}function Jo(e){return Uint8Array.from(e)}const Xo=e=>"bigint"==typeof e&&No<=e;function Wo(e,t,r,n){if(!function(e,t,r){return Xo(e)&&Xo(t)&&Xo(r)&&t<=e&&e<r}(t,r,n))throw Error("expected valid "+e+": "+r+" <= n < "+n+", got "+t)}function $o(e){let t;for(t=0;e>No;e>>=Oo,t+=1);return t}const ec=e=>(Oo<<BigInt(e))-Oo;function tc(e,t,r={}){if(!e||"object"!=typeof e)throw Error("expected valid options object");function n(t,r,n){const i=e[t];if(n&&void 0===i)return;const s=typeof i;if(s!==r||null===i)throw Error(`param "${t}" is invalid: expected ${r}, got ${s}`)}Object.entries(t).forEach(([e,t])=>n(e,t,!1)),Object.entries(r).forEach(([e,t])=>n(e,t,!0))}function rc(e){const t=new WeakMap;return(r,...n)=>{const i=t.get(r);if(void 0!==i)return i;const s=e(r,...n);return t.set(r,s),s}}const nc=BigInt(0),ic=BigInt(1),sc=BigInt(2),ac=BigInt(3),oc=BigInt(4),cc=BigInt(5),uc=BigInt(7),hc=BigInt(8),fc=BigInt(9),lc=BigInt(16);function yc(e,t){const r=e%t;return r>=nc?r:t+r}function gc(e,t,r){let n=e;for(;t-- >nc;)n*=n,n%=r;return n}function pc(e,t){if(e===nc)throw Error("invert: expected non-zero number");if(t<=nc)throw Error("invert: expected positive modulus, got "+t);let r=yc(e,t),n=t,i=nc,s=ic;for(;r!==nc;){const e=n%r,t=i-s*(n/r);n=r,r=e,i=s,s=t}if(n!==ic)throw Error("invert: does not exist");return yc(i,t)}function dc(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function Ac(e,t){const r=(e.ORDER+ic)/oc,n=e.pow(t,r);return dc(e,n,t),n}function wc(e,t){const r=(e.ORDER-cc)/hc,n=e.mul(t,sc),i=e.pow(n,r),s=e.mul(t,i),a=e.mul(e.mul(s,sc),i),o=e.mul(s,e.sub(a,e.ONE));return dc(e,o,t),o}function mc(e){if(e<ac)throw Error("sqrt is not defined for small field");let t=e-ic,r=0;for(;t%sc===nc;)t/=sc,r++;let n=sc;const i=Bc(e);for(;1===Ec(i,n);)if(n++>1e3)throw Error("Cannot find square root: probably non-prime P");if(1===r)return Ac;let s=i.pow(n,t);const a=(t+ic)/sc;return function(e,n){if(e.is0(n))return n;if(1!==Ec(e,n))throw Error("Cannot find square root");let i=r,o=e.mul(e.ONE,s),c=e.pow(n,t),u=e.pow(n,a);for(;!e.eql(c,e.ONE);){if(e.is0(c))return e.ZERO;let t=1,r=e.sqr(c);for(;!e.eql(r,e.ONE);)if(t++,r=e.sqr(r),t===i)throw Error("Cannot find square root");const n=ic<<BigInt(i-t-1),s=e.pow(o,n);i=t,o=e.sqr(s),c=e.mul(c,o),u=e.mul(u,s)}return u}}const bc=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function kc(e,t,r=!1){const n=Array(t.length).fill(r?e.ZERO:void 0),i=t.reduce((t,r,i)=>e.is0(r)?t:(n[i]=t,e.mul(t,r)),e.ONE),s=e.inv(i);return t.reduceRight((t,r,i)=>e.is0(r)?t:(n[i]=e.mul(t,n[i]),e.mul(t,r)),s),n}function Ec(e,t){const r=(e.ORDER-ic)/sc,n=e.pow(t,r),i=e.eql(n,e.ONE),s=e.eql(n,e.ZERO),a=e.eql(n,e.neg(e.ONE));if(!i&&!s&&!a)throw Error("invalid Legendre symbol result");return i?1:s?0:-1}function vc(e,t){void 0!==t&&wo(t);const r=void 0!==t?t:e.toString(2).length;return{nBitLength:r,nByteLength:Math.ceil(r/8)}}function Bc(e,t,r=!1,n={}){if(e<=nc)throw Error("invalid field: expected ORDER > 0, got "+e);let i,s,a,o=!1;if("object"==typeof t&&null!=t){if(n.sqrt||r)throw Error("cannot specify opts in two arguments");const e=t;e.BITS&&(i=e.BITS),e.sqrt&&(s=e.sqrt),"boolean"==typeof e.isLE&&(r=e.isLE),"boolean"==typeof e.modFromBytes&&(o=e.modFromBytes),a=e.allowedLengths}else"number"==typeof t&&(i=t),n.sqrt&&(s=n.sqrt);const{nBitLength:c,nByteLength:u}=vc(e,i);if(u>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");let h;const f=Object.freeze({ORDER:e,isLE:r,BITS:c,BYTES:u,MASK:ec(c),ZERO:nc,ONE:ic,allowedLengths:a,create:t=>yc(t,e),isValid:t=>{if("bigint"!=typeof t)throw Error("invalid field element: expected bigint, got "+typeof t);return nc<=t&&t<e},is0:e=>e===nc,isValidNot0:e=>!f.is0(e)&&f.isValid(e),isOdd:e=>(e&ic)===ic,neg:t=>yc(-t,e),eql:(e,t)=>e===t,sqr:t=>yc(t*t,e),add:(t,r)=>yc(t+r,e),sub:(t,r)=>yc(t-r,e),mul:(t,r)=>yc(t*r,e),pow:(e,t)=>function(e,t,r){if(r<nc)throw Error("invalid exponent, negatives unsupported");if(r===nc)return e.ONE;if(r===ic)return t;let n=e.ONE,i=t;for(;r>nc;)r&ic&&(n=e.mul(n,i)),i=e.sqr(i),r>>=ic;return n}(f,e,t),div:(t,r)=>yc(t*pc(r,e),e),sqrN:e=>e*e,addN:(e,t)=>e+t,subN:(e,t)=>e-t,mulN:(e,t)=>e*t,inv:t=>pc(t,e),sqrt:s||(t=>(h||(h=function(e){return e%oc===ac?Ac:e%hc===cc?wc:e%lc===fc?function(e){const t=Bc(e),r=mc(e),n=r(t,t.neg(t.ONE)),i=r(t,n),s=r(t,t.neg(n)),a=(e+uc)/lc;return(e,t)=>{let r=e.pow(t,a),o=e.mul(r,n);const c=e.mul(r,i),u=e.mul(r,s),h=e.eql(e.sqr(o),t),f=e.eql(e.sqr(c),t);r=e.cmov(r,o,h),o=e.cmov(u,c,f);const l=e.eql(e.sqr(o),t),y=e.cmov(r,o,l);return dc(e,y,t),y}}(e):mc(e)}(e)),h(f,t))),toBytes:e=>r?Yo(e,u):qo(e,u),fromBytes:(t,n=!0)=>{if(a){if(!a.includes(t.length)||t.length>u)throw Error("Field.fromBytes: expected "+a+" bytes, got "+t.length);const e=new Uint8Array(u);e.set(t,r?0:e.length-t.length),t=e}if(t.length!==u)throw Error("Field.fromBytes: expected "+u+" bytes, got "+t.length);let i=r?Vo(t):jo(t);if(o&&(i=yc(i,e)),!n&&!f.isValid(i))throw Error("invalid field element: outside of range 0..ORDER");return i},invertBatch:e=>kc(f,e),cmov:(e,t,r)=>r?t:e});return Object.freeze(f)}function Ic(e){if("bigint"!=typeof e)throw Error("field order must be bigint");const t=e.toString(2).length;return Math.ceil(t/8)}function Sc(e){const t=Ic(e);return t+Math.ceil(t/2)}function Kc(e,t,r){return e&t^~e&r}function Cc(e,t,r){return e&t^e&r^t&r}class Dc extends To{constructor(e,t,r,n){super(),this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=n,this.buffer=new Uint8Array(e),this.view=Bo(this.buffer)}update(e){ko(this),mo(e=Qo(e));const{view:t,buffer:r,blockLen:n}=this,i=e.length;for(let s=0;s<i;){const a=Math.min(n-this.pos,i-s);if(a!==n)r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===n&&(this.process(t,0),this.pos=0);else{const t=Bo(e);for(;n<=i-s;s+=n)this.process(t,s)}}return this.length+=e.length,this.roundClean(),this}digestInto(e){ko(this),Eo(e,this),this.finished=!0;const{buffer:t,view:r,blockLen:n,isLE:i}=this;let{pos:s}=this;t[s++]=128,vo(this.buffer.subarray(s)),this.padOffset>n-s&&(this.process(r,0),s=0);for(let e=s;e<n;e++)t[e]=0;!function(e,t,r,n){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,n);const i=BigInt(32),s=BigInt(4294967295),a=Number(r>>i&s),o=Number(r&s),c=n?4:0,u=n?0:4;e.setUint32(t+c,a,n),e.setUint32(t+u,o,n)}(r,n-8,BigInt(8*this.length),i),this.process(r,0);const a=Bo(e),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,u=this.get();if(c>u.length)throw Error("_sha2: outputLen bigger than state");for(let e=0;e<c;e++)a.setUint32(4*e,u[e],i)}digest(){const{buffer:e,outputLen:t}=this;this.digestInto(e);const r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());const{blockLen:t,buffer:r,length:n,finished:i,destroyed:s,pos:a}=this;return e.destroyed=s,e.finished=i,e.length=n,e.pos=a,n%t&&e.buffer.set(r),e}clone(){return this._cloneInto()}}const Uc=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Pc=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),xc=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),Qc=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]),Rc=BigInt(2**32-1),Tc=BigInt(32);function Mc(e,t=!1){return t?{h:Number(e&Rc),l:Number(e>>Tc&Rc)}:{h:0|Number(e>>Tc&Rc),l:0|Number(e&Rc)}}function Fc(e,t=!1){const r=e.length;let n=new Uint32Array(r),i=new Uint32Array(r);for(let s=0;s<r;s++){const{h:r,l:a}=Mc(e[s],t);[n[s],i[s]]=[r,a]}return[n,i]}const Lc=(e,t,r)=>e>>>r,Nc=(e,t,r)=>e<<32-r|t>>>r,Oc=(e,t,r)=>e>>>r|t<<32-r,Hc=(e,t,r)=>e<<32-r|t>>>r,zc=(e,t,r)=>e<<64-r|t>>>r-32,Gc=(e,t,r)=>e>>>r-32|t<<64-r;function _c(e,t,r,n){const i=(t>>>0)+(n>>>0);return{h:e+r+(i/2**32|0)|0,l:0|i}}const jc=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),Vc=(e,t,r,n)=>t+r+n+(e/2**32|0)|0,qc=(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),Yc=(e,t,r,n,i)=>t+r+n+i+(e/2**32|0)|0,Zc=(e,t,r,n,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(i>>>0),Jc=(e,t,r,n,i,s)=>t+r+n+i+s+(e/2**32|0)|0,Xc=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Wc=new Uint32Array(64);class $c extends Dc{constructor(e=32){super(64,e,8,!1),this.A=0|Uc[0],this.B=0|Uc[1],this.C=0|Uc[2],this.D=0|Uc[3],this.E=0|Uc[4],this.F=0|Uc[5],this.G=0|Uc[6],this.H=0|Uc[7]}get(){const{A:e,B:t,C:r,D:n,E:i,F:s,G:a,H:o}=this;return[e,t,r,n,i,s,a,o]}set(e,t,r,n,i,s,a,o){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n,this.E=0|i,this.F=0|s,this.G=0|a,this.H=0|o}process(e,t){for(let r=0;r<16;r++,t+=4)Wc[r]=e.getUint32(t,!1);for(let e=16;e<64;e++){const t=Wc[e-15],r=Wc[e-2],n=Io(t,7)^Io(t,18)^t>>>3,i=Io(r,17)^Io(r,19)^r>>>10;Wc[e]=i+Wc[e-7]+n+Wc[e-16]|0}let{A:r,B:n,C:i,D:s,E:a,F:o,G:c,H:u}=this;for(let e=0;e<64;e++){const t=u+(Io(a,6)^Io(a,11)^Io(a,25))+Kc(a,o,c)+Xc[e]+Wc[e]|0,h=(Io(r,2)^Io(r,13)^Io(r,22))+Cc(r,n,i)|0;u=c,c=o,o=a,a=s+t|0,s=i,i=n,n=r,r=t+h|0}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,u=u+this.H|0,this.set(r,n,i,s,a,o,c,u)}roundClean(){vo(Wc)}destroy(){this.set(0,0,0,0,0,0,0,0),vo(this.buffer)}}class eu extends $c{constructor(){super(28),this.A=0|Pc[0],this.B=0|Pc[1],this.C=0|Pc[2],this.D=0|Pc[3],this.E=0|Pc[4],this.F=0|Pc[5],this.G=0|Pc[6],this.H=0|Pc[7]}}const tu=(()=>Fc(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(e=>BigInt(e))))(),ru=(()=>tu[0])(),nu=(()=>tu[1])(),iu=new Uint32Array(80),su=new Uint32Array(80);class au extends Dc{constructor(e=64){super(128,e,16,!1),this.Ah=0|Qc[0],this.Al=0|Qc[1],this.Bh=0|Qc[2],this.Bl=0|Qc[3],this.Ch=0|Qc[4],this.Cl=0|Qc[5],this.Dh=0|Qc[6],this.Dl=0|Qc[7],this.Eh=0|Qc[8],this.El=0|Qc[9],this.Fh=0|Qc[10],this.Fl=0|Qc[11],this.Gh=0|Qc[12],this.Gl=0|Qc[13],this.Hh=0|Qc[14],this.Hl=0|Qc[15]}get(){const{Ah:e,Al:t,Bh:r,Bl:n,Ch:i,Cl:s,Dh:a,Dl:o,Eh:c,El:u,Fh:h,Fl:f,Gh:l,Gl:y,Hh:g,Hl:p}=this;return[e,t,r,n,i,s,a,o,c,u,h,f,l,y,g,p]}set(e,t,r,n,i,s,a,o,c,u,h,f,l,y,g,p){this.Ah=0|e,this.Al=0|t,this.Bh=0|r,this.Bl=0|n,this.Ch=0|i,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|u,this.Fh=0|h,this.Fl=0|f,this.Gh=0|l,this.Gl=0|y,this.Hh=0|g,this.Hl=0|p}process(e,t){for(let r=0;r<16;r++,t+=4)iu[r]=e.getUint32(t),su[r]=e.getUint32(t+=4);for(let e=16;e<80;e++){const t=0|iu[e-15],r=0|su[e-15],n=Oc(t,r,1)^Oc(t,r,8)^Lc(t,0,7),i=Hc(t,r,1)^Hc(t,r,8)^Nc(t,r,7),s=0|iu[e-2],a=0|su[e-2],o=Oc(s,a,19)^zc(s,a,61)^Lc(s,0,6),c=Hc(s,a,19)^Gc(s,a,61)^Nc(s,a,6),u=qc(i,c,su[e-7],su[e-16]),h=Yc(u,n,o,iu[e-7],iu[e-16]);iu[e]=0|h,su[e]=0|u}let{Ah:r,Al:n,Bh:i,Bl:s,Ch:a,Cl:o,Dh:c,Dl:u,Eh:h,El:f,Fh:l,Fl:y,Gh:g,Gl:p,Hh:d,Hl:A}=this;for(let e=0;e<80;e++){const t=Oc(h,f,14)^Oc(h,f,18)^zc(h,f,41),w=Hc(h,f,14)^Hc(h,f,18)^Gc(h,f,41),m=h&l^~h&g,b=Zc(A,w,f&y^~f&p,nu[e],su[e]),k=Jc(b,d,t,m,ru[e],iu[e]),E=0|b,v=Oc(r,n,28)^zc(r,n,34)^zc(r,n,39),B=Hc(r,n,28)^Gc(r,n,34)^Gc(r,n,39),I=r&i^r&a^i&a,S=n&s^n&o^s&o;d=0|g,A=0|p,g=0|l,p=0|y,l=0|h,y=0|f,({h,l:f}=_c(0|c,0|u,0|k,0|E)),c=0|a,u=0|o,a=0|i,o=0|s,i=0|r,s=0|n;const K=jc(E,B,S);r=Vc(K,k,v,I),n=0|K}({h:r,l:n}=_c(0|this.Ah,0|this.Al,0|r,0|n)),({h:i,l:s}=_c(0|this.Bh,0|this.Bl,0|i,0|s)),({h:a,l:o}=_c(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:u}=_c(0|this.Dh,0|this.Dl,0|c,0|u)),({h,l:f}=_c(0|this.Eh,0|this.El,0|h,0|f)),({h:l,l:y}=_c(0|this.Fh,0|this.Fl,0|l,0|y)),({h:g,l:p}=_c(0|this.Gh,0|this.Gl,0|g,0|p)),({h:d,l:A}=_c(0|this.Hh,0|this.Hl,0|d,0|A)),this.set(r,n,i,s,a,o,c,u,h,f,l,y,g,p,d,A)}roundClean(){vo(iu,su)}destroy(){vo(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class ou extends au{constructor(){super(48),this.Ah=0|xc[0],this.Al=0|xc[1],this.Bh=0|xc[2],this.Bl=0|xc[3],this.Ch=0|xc[4],this.Cl=0|xc[5],this.Dh=0|xc[6],this.Dl=0|xc[7],this.Eh=0|xc[8],this.El=0|xc[9],this.Fh=0|xc[10],this.Fl=0|xc[11],this.Gh=0|xc[12],this.Gl=0|xc[13],this.Hh=0|xc[14],this.Hl=0|xc[15]}}const cu=Mo(()=>new $c),uu=Mo(()=>new eu),hu=Mo(()=>new au),fu=Mo(()=>new ou);class lu extends To{constructor(e,t){super(),this.finished=!1,this.destroyed=!1,bo(e);const r=Qo(t);if(this.iHash=e.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const n=this.blockLen,i=new Uint8Array(n);i.set(r.length>n?e.create().update(r).digest():r);for(let e=0;e<i.length;e++)i[e]^=54;this.iHash.update(i),this.oHash=e.create();for(let e=0;e<i.length;e++)i[e]^=106;this.oHash.update(i),vo(i)}update(e){return ko(this),this.iHash.update(e),this}digestInto(e){ko(this),mo(e,this.outputLen),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){const e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));const{oHash:t,iHash:r,finished:n,destroyed:i,blockLen:s,outputLen:a}=this;return e.finished=n,e.destroyed=i,e.blockLen=s,e.outputLen=a,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const yu=(e,t,r)=>new lu(e,t).update(r).digest();yu.create=(e,t)=>new lu(e,t);const gu=BigInt(0),pu=BigInt(1);function du(e,t){const r=t.negate();return e?r:t}function Au(e,t){const r=kc(e.Fp,t.map(e=>e.Z));return t.map((t,n)=>e.fromAffine(t.toAffine(r[n])))}function wu(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function mu(e,t){wu(e,t);const r=2**e;return{windows:Math.ceil(t/e)+1,windowSize:2**(e-1),mask:ec(e),maxNumber:r,shiftBy:BigInt(e)}}function bu(e,t,r){const{windowSize:n,mask:i,maxNumber:s,shiftBy:a}=r;let o=Number(e&i),c=e>>a;o>n&&(o-=s,c+=pu);const u=t*n;return{nextN:c,offset:u+Math.abs(o)-1,isZero:0===o,isNeg:o<0,isNegF:t%2!=0,offsetF:u}}const ku=new WeakMap,Eu=new WeakMap;function vu(e){return Eu.get(e)||1}function Bu(e){if(e!==gu)throw Error("invalid wNAF")}class Iu{constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let n=e;for(;t>gu;)t&pu&&(r=r.add(n)),n=n.double(),t>>=pu;return r}precomputeWindow(e,t){const{windows:r,windowSize:n}=mu(t,this.bits),i=[];let s=e,a=s;for(let e=0;e<r;e++){a=s,i.push(a);for(let e=1;e<n;e++)a=a.add(s),i.push(a);s=a.double()}return i}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let n=this.ZERO,i=this.BASE;const s=mu(e,this.bits);for(let e=0;e<s.windows;e++){const{nextN:a,offset:o,isZero:c,isNeg:u,isNegF:h,offsetF:f}=bu(r,e,s);r=a,c?i=i.add(du(h,t[f])):n=n.add(du(u,t[o]))}return Bu(r),{p:n,f:i}}wNAFUnsafe(e,t,r,n=this.ZERO){const i=mu(e,this.bits);for(let e=0;e<i.windows&&r!==gu;e++){const{nextN:s,offset:a,isZero:o,isNeg:c}=bu(r,e,i);if(r=s,!o){const e=t[a];n=n.add(c?e.negate():e)}}return Bu(r),n}getPrecomputes(e,t,r){let n=ku.get(t);return n||(n=this.precomputeWindow(t,e),1!==e&&("function"==typeof r&&(n=r(n)),ku.set(t,n))),n}cached(e,t,r){const n=vu(e);return this.wNAF(n,this.getPrecomputes(n,e,r),t)}unsafe(e,t,r,n){const i=vu(e);return 1===i?this._unsafeLadder(e,t,n):this.wNAFUnsafe(i,this.getPrecomputes(i,e,r),t,n)}createCache(e,t){wu(t,this.bits),Eu.set(e,t),ku.delete(e)}hasCache(e){return 1!==vu(e)}}function Su(e,t,r,n){!function(e,t){if(!Array.isArray(e))throw Error("array expected");e.forEach((e,r)=>{if(!(e instanceof t))throw Error("invalid point at index "+r)})}(r,e),function(e,t){if(!Array.isArray(e))throw Error("array of scalars expected");e.forEach((e,r)=>{if(!t.isValid(e))throw Error("invalid scalar at index "+r)})}(n,t);const i=r.length,s=n.length;if(i!==s)throw Error("arrays of points and scalars must have equal length");const a=e.ZERO,o=$o(BigInt(i));let c=1;o>12?c=o-3:o>4?c=o-2:o>0&&(c=2);const u=ec(c),h=Array(Number(u)+1).fill(a);let f=a;for(let e=Math.floor((t.BITS-1)/c)*c;e>=0;e-=c){h.fill(a);for(let t=0;t<s;t++){const i=n[t],s=Number(i>>BigInt(e)&u);h[s]=h[s].add(r[t])}let t=a;for(let e=h.length-1,r=a;e>0;e--)r=r.add(h[e]),t=t.add(r);if(f=f.add(t),0!==e)for(let e=0;e<c;e++)f=f.double()}return f}function Ku(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return function(e){tc(e,bc.reduce((e,t)=>(e[t]="function",e),{ORDER:"bigint",MASK:"bigint",BYTES:"number",BITS:"number"}))}(t),t}return Bc(e,{isLE:r})}function Cu(e,t,r={},n){if(void 0===n&&(n="edwards"===e),!t||"object"!=typeof t)throw Error(`expected valid ${e} CURVE object`);for(const e of["p","n","h"]){const r=t[e];if(!("bigint"==typeof r&&r>gu))throw Error(`CURVE.${e} must be positive bigint`)}const i=Ku(t.p,r.Fp,n),s=Ku(t.n,r.Fn,n),a=["Gx","Gy","a","weierstrass"===e?"b":"d"];for(const e of a)if(!i.isValid(t[e]))throw Error(`CURVE.${e} must be valid field element of CURVE.Fp`);return{CURVE:t=Object.freeze(Object.assign({},t)),Fp:i,Fn:s}}const Du=(e,t)=>(e+(e>=0?t:-t)/Tu)/t;function Uu(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function Pu(e,t){const r={};for(let n of Object.keys(t))r[n]=void 0===e[n]?t[n]:e[n];return Ho(r.lowS,"lowS"),Ho(r.prehash,"prehash"),void 0!==r.format&&Uu(r.format),r}const xu={Err:class extends Error{constructor(e=""){super(e)}},_tlv:{encode:(e,t)=>{const{Err:r}=xu;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(1&t.length)throw new r("tlv.encode: unpadded data");const n=t.length/2,i=Go(n);if(i.length/2&128)throw new r("tlv.encode: long form length too big");const s=n>127?Go(i.length/2|128):"";return Go(e)+s+i+t},decode(e,t){const{Err:r}=xu;let n=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[n++]!==e)throw new r("tlv.decode: wrong tlv");const i=t[n++];let s=0;if(128&i){const e=127&i;if(!e)throw new r("tlv.decode(long): indefinite length not supported");if(e>4)throw new r("tlv.decode(long): byte length is too big");const a=t.subarray(n,n+e);if(a.length!==e)throw new r("tlv.decode: length bytes not complete");if(0===a[0])throw new r("tlv.decode(long): zero leftmost byte");for(const e of a)s=s<<8|e;if(n+=e,s<128)throw new r("tlv.decode(long): not minimal encoding")}else s=i;const a=t.subarray(n,n+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(n+s)}}},_int:{encode(e){const{Err:t}=xu;if(e<Qu)throw new t("integer: negative integers are not allowed");let r=Go(e);if(8&Number.parseInt(r[0],16)&&(r="00"+r),1&r.length)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){const{Err:t}=xu;if(128&e[0])throw new t("invalid signature integer: negative");if(0===e[0]&&!(128&e[1]))throw new t("invalid signature integer: unnecessary leading zero");return jo(e)}},toSig(e){const{Err:t,_int:r,_tlv:n}=xu,i=Zo("signature",e),{v:s,l:a}=n.decode(48,i);if(a.length)throw new t("invalid signature: left bytes after parsing");const{v:o,l:c}=n.decode(2,s),{v:u,l:h}=n.decode(2,c);if(h.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(o),s:r.decode(u)}},hexFromSig(e){const{_tlv:t,_int:r}=xu,n=t.encode(2,r.encode(e.r))+t.encode(2,r.encode(e.s));return t.encode(48,n)}},Qu=BigInt(0),Ru=BigInt(1),Tu=BigInt(2),Mu=BigInt(3),Fu=BigInt(4);function Lu(e,t){const{BYTES:r}=e;let n;if("bigint"==typeof t)n=t;else{let i=Zo("private key",t);try{n=e.fromBytes(i)}catch(e){throw Error(`invalid private key: expected ui8a of size ${r}, got ${typeof t}`)}}if(!e.isValidNot0(n))throw Error("invalid private key: out of range [1..N-1]");return n}function Nu(e){return Uint8Array.of(e?2:3)}function Ou(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function Hu(e){const{CURVE:t,curveOpts:r,hash:n,ecdsaOpts:i}=function(e){const{CURVE:t,curveOpts:r}=function(e){const t={a:e.a,b:e.b,p:e.Fp.ORDER,n:e.n,h:e.h,Gx:e.Gx,Gy:e.Gy},r=e.Fp;let n=e.allowedPrivateKeyLengths?Array.from(new Set(e.allowedPrivateKeyLengths.map(e=>Math.ceil(e/2)))):void 0;return{CURVE:t,curveOpts:{Fp:r,Fn:Bc(t.n,{BITS:e.nBitLength,allowedLengths:n,modFromBytes:e.wrapPrivateKey}),allowInfinityPoint:e.allowInfinityPoint,endo:e.endo,isTorsionFree:e.isTorsionFree,clearCofactor:e.clearCofactor,fromBytes:e.fromBytes,toBytes:e.toBytes}}}(e),n={hmac:e.hmac,randomBytes:e.randomBytes,lowS:e.lowS,bits2int:e.bits2int,bits2int_modN:e.bits2int_modN};return{CURVE:t,curveOpts:r,hash:e.hash,ecdsaOpts:n}}(e);return function(e,t){const r=t.Point;return Object.assign({},t,{ProjectivePoint:r,CURVE:Object.assign({},e,vc(r.Fn.ORDER,r.Fn.BITS))})}(e,function(e,t,r={}){bo(t),tc(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"});const n=r.randomBytes||Lo,i=r.hmac||((e,...r)=>yu(t,e,Ro(...r))),{Fp:s,Fn:a}=e,{ORDER:o,BITS:c}=a,{keygen:u,getPublicKey:h,getSharedSecret:f,utils:l,lengths:y}=function(e,t={}){const{Fn:r}=e,n=t.randomBytes||Lo,i=Object.assign(Ou(e.Fp,r),{seed:Sc(r.ORDER)});function s(e){try{return!!Lu(r,e)}catch(e){return!1}}function a(e=n(i.seed)){return function(e,t,r=!1){const n=e.length,i=Ic(t),s=Sc(t);if(n<16||n<s||n>1024)throw Error("expected "+s+"-1024 bytes of input, got "+n);const a=yc(r?Vo(e):jo(e),t-ic)+ic;return r?Yo(a,i):qo(a,i)}(zo(e,i.seed,"seed"),r.ORDER)}function o(t,n=!0){return e.BASE.multiply(Lu(r,t)).toBytes(n)}function c(t){if("bigint"==typeof t)return!1;if(t instanceof e)return!0;const{secretKey:n,publicKey:s,publicKeyUncompressed:a}=i;if(r.allowedLengths||n===s)return;const o=Zo("key",t).length;return o===s||o===a}const u={isValidSecretKey:s,isValidPublicKey:function(t,r){const{publicKey:n,publicKeyUncompressed:s}=i;try{const i=t.length;return!(!0===r&&i!==n||!1===r&&i!==s||!e.fromBytes(t))}catch(e){return!1}},randomSecretKey:a,isValidPrivateKey:s,randomPrivateKey:a,normPrivateKeyToScalar:e=>Lu(r,e),precompute:(t=8,r=e.BASE)=>r.precompute(t,!1)};return Object.freeze({getPublicKey:o,getSharedSecret:function(t,n,i=!0){if(!0===c(t))throw Error("first arg must be private key");if(!1===c(n))throw Error("second arg must be public key");const s=Lu(r,t);return e.fromHex(n).multiply(s).toBytes(i)},keygen:function(e){const t=a(e);return{secretKey:t,publicKey:o(t)}},Point:e,utils:u,lengths:i})}(e,r),g={prehash:!1,lowS:"boolean"==typeof r.lowS&&r.lowS,format:void 0,extraEntropy:!1},p="compact";function d(e){return e>o>>Ru}function A(e,t){if(!a.isValidNot0(t))throw Error(`invalid signature ${e}: out of range 1..Point.Fn.ORDER`);return t}class w{constructor(e,t,r){this.r=A("r",e),this.s=A("s",t),null!=r&&(this.recovery=r),Object.freeze(this)}static fromBytes(e,t=p){let r;if(function(e,t){Uu(t);const r=y.signature;zo(e,"compact"===t?r:"recovered"===t?r+1:void 0,t+" signature")}(e,t),"der"===t){const{r:t,s:r}=xu.toSig(zo(e));return new w(t,r)}"recovered"===t&&(r=e[0],t="compact",e=e.subarray(1));const n=a.BYTES,i=e.subarray(0,n),s=e.subarray(n,2*n);return new w(a.fromBytes(i),a.fromBytes(s),r)}static fromHex(e,t){return this.fromBytes(xo(e),t)}addRecoveryBit(e){return new w(this.r,this.s,e)}recoverPublicKey(t){const r=s.ORDER,{r:n,s:i,recovery:c}=this;if(null==c||![0,1,2,3].includes(c))throw Error("recovery id invalid");if(o*Tu<r&&c>1)throw Error("recovery id is ambiguous for h>1 curve");const u=2===c||3===c?n+o:n;if(!s.isValid(u))throw Error("recovery id 2 or 3 invalid");const h=s.toBytes(u),f=e.fromBytes(Ro(Nu(!(1&c)),h)),l=a.inv(u),y=b(Zo("msgHash",t)),g=a.create(-y*l),p=a.create(i*l),d=e.BASE.multiplyUnsafe(g).add(f.multiplyUnsafe(p));if(d.is0())throw Error("point at infinify");return d.assertValidity(),d}hasHighS(){return d(this.s)}toBytes(e=p){if(Uu(e),"der"===e)return xo(xu.hexFromSig(this));const t=a.toBytes(this.r),r=a.toBytes(this.s);if("recovered"===e){if(null==this.recovery)throw Error("recovery bit must be present");return Ro(Uint8Array.of(this.recovery),t,r)}return Ro(t,r)}toHex(e){return Uo(this.toBytes(e))}assertValidity(){}static fromCompact(e){return w.fromBytes(Zo("sig",e),"compact")}static fromDER(e){return w.fromBytes(Zo("sig",e),"der")}normalizeS(){return this.hasHighS()?new w(this.r,a.neg(this.s),this.recovery):this}toDERRawBytes(){return this.toBytes("der")}toDERHex(){return Uo(this.toBytes("der"))}toCompactRawBytes(){return this.toBytes("compact")}toCompactHex(){return Uo(this.toBytes("compact"))}}const m=r.bits2int||function(e){if(e.length>8192)throw Error("input is too large");const t=jo(e),r=8*e.length-c;return r>0?t>>BigInt(r):t},b=r.bits2int_modN||function(e){return a.create(m(e))},k=ec(c);function E(e){return Wo("num < 2^"+c,e,Qu,k),a.toBytes(e)}function v(e,r){return zo(e,void 0,"message"),r?zo(t(e),void 0,"prehashed message"):e}return Object.freeze({keygen:u,getPublicKey:h,getSharedSecret:f,utils:l,lengths:y,Point:e,sign:function(r,s,o={}){r=Zo("message",r);const{seed:c,k2sig:u}=function(t,r,i){if(["recovered","canonical"].some(e=>e in i))throw Error("sign() legacy options not supported");const{lowS:s,prehash:o,extraEntropy:c}=Pu(i,g);t=v(t,o);const u=b(t),h=Lu(a,r),f=[E(h),E(u)];if(null!=c&&!1!==c){const e=!0===c?n(y.secretKey):c;f.push(Zo("extraEntropy",e))}const l=Ro(...f),p=u;return{seed:l,k2sig:function(t){const r=m(t);if(!a.isValidNot0(r))return;const n=a.inv(r),i=e.BASE.multiply(r).toAffine(),o=a.create(i.x);if(o===Qu)return;const c=a.create(n*a.create(p+o*h));if(c===Qu)return;let u=(i.x===o?0:2)|Number(i.y&Ru),f=c;return s&&d(c)&&(f=a.neg(c),u^=1),new w(o,f,u)}}}(r,s,o),h=function(e,t,r){if("number"!=typeof e||e<2)throw Error("hashLen must be a number");if("number"!=typeof t||t<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");const n=e=>new Uint8Array(e),i=e=>Uint8Array.of(e);let s=n(e),a=n(e),o=0;const c=()=>{s.fill(1),a.fill(0),o=0},u=(...e)=>r(a,s,...e),h=(e=n(0))=>{a=u(i(0),e),s=u(),0!==e.length&&(a=u(i(1),e),s=u())},f=()=>{if(o++>=1e3)throw Error("drbg: tried 1000 values");let e=0;const r=[];for(;e<t;){s=u();const t=s.slice();r.push(t),e+=s.length}return Ro(...r)};return(e,t)=>{let r;for(c(),h(e);!(r=t(f()));)h();return c(),r}}(t.outputLen,a.BYTES,i);return h(c,u)},verify:function(t,r,n,i={}){const{lowS:s,prehash:o,format:c}=Pu(i,g);if(n=Zo("publicKey",n),r=v(Zo("message",r),o),"strict"in i)throw Error("options.strict was renamed to lowS");const u=void 0===c?function(e){let t;const r="string"==typeof e||Ao(e),n=!r&&null!==e&&"object"==typeof e&&"bigint"==typeof e.r&&"bigint"==typeof e.s;if(!r&&!n)throw Error("invalid signature, expected Uint8Array, hex string or Signature instance");if(n)t=new w(e.r,e.s);else if(r){try{t=w.fromBytes(Zo("sig",e),"der")}catch(e){if(!(e instanceof xu.Err))throw e}if(!t)try{t=w.fromBytes(Zo("sig",e),"compact")}catch(e){return!1}}return t||!1}(t):w.fromBytes(Zo("sig",t),c);if(!1===u)return!1;try{const t=e.fromBytes(n);if(s&&u.hasHighS())return!1;const{r:i,s:o}=u,c=b(r),h=a.inv(o),f=a.create(c*h),l=a.create(i*h),y=e.BASE.multiplyUnsafe(f).add(t.multiplyUnsafe(l));return!y.is0()&&a.create(y.x)===i}catch(e){return!1}},recoverPublicKey:function(e,t,r={}){const{prehash:n}=Pu(r,g);return t=v(t,n),w.fromBytes(e,"recovered").recoverPublicKey(t).toBytes()},Signature:w,hash:t})}(function(e,t={}){const r=Cu("weierstrass",e,t),{Fp:n,Fn:i}=r;let s=r.CURVE;const{h:a,n:o}=s;tc(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object",wrapPrivateKey:"boolean"});const{endo:c}=t;if(c&&(!n.is0(s.a)||"bigint"!=typeof c.beta||!Array.isArray(c.basises)))throw Error('invalid endo: expected "beta": bigint and "basises": array');const u=Ou(n,i);function h(){if(!n.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}const f=t.toBytes||function(e,t,r){const{x:i,y:s}=t.toAffine(),a=n.toBytes(i);return Ho(r,"isCompressed"),r?(h(),Ro(Nu(!n.isOdd(s)),a)):Ro(Uint8Array.of(4),a,n.toBytes(s))},l=t.fromBytes||function(e){zo(e,void 0,"Point");const{publicKey:t,publicKeyUncompressed:r}=u,i=e.length,s=e[0],a=e.subarray(1);if(i!==t||2!==s&&3!==s){if(i===r&&4===s){const e=n.BYTES,t=n.fromBytes(a.subarray(0,e)),r=n.fromBytes(a.subarray(e,2*e));if(!g(t,r))throw Error("bad point: is not on curve");return{x:t,y:r}}throw Error(`bad point: got length ${i}, expected compressed=${t} or uncompressed=${r}`)}{const t=n.fromBytes(a);if(!n.isValid(t))throw Error("bad point: is not on curve, wrong x");const r=y(t);let i;try{i=n.sqrt(r)}catch(e){const t=e instanceof Error?": "+e.message:"";throw Error("bad point: is not on curve, sqrt error"+t)}return h(),!(1&~s)!==n.isOdd(i)&&(i=n.neg(i)),{x:t,y:i}}};function y(e){const t=n.sqr(e),r=n.mul(t,e);return n.add(n.add(r,n.mul(e,s.a)),s.b)}function g(e,t){const r=n.sqr(t),i=y(e);return n.eql(r,i)}if(!g(s.Gx,s.Gy))throw Error("bad curve params: generator point");const p=n.mul(n.pow(s.a,Mu),Fu),d=n.mul(n.sqr(s.b),BigInt(27));if(n.is0(n.add(p,d)))throw Error("bad curve params: a or b");function A(e,t,r=!1){if(!n.isValid(t)||r&&n.is0(t))throw Error("bad point coordinate "+e);return t}function w(e){if(!(e instanceof v))throw Error("ProjectivePoint expected")}function m(e){if(!c||!c.basises)throw Error("no endo");return function(e,t,r){const[[n,i],[s,a]]=t,o=Du(a*e,r),c=Du(-i*e,r);let u=e-o*n-c*s,h=-o*i-c*a;const f=u<Qu,l=h<Qu;f&&(u=-u),l&&(h=-h);const y=ec(Math.ceil($o(r)/2))+Ru;if(u<Qu||u>=y||h<Qu||h>=y)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:f,k1:u,k2neg:l,k2:h}}(e,c.basises,i.ORDER)}const b=rc((e,t)=>{const{X:r,Y:i,Z:s}=e;if(n.eql(s,n.ONE))return{x:r,y:i};const a=e.is0();null==t&&(t=a?n.ONE:n.inv(s));const o=n.mul(r,t),c=n.mul(i,t),u=n.mul(s,t);if(a)return{x:n.ZERO,y:n.ZERO};if(!n.eql(u,n.ONE))throw Error("invZ was invalid");return{x:o,y:c}}),k=rc(e=>{if(e.is0()){if(t.allowInfinityPoint&&!n.is0(e.Y))return;throw Error("bad point: ZERO")}const{x:r,y:i}=e.toAffine();if(!n.isValid(r)||!n.isValid(i))throw Error("bad point: x or y not field elements");if(!g(r,i))throw Error("bad point: equation left != right");if(!e.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function E(e,t,r,i,s){return r=new v(n.mul(r.X,e),r.Y,r.Z),t=du(i,t),r=du(s,r),t.add(r)}class v{constructor(e,t,r){this.X=A("x",e),this.Y=A("y",t,!0),this.Z=A("z",r),Object.freeze(this)}static CURVE(){return s}static fromAffine(e){const{x:t,y:r}=e||{};if(!e||!n.isValid(t)||!n.isValid(r))throw Error("invalid affine point");if(e instanceof v)throw Error("projective point not allowed");return n.is0(t)&&n.is0(r)?v.ZERO:new v(t,r,n.ONE)}static fromBytes(e){const t=v.fromAffine(l(zo(e,void 0,"point")));return t.assertValidity(),t}static fromHex(e){return v.fromBytes(Zo("pointHex",e))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(e=8,t=!0){return I.createCache(this,e),t||this.multiply(Mu),this}assertValidity(){k(this)}hasEvenY(){const{y:e}=this.toAffine();if(!n.isOdd)throw Error("Field doesn't support isOdd");return!n.isOdd(e)}equals(e){w(e);const{X:t,Y:r,Z:i}=this,{X:s,Y:a,Z:o}=e,c=n.eql(n.mul(t,o),n.mul(s,i)),u=n.eql(n.mul(r,o),n.mul(a,i));return c&&u}negate(){return new v(this.X,n.neg(this.Y),this.Z)}double(){const{a:e,b:t}=s,r=n.mul(t,Mu),{X:i,Y:a,Z:o}=this;let c=n.ZERO,u=n.ZERO,h=n.ZERO,f=n.mul(i,i),l=n.mul(a,a),y=n.mul(o,o),g=n.mul(i,a);return g=n.add(g,g),h=n.mul(i,o),h=n.add(h,h),c=n.mul(e,h),u=n.mul(r,y),u=n.add(c,u),c=n.sub(l,u),u=n.add(l,u),u=n.mul(c,u),c=n.mul(g,c),h=n.mul(r,h),y=n.mul(e,y),g=n.sub(f,y),g=n.mul(e,g),g=n.add(g,h),h=n.add(f,f),f=n.add(h,f),f=n.add(f,y),f=n.mul(f,g),u=n.add(u,f),y=n.mul(a,o),y=n.add(y,y),f=n.mul(y,g),c=n.sub(c,f),h=n.mul(y,l),h=n.add(h,h),h=n.add(h,h),new v(c,u,h)}add(e){w(e);const{X:t,Y:r,Z:i}=this,{X:a,Y:o,Z:c}=e;let u=n.ZERO,h=n.ZERO,f=n.ZERO;const l=s.a,y=n.mul(s.b,Mu);let g=n.mul(t,a),p=n.mul(r,o),d=n.mul(i,c),A=n.add(t,r),m=n.add(a,o);A=n.mul(A,m),m=n.add(g,p),A=n.sub(A,m),m=n.add(t,i);let b=n.add(a,c);return m=n.mul(m,b),b=n.add(g,d),m=n.sub(m,b),b=n.add(r,i),u=n.add(o,c),b=n.mul(b,u),u=n.add(p,d),b=n.sub(b,u),f=n.mul(l,m),u=n.mul(y,d),f=n.add(u,f),u=n.sub(p,f),f=n.add(p,f),h=n.mul(u,f),p=n.add(g,g),p=n.add(p,g),d=n.mul(l,d),m=n.mul(y,m),p=n.add(p,d),d=n.sub(g,d),d=n.mul(l,d),m=n.add(m,d),g=n.mul(p,m),h=n.add(h,g),g=n.mul(b,m),u=n.mul(A,u),u=n.sub(u,g),g=n.mul(A,p),f=n.mul(b,f),f=n.add(f,g),new v(u,h,f)}subtract(e){return this.add(e.negate())}is0(){return this.equals(v.ZERO)}multiply(e){const{endo:r}=t;if(!i.isValidNot0(e))throw Error("invalid scalar: out of range");let n,s;const a=e=>I.cached(this,e,e=>Au(v,e));if(r){const{k1neg:t,k1:i,k2neg:o,k2:c}=m(e),{p:u,f:h}=a(i),{p:f,f:l}=a(c);s=h.add(l),n=E(r.beta,u,f,t,o)}else{const{p:t,f:r}=a(e);n=t,s=r}return Au(v,[n,s])[0]}multiplyUnsafe(e){const{endo:r}=t,n=this;if(!i.isValid(e))throw Error("invalid scalar: out of range");if(e===Qu||n.is0())return v.ZERO;if(e===Ru)return n;if(I.hasCache(this))return this.multiply(e);if(r){const{k1neg:t,k1:i,k2neg:s,k2:a}=m(e),{p1:o,p2:c}=function(e,t,r,n){let i=t,s=e.ZERO,a=e.ZERO;for(;r>gu||n>gu;)r&pu&&(s=s.add(i)),n&pu&&(a=a.add(i)),i=i.double(),r>>=pu,n>>=pu;return{p1:s,p2:a}}(v,n,i,a);return E(r.beta,o,c,t,s)}return I.unsafe(n,e)}multiplyAndAddUnsafe(e,t,r){const n=this.multiplyUnsafe(t).add(e.multiplyUnsafe(r));return n.is0()?void 0:n}toAffine(e){return b(this,e)}isTorsionFree(){const{isTorsionFree:e}=t;return a===Ru||(e?e(v,this):I.unsafe(this,o).is0())}clearCofactor(){const{clearCofactor:e}=t;return a===Ru?this:e?e(v,this):this.multiplyUnsafe(a)}isSmallOrder(){return this.multiplyUnsafe(a).is0()}toBytes(e=!0){return Ho(e,"isCompressed"),this.assertValidity(),f(v,this,e)}toHex(e=!0){return Uo(this.toBytes(e))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}get px(){return this.X}get py(){return this.X}get pz(){return this.Z}toRawBytes(e=!0){return this.toBytes(e)}_setWindowSize(e){this.precompute(e)}static normalizeZ(e){return Au(v,e)}static msm(e,t){return Su(v,i,e,t)}static fromPrivateKey(e){return v.BASE.multiply(Lu(i,e))}}v.BASE=new v(s.Gx,s.Gy,n.ONE),v.ZERO=new v(n.ZERO,n.ONE,n.ZERO),v.Fp=n,v.Fn=i;const B=i.BITS,I=new Iu(v,t.endo?Math.ceil(B/2):B);return v.BASE.precompute(8),v}(t,r),n,i))}function zu(e,t){const r=t=>Hu({...e,hash:t});return{...r(t),create:r}}const Gu={p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")},_u={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")},ju={p:BigInt("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),n:BigInt("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),h:BigInt(1),a:BigInt("0x1fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffc"),b:BigInt("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Gx:BigInt("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:BigInt("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650")},Vu=Bc(Gu.p),qu=Bc(_u.p),Yu=Bc(ju.p),Zu=zu({...Gu,Fp:Vu,lowS:!1},cu),Ju=zu({..._u,Fp:qu,lowS:!1},fu),Xu=zu({...ju,Fp:Yu,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},hu),Wu=BigInt(0),$u=BigInt(1),eh=BigInt(2),th=BigInt(7),rh=BigInt(256),nh=BigInt(113),ih=[],sh=[],ah=[];for(let e=0,t=$u,r=1,n=0;e<24;e++){[r,n]=[n,(2*r+3*n)%5],ih.push(2*(5*n+r)),sh.push((e+1)*(e+2)/2%64);let i=Wu;for(let e=0;e<7;e++)t=(t<<$u^(t>>th)*nh)%rh,t&eh&&(i^=$u<<($u<<BigInt(e))-$u);ah.push(i)}const oh=Fc(ah,!0),ch=oh[0],uh=oh[1],hh=(e,t,r)=>r>32?((e,t,r)=>t<<r-32|e>>>64-r)(e,t,r):((e,t,r)=>e<<r|t>>>32-r)(e,t,r),fh=(e,t,r)=>r>32?((e,t,r)=>e<<r-32|t>>>64-r)(e,t,r):((e,t,r)=>t<<r|e>>>32-r)(e,t,r);class lh extends To{constructor(e,t,r,n=!1,i=24){if(super(),this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,this.enableXOF=!1,this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=n,this.rounds=i,wo(r),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}clone(){return this._cloneInto()}keccak(){Ko(this.state32),function(e,t=24){const r=new Uint32Array(10);for(let n=24-t;n<24;n++){for(let t=0;t<10;t++)r[t]=e[t]^e[t+10]^e[t+20]^e[t+30]^e[t+40];for(let t=0;t<10;t+=2){const n=(t+8)%10,i=(t+2)%10,s=r[i],a=r[i+1],o=hh(s,a,1)^r[n],c=fh(s,a,1)^r[n+1];for(let r=0;r<50;r+=10)e[t+r]^=o,e[t+r+1]^=c}let t=e[2],i=e[3];for(let r=0;r<24;r++){const n=sh[r],s=hh(t,i,n),a=fh(t,i,n),o=ih[r];t=e[o],i=e[o+1],e[o]=s,e[o+1]=a}for(let t=0;t<50;t+=10){for(let n=0;n<10;n++)r[n]=e[t+n];for(let n=0;n<10;n++)e[t+n]^=~r[(n+2)%10]&r[(n+4)%10]}e[0]^=ch[n],e[1]^=uh[n]}vo(r)}(this.state32,this.rounds),Ko(this.state32),this.posOut=0,this.pos=0}update(e){ko(this),mo(e=Qo(e));const{blockLen:t,state:r}=this,n=e.length;for(let i=0;i<n;){const s=Math.min(t-this.pos,n-i);for(let t=0;t<s;t++)r[this.pos++]^=e[i++];this.pos===t&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:e,suffix:t,pos:r,blockLen:n}=this;e[r]^=t,128&t&&r===n-1&&this.keccak(),e[n-1]^=128,this.keccak()}writeInto(e){ko(this,!1),mo(e),this.finish();const t=this.state,{blockLen:r}=this;for(let n=0,i=e.length;n<i;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,i-n);e.set(t.subarray(this.posOut,this.posOut+s),n),this.posOut+=s,n+=s}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return wo(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Eo(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,vo(this.state)}_cloneInto(e){const{blockLen:t,suffix:r,outputLen:n,rounds:i,enableXOF:s}=this;return e||(e=new lh(t,r,n,s,i)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=i,e.suffix=r,e.outputLen=n,e.enableXOF=s,e.destroyed=this.destroyed,e}}const yh=(e,t,r)=>Mo(()=>new lh(t,e,r)),gh=(()=>yh(6,136,32))(),ph=(()=>yh(6,72,64))(),dh=(()=>function(e){const t=(t,r)=>e(r).update(Qo(t)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=t=>e(t),t}((e={})=>new lh(136,31,void 0===e.dkLen?32:e.dkLen,!0)))(),Ah=BigInt(0),wh=BigInt(1),mh=BigInt(2),bh=BigInt(8);function kh(e,t={}){const r=Cu("edwards",e,t,t.FpFnLE),{Fp:n,Fn:i}=r;let s=r.CURVE;const{h:a}=s;tc(t,{},{uvRatio:"function"});const o=mh<<BigInt(8*i.BYTES)-wh,c=e=>n.create(e),u=t.uvRatio||((e,t)=>{try{return{isValid:!0,value:n.sqrt(n.div(e,t))}}catch(e){return{isValid:!1,value:Ah}}});if(!function(e,t,r,n){const i=e.sqr(r),s=e.sqr(n),a=e.add(e.mul(t.a,i),s),o=e.add(e.ONE,e.mul(t.d,e.mul(i,s)));return e.eql(a,o)}(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function h(e,t,r=!1){return Wo("coordinate "+e,t,r?wh:Ah,o),t}function f(e){if(!(e instanceof g))throw Error("ExtendedPoint expected")}const l=rc((e,t)=>{const{X:r,Y:i,Z:s}=e,a=e.is0();null==t&&(t=a?bh:n.inv(s));const o=c(r*t),u=c(i*t),h=n.mul(s,t);if(a)return{x:Ah,y:wh};if(h!==wh)throw Error("invZ was invalid");return{x:o,y:u}}),y=rc(e=>{const{a:t,d:r}=s;if(e.is0())throw Error("bad point: ZERO");const{X:n,Y:i,Z:a,T:o}=e,u=c(n*n),h=c(i*i),f=c(a*a),l=c(f*f),y=c(u*t);if(c(f*c(y+h))!==c(l+c(r*c(u*h))))throw Error("bad point: equation left != right (1)");if(c(n*i)!==c(a*o))throw Error("bad point: equation left != right (2)");return!0});class g{constructor(e,t,r,n){this.X=h("x",e),this.Y=h("y",t),this.Z=h("z",r,!0),this.T=h("t",n),Object.freeze(this)}static CURVE(){return s}static fromAffine(e){if(e instanceof g)throw Error("extended point not allowed");const{x:t,y:r}=e||{};return h("x",t),h("y",r),new g(t,r,wh,c(t*r))}static fromBytes(e,t=!1){const r=n.BYTES,{a:i,d:a}=s;e=Jo(zo(e,r,"point")),Ho(t,"zip215");const h=Jo(e),f=e[r-1];h[r-1]=-129&f;const l=Vo(h),y=t?o:n.ORDER;Wo("point.y",l,Ah,y);const p=c(l*l),d=c(p-wh),A=c(a*p-i);let{isValid:w,value:m}=u(d,A);if(!w)throw Error("bad point: invalid y coordinate");const b=(m&wh)===wh,k=!!(128&f);if(!t&&m===Ah&&k)throw Error("bad point: x=0 and x_0=1");return k!==b&&(m=c(-m)),g.fromAffine({x:m,y:l})}static fromHex(e,t=!1){return g.fromBytes(Zo("point",e),t)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(e=8,t=!0){return p.createCache(this,e),t||this.multiply(mh),this}assertValidity(){y(this)}equals(e){f(e);const{X:t,Y:r,Z:n}=this,{X:i,Y:s,Z:a}=e,o=c(t*a),u=c(i*n),h=c(r*a),l=c(s*n);return o===u&&h===l}is0(){return this.equals(g.ZERO)}negate(){return new g(c(-this.X),this.Y,this.Z,c(-this.T))}double(){const{a:e}=s,{X:t,Y:r,Z:n}=this,i=c(t*t),a=c(r*r),o=c(mh*c(n*n)),u=c(e*i),h=t+r,f=c(c(h*h)-i-a),l=u+a,y=l-o,p=u-a,d=c(f*y),A=c(l*p),w=c(f*p),m=c(y*l);return new g(d,A,m,w)}add(e){f(e);const{a:t,d:r}=s,{X:n,Y:i,Z:a,T:o}=this,{X:u,Y:h,Z:l,T:y}=e,p=c(n*u),d=c(i*h),A=c(o*r*y),w=c(a*l),m=c((n+i)*(u+h)-p-d),b=w-A,k=w+A,E=c(d-t*p),v=c(m*b),B=c(k*E),I=c(m*E),S=c(b*k);return new g(v,B,S,I)}subtract(e){return this.add(e.negate())}multiply(e){if(!i.isValidNot0(e))throw Error("invalid scalar: expected 1 <= sc < curve.n");const{p:t,f:r}=p.cached(this,e,e=>Au(g,e));return Au(g,[t,r])[0]}multiplyUnsafe(e,t=g.ZERO){if(!i.isValid(e))throw Error("invalid scalar: expected 0 <= sc < curve.n");return e===Ah?g.ZERO:this.is0()||e===wh?this:p.unsafe(this,e,e=>Au(g,e),t)}isSmallOrder(){return this.multiplyUnsafe(a).is0()}isTorsionFree(){return p.unsafe(this,s.n).is0()}toAffine(e){return l(this,e)}clearCofactor(){return a===wh?this:this.multiplyUnsafe(a)}toBytes(){const{x:e,y:t}=this.toAffine(),r=n.toBytes(t);return r[r.length-1]|=e&wh?128:0,r}toHex(){return Uo(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}get ex(){return this.X}get ey(){return this.Y}get ez(){return this.Z}get et(){return this.T}static normalizeZ(e){return Au(g,e)}static msm(e,t){return Su(g,i,e,t)}_setWindowSize(e){this.precompute(e)}toRawBytes(){return this.toBytes()}}g.BASE=new g(s.Gx,s.Gy,wh,c(s.Gx*s.Gy)),g.ZERO=new g(Ah,wh,wh,Ah),g.Fp=n,g.Fn=i;const p=new Iu(g,i.BITS);return g.BASE.precompute(8),g}const Eh=BigInt(0),vh=BigInt(1),Bh=BigInt(2),Ih={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),n:BigInt("0x3fffffffffffffffffffffffffffffffffffffffffffffffffffffff7cca23e9c44edb49aed63690216cc2728dc58f552378c292ab5844f3"),h:BigInt(4),a:BigInt(1),d:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffffffffffffffffffffffffffffffffffffffffffffffff6756"),Gx:BigInt("0x4f1970c66bed0ded221d15a622bf36da9e146570470f1767ea6de324a3d3a46412ae1af72ab66511433b80e18b00938e2626a82bc70cc05e"),Gy:BigInt("0x693f46716eb6bc248876203756c9c7624bea73736ca3984087789c1e05a0c2d73ad3ff1ce67c39c4fdbd132c4ed7c8ad9808795bf230fa14")},Sh=Object.assign({},Ih,{d:BigInt("0xd78b4bdc7f0daf19f24f38c29373a2ccad46157242a50f37809b1da3412a12e79ccc9c81264cfe9ad080997058fb61c4243cc32dbaa156b9"),Gx:BigInt("0x79a70b2b70400553ae7c9df416c792c61128751ac92969240c25a07d728bdc93e21f7787ed6972249de732f38496cd11698713093e9c04fc"),Gy:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffff80000000000000000000000000000000000000000000000000000001")}),Kh=Mo(()=>dh.create({dkLen:114})),Ch=BigInt(1),Dh=BigInt(2),Uh=BigInt(3);BigInt(4);const Ph=BigInt(11),xh=BigInt(22),Qh=BigInt(44),Rh=BigInt(88),Th=BigInt(223);function Mh(e){const t=Ih.p,r=e*e*e%t,n=r*r*e%t,i=gc(n,Uh,t)*n%t,s=gc(i,Uh,t)*n%t,a=gc(s,Dh,t)*r%t,o=gc(a,Ph,t)*a%t,c=gc(o,xh,t)*o%t,u=gc(c,Qh,t)*c%t,h=gc(u,Rh,t)*u%t,f=gc(h,Qh,t)*c%t,l=gc(f,Dh,t)*r%t,y=gc(l,Ch,t)*e%t;return gc(y,Th,t)*l%t}function Fh(e){return e[0]&=252,e[55]|=128,e[56]=0,e}function Lh(e,t){const r=Ih.p,n=yc(e*e*t,r),i=yc(n*e,r),s=yc(i*n*t,r),a=yc(i*Mh(s),r),o=yc(a*a,r);return{isValid:yc(o*t,r)===e,value:a}}const Nh=(()=>Bc(Ih.p,{BITS:456,isLE:!0}))(),Oh=(()=>Bc(Ih.n,{BITS:456,isLE:!0}))();function Hh(e,t,r){if(t.length>255)throw Error("context must be smaller than 255, got: "+t.length);return Ro((n="SigEd448",Uint8Array.from(n,(e,t)=>{const r=e.charCodeAt(0);if(1!==e.length||r>127)throw Error(`string contains non-ASCII character "${n[t]}" with code ${r} at position ${t}`);return r})),new Uint8Array([r?1:0,t.length]),t,e);var n}const zh=function(e){const{CURVE:t,curveOpts:r,hash:n,eddsaOpts:i}=function(e){const t={a:e.a,d:e.d,p:e.Fp.ORDER,n:e.n,h:e.h,Gx:e.Gx,Gy:e.Gy},r={Fp:e.Fp,Fn:Bc(t.n,e.nBitLength,!0),uvRatio:e.uvRatio},n={randomBytes:e.randomBytes,adjustScalarBytes:e.adjustScalarBytes,domain:e.domain,prehash:e.prehash,mapToCurve:e.mapToCurve};return{CURVE:t,curveOpts:r,hash:e.hash,eddsaOpts:n}}(e);return function(e,t){const r=t.Point;return Object.assign({},t,{ExtendedPoint:r,CURVE:e,nBitLength:r.Fn.BITS,nByteLength:r.Fn.BYTES})}(e,function(e,t,r={}){if("function"!=typeof t)throw Error('"hash" function param is required');tc(r,{},{adjustScalarBytes:"function",randomBytes:"function",domain:"function",prehash:"function",mapToCurve:"function"});const{prehash:n}=r,{BASE:i,Fp:s,Fn:a}=e,o=r.randomBytes||Lo,c=r.adjustScalarBytes||(e=>e),u=r.domain||((e,t,r)=>{if(Ho(r,"phflag"),t.length||r)throw Error("Contexts/pre-hash are not supported");return e});function h(e){return a.create(Vo(e))}function f(e){const{head:r,prefix:n,scalar:s}=function(e){const r=d.secretKey;e=Zo("private key",e,r);const n=Zo("hashed private key",t(e),2*r),i=c(n.slice(0,r));return{head:i,prefix:n.slice(r,2*r),scalar:h(i)}}(e),a=i.multiply(s),o=a.toBytes();return{head:r,prefix:n,scalar:s,point:a,pointBytes:o}}function l(e){return f(e).pointBytes}function y(e=Uint8Array.of(),...r){const i=Ro(...r);return h(t(u(i,Zo("context",e),!!n)))}const g={zip215:!0},p=s.BYTES,d={secretKey:p,publicKey:p,signature:2*p,seed:p};function A(e=o(d.seed)){return zo(e,d.seed,"seed")}const w={getExtendedPublicKey:f,randomSecretKey:A,isValidSecretKey:function(e){return Ao(e)&&e.length===a.BYTES},isValidPublicKey:function(t,r){try{return!!e.fromBytes(t,r)}catch(e){return!1}},toMontgomery(t){const{y:r}=e.fromBytes(t),n=d.publicKey,i=32===n;if(!i&&57!==n)throw Error("only defined for 25519 and 448");const a=i?s.div(wh+r,wh-r):s.div(r-wh,r+wh);return s.toBytes(a)},toMontgomeryPriv(e){const r=d.secretKey;zo(e,r);const n=t(e.subarray(0,r));return c(n).subarray(0,r)},randomPrivateKey:A,precompute:(t=8,r=e.BASE)=>r.precompute(t,!1)};return Object.freeze({keygen:function(e){const t=w.randomSecretKey(e);return{secretKey:t,publicKey:l(t)}},getPublicKey:l,sign:function(e,t,r={}){e=Zo("message",e),n&&(e=n(e));const{prefix:s,scalar:o,pointBytes:c}=f(t),u=y(r.context,s,e),h=i.multiply(u).toBytes(),l=y(r.context,h,c,e),g=a.create(u+l*o);if(!a.isValid(g))throw Error("sign failed: invalid s");return zo(Ro(h,a.toBytes(g)),d.signature,"result")},verify:function(t,r,s,a=g){const{context:o,zip215:c}=a,u=d.signature;t=Zo("signature",t,u),r=Zo("message",r),s=Zo("publicKey",s,d.publicKey),void 0!==c&&Ho(c,"zip215"),n&&(r=n(r));const h=u/2,f=t.subarray(0,h),l=Vo(t.subarray(h,u));let p,A,w;try{p=e.fromBytes(s,c),A=e.fromBytes(f,c),w=i.multiplyUnsafe(l)}catch(e){return!1}if(!c&&p.isSmallOrder())return!1;const m=y(o,A.toBytes(),p.toBytes(),r);return A.add(p.multiplyUnsafe(m)).subtract(w).clearCofactor().is0()},utils:w,Point:e,lengths:d})}(kh(t,r),n,i))}((()=>({...Ih,Fp:Nh,Fn:Oh,nBitLength:Oh.BITS,hash:Kh,adjustScalarBytes:Fh,domain:Hh,uvRatio:Lh}))());kh(Sh);const Gh=(()=>{const e=Ih.p;return function(e){const t=(tc(r=e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...r}));var r;const{P:n,type:i,adjustScalarBytes:s,powPminus2:a,randomBytes:o}=t,c="x25519"===i;if(!c&&"x448"!==i)throw Error("invalid type");const u=o||Lo,h=c?255:448,f=c?32:56,l=c?BigInt(9):BigInt(5),y=c?BigInt(121665):BigInt(39081),g=c?Bh**BigInt(254):Bh**BigInt(447),p=c?BigInt(8)*Bh**BigInt(251)-vh:BigInt(4)*Bh**BigInt(445)-vh,d=g+p+vh,A=e=>yc(e,n),w=m(l);function m(e){return Yo(A(e),f)}function b(e,t){const r=function(e,t){Wo("u",e,Eh,n),Wo("scalar",t,g,d);const r=t,i=e;let s=vh,o=Eh,c=e,u=vh,f=Eh;for(let e=BigInt(h-1);e>=Eh;e--){const t=r>>e&vh;f^=t,({x_2:s,x_3:c}=E(f,s,c)),({x_2:o,x_3:u}=E(f,o,u)),f=t;const n=s+o,a=A(n*n),h=s-o,l=A(h*h),g=a-l,p=c+u,d=A((c-u)*n),w=A(p*h),m=d+w,b=d-w;c=A(m*m),u=A(i*A(b*b)),s=A(a*l),o=A(g*(a+A(y*g)))}({x_2:s,x_3:c}=E(f,s,c)),({x_2:o,x_3:u}=E(f,o,u));const l=a(o);return A(s*l)}(function(e){const t=Zo("u coordinate",e,f);return c&&(t[31]&=127),A(Vo(t))}(t),function(e){return Vo(s(Zo("scalar",e,f)))}(e));if(r===Eh)throw Error("invalid private or public key received");return m(r)}function k(e){return b(e,w)}function E(e,t,r){const n=A(e*(t-r));return{x_2:t=A(t-n),x_3:r=A(r+n)}}const v={secretKey:f,publicKey:f,seed:f},B=(e=u(f))=>(mo(e,v.seed),e);return{keygen:function(e){const t=B(e);return{secretKey:t,publicKey:k(t)}},getSharedSecret:(e,t)=>b(e,t),getPublicKey:e=>k(e),scalarMult:b,scalarMultBase:k,utils:{randomSecretKey:B,randomPrivateKey:B},GuBytes:w.slice(),lengths:v}}({P:e,type:"x448",powPminus2:t=>yc(gc(Mh(t),Dh,e)*t,e),adjustScalarBytes:Fh})})(),_h={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),n:BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),h:BigInt(1),a:BigInt(0),b:BigInt(7),Gx:BigInt("0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798"),Gy:BigInt("0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8")},jh={beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),basises:[[BigInt("0x3086d221a7d46bcde86c90e49284eb15"),-BigInt("0xe4437ed6010e88286f547fa90abfe4c3")],[BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),BigInt("0x3086d221a7d46bcde86c90e49284eb15")]]},Vh=BigInt(2),qh=Bc(_h.p,{sqrt:function(e){const t=_h.p,r=BigInt(3),n=BigInt(6),i=BigInt(11),s=BigInt(22),a=BigInt(23),o=BigInt(44),c=BigInt(88),u=e*e*e%t,h=u*u*e%t,f=gc(h,r,t)*h%t,l=gc(f,r,t)*h%t,y=gc(l,Vh,t)*u%t,g=gc(y,i,t)*y%t,p=gc(g,s,t)*g%t,d=gc(p,o,t)*p%t,A=gc(d,c,t)*d%t,w=gc(A,o,t)*p%t,m=gc(w,r,t)*h%t,b=gc(m,a,t)*g%t,k=gc(b,n,t)*u%t,E=gc(k,Vh,t);if(!qh.eql(qh.sqr(E),e))throw Error("Cannot find square root");return E}}),Yh=zu({..._h,Fp:qh,lowS:!0,endo:jh},cu),Zh=cu,Jh=uu,Xh=Bc(BigInt("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),Wh=zu({a:Xh.create(BigInt("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:BigInt("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:Xh,n:BigInt("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:BigInt("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:BigInt("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:BigInt(1),lowS:!1},Zh),$h=hu,ef=fu,tf=Bc(BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),rf=zu({a:tf.create(BigInt("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:BigInt("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:tf,n:BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:BigInt("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:BigInt("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:BigInt(1),lowS:!1},ef),nf=Bc(BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),sf=zu({a:nf.create(BigInt("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:BigInt("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:nf,n:BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:BigInt("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:BigInt("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:BigInt(1),lowS:!1},$h),af=new Map(Object.entries({nistP256:Zu,nistP384:Ju,nistP521:Xu,brainpoolP256r1:Wh,brainpoolP384r1:rf,brainpoolP512r1:sf,secp256k1:Yh,x448:Gh,ed448:zh}));var of=Object.freeze({__proto__:null,nobleCurves:af});const cf=Uint32Array.from([1732584193,4023233417,2562383102,271733878,3285377520]),uf=new Uint32Array(80);class hf extends Dc{constructor(){super(64,20,8,!1),this.A=0|cf[0],this.B=0|cf[1],this.C=0|cf[2],this.D=0|cf[3],this.E=0|cf[4]}get(){const{A:e,B:t,C:r,D:n,E:i}=this;return[e,t,r,n,i]}set(e,t,r,n,i){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n,this.E=0|i}process(e,t){for(let r=0;r<16;r++,t+=4)uf[r]=e.getUint32(t,!1);for(let e=16;e<80;e++)uf[e]=So(uf[e-3]^uf[e-8]^uf[e-14]^uf[e-16],1);let{A:r,B:n,C:i,D:s,E:a}=this;for(let e=0;e<80;e++){let t,o;e<20?(t=Kc(n,i,s),o=1518500249):e<40?(t=n^i^s,o=1859775393):e<60?(t=Cc(n,i,s),o=2400959708):(t=n^i^s,o=3395469782);const c=So(r,5)+t+a+o+uf[e]|0;a=s,s=i,i=So(n,30),n=r,r=c}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,n,i,s,a)}roundClean(){vo(uf)}destroy(){this.set(0,0,0,0,0),vo(this.buffer)}}const ff=Mo(()=>new hf),lf=Uint8Array.from([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),yf=(()=>Uint8Array.from(Array(16).fill(0).map((e,t)=>t)))(),gf=(()=>yf.map(e=>(9*e+5)%16))(),pf=(()=>{const e=[[yf],[gf]];for(let t=0;t<4;t++)for(let r of e)r.push(r[t].map(e=>lf[e]));return e})(),df=(()=>pf[0])(),Af=(()=>pf[1])(),wf=[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map(e=>Uint8Array.from(e)),mf=df.map((e,t)=>e.map(e=>wf[t][e])),bf=Af.map((e,t)=>e.map(e=>wf[t][e])),kf=Uint32Array.from([0,1518500249,1859775393,2400959708,2840853838]),Ef=Uint32Array.from([1352829926,1548603684,1836072691,2053994217,0]);function vf(e,t,r,n){return 0===e?t^r^n:1===e?t&r|~t&n:2===e?(t|~r)^n:3===e?t&n|r&~n:t^(r|~n)}const Bf=new Uint32Array(16);class If extends Dc{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:e,h1:t,h2:r,h3:n,h4:i}=this;return[e,t,r,n,i]}set(e,t,r,n,i){this.h0=0|e,this.h1=0|t,this.h2=0|r,this.h3=0|n,this.h4=0|i}process(e,t){for(let r=0;r<16;r++,t+=4)Bf[r]=e.getUint32(t,!0);let r=0|this.h0,n=r,i=0|this.h1,s=i,a=0|this.h2,o=a,c=0|this.h3,u=c,h=0|this.h4,f=h;for(let e=0;e<5;e++){const t=4-e,l=kf[e],y=Ef[e],g=df[e],p=Af[e],d=mf[e],A=bf[e];for(let t=0;t<16;t++){const n=So(r+vf(e,i,a,c)+Bf[g[t]]+l,d[t])+h|0;r=h,h=c,c=0|So(a,10),a=i,i=n}for(let e=0;e<16;e++){const r=So(n+vf(t,s,o,u)+Bf[p[e]]+y,A[e])+f|0;n=f,f=u,u=0|So(o,10),o=s,s=r}}this.set(this.h1+a+u|0,this.h2+c+f|0,this.h3+h+n|0,this.h4+r+s|0,this.h0+i+o|0)}roundClean(){vo(Bf)}destroy(){this.destroyed=!0,vo(this.buffer),this.set(0,0,0,0,0)}}const Sf=ff,Kf=Mo(()=>new If),Cf=Array.from({length:64},(e,t)=>Math.floor(2**32*Math.abs(Math.sin(t+1)))),Df=(e,t,r)=>e&t^~e&r,Uf=new Uint32Array([1732584193,4023233417,2562383102,271733878]),Pf=new Uint32Array(16);class xf extends Dc{constructor(){super(64,16,8,!0),this.A=0|Uf[0],this.B=0|Uf[1],this.C=0|Uf[2],this.D=0|Uf[3]}get(){const{A:e,B:t,C:r,D:n}=this;return[e,t,r,n]}set(e,t,r,n){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)Pf[r]=e.getUint32(t,!0);let{A:r,B:n,C:i,D:s}=this;for(let e=0;e<64;e++){let t,a,o;e<16?(t=Df(n,i,s),a=e,o=[7,12,17,22]):e<32?(t=Df(s,n,i),a=(5*e+1)%16,o=[5,9,14,20]):e<48?(t=n^i^s,a=(3*e+5)%16,o=[4,11,16,23]):(t=i^(n|~s),a=7*e%16,o=[6,10,15,21]),t=t+r+Cf[e]+Pf[a],r=s,s=i,i=n,n+=So(t,o[e%4])}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,this.set(r,n,i,s)}roundClean(){Pf.fill(0)}destroy(){this.set(0,0,0,0),this.buffer.fill(0)}}const Qf=new Map(Object.entries({md5:Fo(()=>new xf),sha1:Sf,sha224:Jh,sha256:Zh,sha384:ef,sha512:$h,sha3_256:gh,sha3_512:ph,ripemd160:Kf}));var Rf=Object.freeze({__proto__:null,nobleHashes:Qf});const Tf="object"==typeof n&&"crypto"in n?n.crypto:void 0,Mf={};var Ff=function(e){var t,r=new Float64Array(16);if(e)for(t=0;t<e.length;t++)r[t]=e[t];return r},Lf=function(){throw Error("no PRNG")},Nf=new Uint8Array(32);Nf[0]=9;var Of=Ff(),Hf=Ff([1]),zf=Ff([56129,1]),Gf=Ff([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),_f=Ff([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),jf=Ff([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),Vf=Ff([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),qf=Ff([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function Yf(e,t,r,n){e[t]=r>>24&255,e[t+1]=r>>16&255,e[t+2]=r>>8&255,e[t+3]=255&r,e[t+4]=n>>24&255,e[t+5]=n>>16&255,e[t+6]=n>>8&255,e[t+7]=255&n}function Zf(e,t,r,n){return function(e,t,r,n){var i,s=0;for(i=0;i<32;i++)s|=e[t+i]^r[n+i];return(1&s-1>>>8)-1}(e,t,r,n)}function Jf(e,t){var r;for(r=0;r<16;r++)e[r]=0|t[r]}function Xf(e){var t,r,n=1;for(t=0;t<16;t++)r=e[t]+n+65535,n=Math.floor(r/65536),e[t]=r-65536*n;e[0]+=n-1+37*(n-1)}function Wf(e,t,r){for(var n,i=~(r-1),s=0;s<16;s++)n=i&(e[s]^t[s]),e[s]^=n,t[s]^=n}function $f(e,t){var r,n,i,s=Ff(),a=Ff();for(r=0;r<16;r++)a[r]=t[r];for(Xf(a),Xf(a),Xf(a),n=0;n<2;n++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),i=s[15]>>16&1,s[14]&=65535,Wf(a,s,1-i)}for(r=0;r<16;r++)e[2*r]=255&a[r],e[2*r+1]=a[r]>>8}function el(e,t){var r=new Uint8Array(32),n=new Uint8Array(32);return $f(r,e),$f(n,t),Zf(r,0,n,0)}function tl(e){var t=new Uint8Array(32);return $f(t,e),1&t[0]}function rl(e,t){var r;for(r=0;r<16;r++)e[r]=t[2*r]+(t[2*r+1]<<8);e[15]&=32767}function nl(e,t,r){for(var n=0;n<16;n++)e[n]=t[n]+r[n]}function il(e,t,r){for(var n=0;n<16;n++)e[n]=t[n]-r[n]}function sl(e,t,r){var n,i,s=0,a=0,o=0,c=0,u=0,h=0,f=0,l=0,y=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,k=0,E=0,v=0,B=0,I=0,S=0,K=0,C=0,D=0,U=0,P=0,x=0,Q=0,R=0,T=0,M=r[0],F=r[1],L=r[2],N=r[3],O=r[4],H=r[5],z=r[6],G=r[7],_=r[8],j=r[9],V=r[10],q=r[11],Y=r[12],Z=r[13],J=r[14],X=r[15];s+=(n=t[0])*M,a+=n*F,o+=n*L,c+=n*N,u+=n*O,h+=n*H,f+=n*z,l+=n*G,y+=n*_,g+=n*j,p+=n*V,d+=n*q,A+=n*Y,w+=n*Z,m+=n*J,b+=n*X,a+=(n=t[1])*M,o+=n*F,c+=n*L,u+=n*N,h+=n*O,f+=n*H,l+=n*z,y+=n*G,g+=n*_,p+=n*j,d+=n*V,A+=n*q,w+=n*Y,m+=n*Z,b+=n*J,k+=n*X,o+=(n=t[2])*M,c+=n*F,u+=n*L,h+=n*N,f+=n*O,l+=n*H,y+=n*z,g+=n*G,p+=n*_,d+=n*j,A+=n*V,w+=n*q,m+=n*Y,b+=n*Z,k+=n*J,E+=n*X,c+=(n=t[3])*M,u+=n*F,h+=n*L,f+=n*N,l+=n*O,y+=n*H,g+=n*z,p+=n*G,d+=n*_,A+=n*j,w+=n*V,m+=n*q,b+=n*Y,k+=n*Z,E+=n*J,v+=n*X,u+=(n=t[4])*M,h+=n*F,f+=n*L,l+=n*N,y+=n*O,g+=n*H,p+=n*z,d+=n*G,A+=n*_,w+=n*j,m+=n*V,b+=n*q,k+=n*Y,E+=n*Z,v+=n*J,B+=n*X,h+=(n=t[5])*M,f+=n*F,l+=n*L,y+=n*N,g+=n*O,p+=n*H,d+=n*z,A+=n*G,w+=n*_,m+=n*j,b+=n*V,k+=n*q,E+=n*Y,v+=n*Z,B+=n*J,I+=n*X,f+=(n=t[6])*M,l+=n*F,y+=n*L,g+=n*N,p+=n*O,d+=n*H,A+=n*z,w+=n*G,m+=n*_,b+=n*j,k+=n*V,E+=n*q,v+=n*Y,B+=n*Z,I+=n*J,S+=n*X,l+=(n=t[7])*M,y+=n*F,g+=n*L,p+=n*N,d+=n*O,A+=n*H,w+=n*z,m+=n*G,b+=n*_,k+=n*j,E+=n*V,v+=n*q,B+=n*Y,I+=n*Z,S+=n*J,K+=n*X,y+=(n=t[8])*M,g+=n*F,p+=n*L,d+=n*N,A+=n*O,w+=n*H,m+=n*z,b+=n*G,k+=n*_,E+=n*j,v+=n*V,B+=n*q,I+=n*Y,S+=n*Z,K+=n*J,C+=n*X,g+=(n=t[9])*M,p+=n*F,d+=n*L,A+=n*N,w+=n*O,m+=n*H,b+=n*z,k+=n*G,E+=n*_,v+=n*j,B+=n*V,I+=n*q,S+=n*Y,K+=n*Z,C+=n*J,D+=n*X,p+=(n=t[10])*M,d+=n*F,A+=n*L,w+=n*N,m+=n*O,b+=n*H,k+=n*z,E+=n*G,v+=n*_,B+=n*j,I+=n*V,S+=n*q,K+=n*Y,C+=n*Z,D+=n*J,U+=n*X,d+=(n=t[11])*M,A+=n*F,w+=n*L,m+=n*N,b+=n*O,k+=n*H,E+=n*z,v+=n*G,B+=n*_,I+=n*j,S+=n*V,K+=n*q,C+=n*Y,D+=n*Z,U+=n*J,P+=n*X,A+=(n=t[12])*M,w+=n*F,m+=n*L,b+=n*N,k+=n*O,E+=n*H,v+=n*z,B+=n*G,I+=n*_,S+=n*j,K+=n*V,C+=n*q,D+=n*Y,U+=n*Z,P+=n*J,x+=n*X,w+=(n=t[13])*M,m+=n*F,b+=n*L,k+=n*N,E+=n*O,v+=n*H,B+=n*z,I+=n*G,S+=n*_,K+=n*j,C+=n*V,D+=n*q,U+=n*Y,P+=n*Z,x+=n*J,Q+=n*X,m+=(n=t[14])*M,b+=n*F,k+=n*L,E+=n*N,v+=n*O,B+=n*H,I+=n*z,S+=n*G,K+=n*_,C+=n*j,D+=n*V,U+=n*q,P+=n*Y,x+=n*Z,Q+=n*J,R+=n*X,b+=(n=t[15])*M,a+=38*(E+=n*L),o+=38*(v+=n*N),c+=38*(B+=n*O),u+=38*(I+=n*H),h+=38*(S+=n*z),f+=38*(K+=n*G),l+=38*(C+=n*_),y+=38*(D+=n*j),g+=38*(U+=n*V),p+=38*(P+=n*q),d+=38*(x+=n*Y),A+=38*(Q+=n*Z),w+=38*(R+=n*J),m+=38*(T+=n*X),s=(n=(s+=38*(k+=n*F))+(i=1)+65535)-65536*(i=Math.floor(n/65536)),a=(n=a+i+65535)-65536*(i=Math.floor(n/65536)),o=(n=o+i+65535)-65536*(i=Math.floor(n/65536)),c=(n=c+i+65535)-65536*(i=Math.floor(n/65536)),u=(n=u+i+65535)-65536*(i=Math.floor(n/65536)),h=(n=h+i+65535)-65536*(i=Math.floor(n/65536)),f=(n=f+i+65535)-65536*(i=Math.floor(n/65536)),l=(n=l+i+65535)-65536*(i=Math.floor(n/65536)),y=(n=y+i+65535)-65536*(i=Math.floor(n/65536)),g=(n=g+i+65535)-65536*(i=Math.floor(n/65536)),p=(n=p+i+65535)-65536*(i=Math.floor(n/65536)),d=(n=d+i+65535)-65536*(i=Math.floor(n/65536)),A=(n=A+i+65535)-65536*(i=Math.floor(n/65536)),w=(n=w+i+65535)-65536*(i=Math.floor(n/65536)),m=(n=m+i+65535)-65536*(i=Math.floor(n/65536)),b=(n=b+i+65535)-65536*(i=Math.floor(n/65536)),s=(n=(s+=i-1+37*(i-1))+(i=1)+65535)-65536*(i=Math.floor(n/65536)),a=(n=a+i+65535)-65536*(i=Math.floor(n/65536)),o=(n=o+i+65535)-65536*(i=Math.floor(n/65536)),c=(n=c+i+65535)-65536*(i=Math.floor(n/65536)),u=(n=u+i+65535)-65536*(i=Math.floor(n/65536)),h=(n=h+i+65535)-65536*(i=Math.floor(n/65536)),f=(n=f+i+65535)-65536*(i=Math.floor(n/65536)),l=(n=l+i+65535)-65536*(i=Math.floor(n/65536)),y=(n=y+i+65535)-65536*(i=Math.floor(n/65536)),g=(n=g+i+65535)-65536*(i=Math.floor(n/65536)),p=(n=p+i+65535)-65536*(i=Math.floor(n/65536)),d=(n=d+i+65535)-65536*(i=Math.floor(n/65536)),A=(n=A+i+65535)-65536*(i=Math.floor(n/65536)),w=(n=w+i+65535)-65536*(i=Math.floor(n/65536)),m=(n=m+i+65535)-65536*(i=Math.floor(n/65536)),b=(n=b+i+65535)-65536*(i=Math.floor(n/65536)),s+=i-1+37*(i-1),e[0]=s,e[1]=a,e[2]=o,e[3]=c,e[4]=u,e[5]=h,e[6]=f,e[7]=l,e[8]=y,e[9]=g,e[10]=p,e[11]=d,e[12]=A,e[13]=w,e[14]=m,e[15]=b}function al(e,t){sl(e,t,t)}function ol(e,t){var r,n=Ff();for(r=0;r<16;r++)n[r]=t[r];for(r=253;r>=0;r--)al(n,n),2!==r&&4!==r&&sl(n,n,t);for(r=0;r<16;r++)e[r]=n[r]}function cl(e,t,r){var n,i,s=new Uint8Array(32),a=new Float64Array(80),o=Ff(),c=Ff(),u=Ff(),h=Ff(),f=Ff(),l=Ff();for(i=0;i<31;i++)s[i]=t[i];for(s[31]=127&t[31]|64,s[0]&=248,rl(a,r),i=0;i<16;i++)c[i]=a[i],h[i]=o[i]=u[i]=0;for(o[0]=h[0]=1,i=254;i>=0;--i)Wf(o,c,n=s[i>>>3]>>>(7&i)&1),Wf(u,h,n),nl(f,o,u),il(o,o,u),nl(u,c,h),il(c,c,h),al(h,f),al(l,o),sl(o,u,o),sl(u,c,f),nl(f,o,u),il(o,o,u),al(c,o),il(u,h,l),sl(o,u,zf),nl(o,o,h),sl(u,u,o),sl(o,h,l),sl(h,c,a),al(c,f),Wf(o,c,n),Wf(u,h,n);for(i=0;i<16;i++)a[i+16]=o[i],a[i+32]=u[i],a[i+48]=c[i],a[i+64]=h[i];var y=a.subarray(32),g=a.subarray(16);return ol(y,y),sl(g,g,y),$f(e,g),0}function ul(e,t){return cl(e,t,Nf)}var hl=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function fl(e,t,r,n){for(var i,s,a,o,c,u,h,f,l,y,g,p,d,A,w,m,b,k,E,v,B,I,S,K,C,D,U=new Int32Array(16),P=new Int32Array(16),x=e[0],Q=e[1],R=e[2],T=e[3],M=e[4],F=e[5],L=e[6],N=e[7],O=t[0],H=t[1],z=t[2],G=t[3],_=t[4],j=t[5],V=t[6],q=t[7],Y=0;n>=128;){for(E=0;E<16;E++)v=8*E+Y,U[E]=r[v+0]<<24|r[v+1]<<16|r[v+2]<<8|r[v+3],P[E]=r[v+4]<<24|r[v+5]<<16|r[v+6]<<8|r[v+7];for(E=0;E<80;E++)if(i=x,s=Q,a=R,o=T,c=M,u=F,h=L,l=O,y=H,g=z,p=G,d=_,A=j,w=V,S=65535&(I=q),K=I>>>16,C=65535&(B=N),D=B>>>16,S+=65535&(I=(_>>>14|M<<18)^(_>>>18|M<<14)^(M>>>9|_<<23)),K+=I>>>16,C+=65535&(B=(M>>>14|_<<18)^(M>>>18|_<<14)^(_>>>9|M<<23)),D+=B>>>16,S+=65535&(I=_&j^~_&V),K+=I>>>16,C+=65535&(B=M&F^~M&L),D+=B>>>16,S+=65535&(I=hl[2*E+1]),K+=I>>>16,C+=65535&(B=hl[2*E]),D+=B>>>16,B=U[E%16],K+=(I=P[E%16])>>>16,C+=65535&B,D+=B>>>16,C+=(K+=(S+=65535&I)>>>16)>>>16,S=65535&(I=k=65535&S|K<<16),K=I>>>16,C=65535&(B=b=65535&C|(D+=C>>>16)<<16),D=B>>>16,S+=65535&(I=(O>>>28|x<<4)^(x>>>2|O<<30)^(x>>>7|O<<25)),K+=I>>>16,C+=65535&(B=(x>>>28|O<<4)^(O>>>2|x<<30)^(O>>>7|x<<25)),D+=B>>>16,K+=(I=O&H^O&z^H&z)>>>16,C+=65535&(B=x&Q^x&R^Q&R),D+=B>>>16,f=65535&(C+=(K+=(S+=65535&I)>>>16)>>>16)|(D+=C>>>16)<<16,m=65535&S|K<<16,S=65535&(I=p),K=I>>>16,C=65535&(B=o),D=B>>>16,K+=(I=k)>>>16,C+=65535&(B=b),D+=B>>>16,Q=i,R=s,T=a,M=o=65535&(C+=(K+=(S+=65535&I)>>>16)>>>16)|(D+=C>>>16)<<16,F=c,L=u,N=h,x=f,H=l,z=y,G=g,_=p=65535&S|K<<16,j=d,V=A,q=w,O=m,E%16==15)for(v=0;v<16;v++)B=U[v],S=65535&(I=P[v]),K=I>>>16,C=65535&B,D=B>>>16,B=U[(v+9)%16],S+=65535&(I=P[(v+9)%16]),K+=I>>>16,C+=65535&B,D+=B>>>16,b=U[(v+1)%16],S+=65535&(I=((k=P[(v+1)%16])>>>1|b<<31)^(k>>>8|b<<24)^(k>>>7|b<<25)),K+=I>>>16,C+=65535&(B=(b>>>1|k<<31)^(b>>>8|k<<24)^b>>>7),D+=B>>>16,b=U[(v+14)%16],K+=(I=((k=P[(v+14)%16])>>>19|b<<13)^(b>>>29|k<<3)^(k>>>6|b<<26))>>>16,C+=65535&(B=(b>>>19|k<<13)^(k>>>29|b<<3)^b>>>6),D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,U[v]=65535&C|D<<16,P[v]=65535&S|K<<16;S=65535&(I=O),K=I>>>16,C=65535&(B=x),D=B>>>16,B=e[0],K+=(I=t[0])>>>16,C+=65535&B,D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[0]=x=65535&C|D<<16,t[0]=O=65535&S|K<<16,S=65535&(I=H),K=I>>>16,C=65535&(B=Q),D=B>>>16,B=e[1],K+=(I=t[1])>>>16,C+=65535&B,D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[1]=Q=65535&C|D<<16,t[1]=H=65535&S|K<<16,S=65535&(I=z),K=I>>>16,C=65535&(B=R),D=B>>>16,B=e[2],K+=(I=t[2])>>>16,C+=65535&B,D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[2]=R=65535&C|D<<16,t[2]=z=65535&S|K<<16,S=65535&(I=G),K=I>>>16,C=65535&(B=T),D=B>>>16,B=e[3],K+=(I=t[3])>>>16,C+=65535&B,D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[3]=T=65535&C|D<<16,t[3]=G=65535&S|K<<16,S=65535&(I=_),K=I>>>16,C=65535&(B=M),D=B>>>16,B=e[4],K+=(I=t[4])>>>16,C+=65535&B,D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[4]=M=65535&C|D<<16,t[4]=_=65535&S|K<<16,S=65535&(I=j),K=I>>>16,C=65535&(B=F),D=B>>>16,B=e[5],K+=(I=t[5])>>>16,C+=65535&B,D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[5]=F=65535&C|D<<16,t[5]=j=65535&S|K<<16,S=65535&(I=V),K=I>>>16,C=65535&(B=L),D=B>>>16,B=e[6],K+=(I=t[6])>>>16,C+=65535&B,D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[6]=L=65535&C|D<<16,t[6]=V=65535&S|K<<16,S=65535&(I=q),K=I>>>16,C=65535&(B=N),D=B>>>16,B=e[7],K+=(I=t[7])>>>16,C+=65535&B,D+=B>>>16,D+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[7]=N=65535&C|D<<16,t[7]=q=65535&S|K<<16,Y+=128,n-=128}return n}function ll(e,t,r){var n,i=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(i[0]=1779033703,i[1]=3144134277,i[2]=1013904242,i[3]=2773480762,i[4]=1359893119,i[5]=2600822924,i[6]=528734635,i[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,fl(i,s,t,r),r%=128,n=0;n<r;n++)a[n]=t[o-r+n];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,Yf(a,r-8,o/536870912|0,o<<3),fl(i,s,a,r),n=0;n<8;n++)Yf(e,8*n,i[n],s[n]);return 0}function yl(e,t){var r=Ff(),n=Ff(),i=Ff(),s=Ff(),a=Ff(),o=Ff(),c=Ff(),u=Ff(),h=Ff();il(r,e[1],e[0]),il(h,t[1],t[0]),sl(r,r,h),nl(n,e[0],e[1]),nl(h,t[0],t[1]),sl(n,n,h),sl(i,e[3],t[3]),sl(i,i,_f),sl(s,e[2],t[2]),nl(s,s,s),il(a,n,r),il(o,s,i),nl(c,s,i),nl(u,n,r),sl(e[0],a,o),sl(e[1],u,c),sl(e[2],c,o),sl(e[3],a,u)}function gl(e,t,r){var n;for(n=0;n<4;n++)Wf(e[n],t[n],r)}function pl(e,t){var r=Ff(),n=Ff(),i=Ff();ol(i,t[2]),sl(r,t[0],i),sl(n,t[1],i),$f(e,n),e[31]^=tl(r)<<7}function dl(e,t,r){var n,i;for(Jf(e[0],Of),Jf(e[1],Hf),Jf(e[2],Hf),Jf(e[3],Of),i=255;i>=0;--i)gl(e,t,n=r[i/8|0]>>(7&i)&1),yl(t,e),yl(e,e),gl(e,t,n)}function Al(e,t){var r=[Ff(),Ff(),Ff(),Ff()];Jf(r[0],jf),Jf(r[1],Vf),Jf(r[2],Hf),sl(r[3],jf,Vf),dl(e,r,t)}function wl(e,t,r){var n,i=new Uint8Array(64),s=[Ff(),Ff(),Ff(),Ff()];for(r||Lf(t,32),ll(i,t,32),i[0]&=248,i[31]&=127,i[31]|=64,Al(s,i),pl(e,s),n=0;n<32;n++)t[n+32]=e[n];return 0}var ml=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function bl(e,t){var r,n,i,s;for(n=63;n>=32;--n){for(r=0,i=n-32,s=n-12;i<s;++i)t[i]+=r-16*t[n]*ml[i-(n-32)],r=Math.floor((t[i]+128)/256),t[i]-=256*r;t[i]+=r,t[n]=0}for(r=0,i=0;i<32;i++)t[i]+=r-(t[31]>>4)*ml[i],r=t[i]>>8,t[i]&=255;for(i=0;i<32;i++)t[i]-=r*ml[i];for(n=0;n<32;n++)t[n+1]+=t[n]>>8,e[n]=255&t[n]}function kl(e){var t,r=new Float64Array(64);for(t=0;t<64;t++)r[t]=e[t];for(t=0;t<64;t++)e[t]=0;bl(e,r)}var El=64;function vl(){for(var e=0;e<arguments.length;e++)if(!(arguments[e]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}Mf.scalarMult=function(e,t){if(vl(e,t),32!==e.length)throw Error("bad n size");if(32!==t.length)throw Error("bad p size");var r=new Uint8Array(32);return cl(r,e,t),r},Mf.box={},Mf.box.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(32);return function(e,t){Lf(t,32),ul(e,t)}(e,t),{publicKey:e,secretKey:t}},Mf.box.keyPair.fromSecretKey=function(e){if(vl(e),32!==e.length)throw Error("bad secret key size");var t=new Uint8Array(32);return ul(t,e),{publicKey:t,secretKey:new Uint8Array(e)}},Mf.sign=function(e,t){if(vl(e,t),64!==t.length)throw Error("bad secret key size");var r=new Uint8Array(El+e.length);return function(e,t,r,n){var i,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),u=new Float64Array(64),h=[Ff(),Ff(),Ff(),Ff()];for(ll(a,n,32),a[0]&=248,a[31]&=127,a[31]|=64,i=0;i<r;i++)e[64+i]=t[i];for(i=0;i<32;i++)e[32+i]=a[32+i];for(ll(c,e.subarray(32),r+32),kl(c),Al(h,c),pl(e,h),i=32;i<64;i++)e[i]=n[i];for(ll(o,e,r+64),kl(o),i=0;i<64;i++)u[i]=0;for(i=0;i<32;i++)u[i]=c[i];for(i=0;i<32;i++)for(s=0;s<32;s++)u[i+s]+=o[i]*a[s];bl(e.subarray(32),u)}(r,e,e.length,t),r},Mf.sign.detached=function(e,t){for(var r=Mf.sign(e,t),n=new Uint8Array(El),i=0;i<n.length;i++)n[i]=r[i];return n},Mf.sign.detached.verify=function(e,t,r){if(vl(e,t,r),t.length!==El)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var n,i=new Uint8Array(El+e.length),s=new Uint8Array(El+e.length);for(n=0;n<El;n++)i[n]=t[n];for(n=0;n<e.length;n++)i[n+El]=e[n];return function(e,t,r,n){var i,s=new Uint8Array(32),a=new Uint8Array(64),o=[Ff(),Ff(),Ff(),Ff()],c=[Ff(),Ff(),Ff(),Ff()];if(r<64)return-1;if(function(e,t){var r=Ff(),n=Ff(),i=Ff(),s=Ff(),a=Ff(),o=Ff(),c=Ff();return Jf(e[2],Hf),rl(e[1],t),al(i,e[1]),sl(s,i,Gf),il(i,i,e[2]),nl(s,e[2],s),al(a,s),al(o,a),sl(c,o,a),sl(r,c,i),sl(r,r,s),function(e,t){var r,n=Ff();for(r=0;r<16;r++)n[r]=t[r];for(r=250;r>=0;r--)al(n,n),1!==r&&sl(n,n,t);for(r=0;r<16;r++)e[r]=n[r]}(r,r),sl(r,r,i),sl(r,r,s),sl(r,r,s),sl(e[0],r,s),al(n,e[0]),sl(n,n,s),el(n,i)&&sl(e[0],e[0],qf),al(n,e[0]),sl(n,n,s),el(n,i)?-1:(tl(e[0])===t[31]>>7&&il(e[0],Of,e[0]),sl(e[3],e[0],e[1]),0)}(c,n))return-1;for(i=0;i<r;i++)e[i]=t[i];for(i=0;i<32;i++)e[i+32]=n[i];if(ll(a,e,r),kl(a),dl(o,c,a),Al(c,t.subarray(32)),yl(o,c),pl(s,o),r-=64,Zf(t,0,s,0)){for(i=0;i<r;i++)e[i]=0;return-1}for(i=0;i<r;i++)e[i]=t[i+64];return r}(s,i,i.length,r)>=0},Mf.sign.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(64);return wl(e,t),{publicKey:e,secretKey:t}},Mf.sign.keyPair.fromSecretKey=function(e){if(vl(e),64!==e.length)throw Error("bad secret key size");for(var t=new Uint8Array(32),r=0;r<t.length;r++)t[r]=e[32+r];return{publicKey:t,secretKey:new Uint8Array(e)}},Mf.sign.keyPair.fromSeed=function(e){if(vl(e),32!==e.length)throw Error("bad seed size");for(var t=new Uint8Array(32),r=new Uint8Array(64),n=0;n<32;n++)r[n]=e[n];return wl(t,r,!0),{publicKey:t,secretKey:r}},Mf.setPRNG=function(e){Lf=e},Tf&&Tf.getRandomValues&&Mf.setPRNG(function(e,t){var r,n=new Uint8Array(t);for(r=0;r<t;r+=65536)Tf.getRandomValues(n.subarray(r,r+Math.min(t-r,65536)));for(r=0;r<t;r++)e[r]=n[r];!function(e){for(var t=0;t<e.length;t++)e[t]=0}(n)});var Bl=Object.freeze({__proto__:null,default:Mf});function Il(e,t,r,n,i,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],u=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],h=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],f=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],l=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],y=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let g,p,d,A,w,m,b,k,E,v,B=0,I=t.length;const S=32===e.length?3:9;k=3===S?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(t=function(e){const t=8-e.length%8;let r;if(!(t<8)){if(8===t)return e;throw Error("des: invalid padding")}r=0;const n=new Uint8Array(e.length+t);for(let t=0;t<e.length;t++)n[t]=e[t];for(let r=0;r<t;r++)n[e.length+r]=0;return n}(t),I=t.length);let K=new Uint8Array(I),C=0;for(;B<I;){for(m=t[B++]<<24|t[B++]<<16|t[B++]<<8|t[B++],b=t[B++]<<24|t[B++]<<16|t[B++]<<8|t[B++],d=252645135&(m>>>4^b),b^=d,m^=d<<4,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,m=m<<1|m>>>31,b=b<<1|b>>>31,p=0;p<S;p+=3){for(E=k[p+1],v=k[p+2],g=k[p];g!==E;g+=v)A=b^e[g],w=(b>>>4|b<<28)^e[g+1],d=m,m=b,b=d^(o[A>>>24&63]|u[A>>>16&63]|f[A>>>8&63]|y[63&A]|a[w>>>24&63]|c[w>>>16&63]|h[w>>>8&63]|l[63&w]);d=m,m=b,b=d}m=m>>>1|m<<31,b=b>>>1|b<<31,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=252645135&(m>>>4^b),b^=d,m^=d<<4,K[C++]=m>>>24,K[C++]=m>>>16&255,K[C++]=m>>>8&255,K[C++]=255&m,K[C++]=b>>>24,K[C++]=b>>>16&255,K[C++]=b>>>8&255,K[C++]=255&b}return r||(K=function(e){let t,r=null;if(t=0,!r){for(r=1;0===e[e.length-r];)r++;r--}return e.subarray(0,e.length-r)}(K)),K}function Sl(e){const t=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],n=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],i=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],u=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],h=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],f=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],l=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],y=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],g=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=e.length>8?3:1,d=Array(32*p),A=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let w,m,b,k=0,E=0;for(let v=0;v<p;v++){let p=e[k++]<<24|e[k++]<<16|e[k++]<<8|e[k++],v=e[k++]<<24|e[k++]<<16|e[k++]<<8|e[k++];b=252645135&(p>>>4^v),v^=b,p^=b<<4,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=858993459&(p>>>2^v),v^=b,p^=b<<2,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=16711935&(v>>>8^p),p^=b,v^=b<<8,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=p<<8|v>>>20&240,p=v<<24|v<<8&16711680|v>>>8&65280|v>>>24&240,v=b;for(let e=0;e<16;e++)A[e]?(p=p<<2|p>>>26,v=v<<2|v>>>26):(p=p<<1|p>>>27,v=v<<1|v>>>27),p&=-15,v&=-15,w=t[p>>>28]|r[p>>>24&15]|n[p>>>20&15]|i[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],m=c[v>>>28]|u[v>>>24&15]|h[v>>>20&15]|f[v>>>16&15]|l[v>>>12&15]|y[v>>>8&15]|g[v>>>4&15],b=65535&(m>>>16^w),d[E++]=w^b,d[E++]=m^b<<16}return d}function Kl(e){this.key=[];for(let t=0;t<3;t++)this.key.push(new Uint8Array(e.subarray(8*t,8*t+8)));this.encrypt=function(e){return Il(Sl(this.key[2]),Il(Sl(this.key[1]),Il(Sl(this.key[0]),e,!0),!1),!0)}}function Cl(){this.BlockSize=8,this.KeySize=16,this.setKey=function(e){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),e.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(e),!0},this.reset=function(){for(let e=0;e<16;e++)this.masking[e]=0,this.rotate[e]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^n(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^i(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^i(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^i(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^i(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^i(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>>16&255,t[s+6]=o>>>8&255,t[s+7]=255&o}return t},this.decrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^i(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^n(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^n(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^n(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^n(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^n(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>16&255,t[s+6]=o>>8&255,t[s+7]=255&o}return t};const e=[,,,,];e[0]=[,,,,],e[0][0]=[4,0,13,15,12,14,8],e[0][1]=[5,2,16,18,17,19,10],e[0][2]=[6,3,23,22,21,20,9],e[0][3]=[7,1,26,25,27,24,11],e[1]=[,,,,],e[1][0]=[0,6,21,23,20,22,16],e[1][1]=[1,4,0,2,1,3,18],e[1][2]=[2,5,7,6,5,4,17],e[1][3]=[3,7,10,9,11,8,19],e[2]=[,,,,],e[2][0]=[4,0,13,15,12,14,8],e[2][1]=[5,2,16,18,17,19,10],e[2][2]=[6,3,23,22,21,20,9],e[2][3]=[7,1,26,25,27,24,11],e[3]=[,,,,],e[3][0]=[0,6,21,23,20,22,16],e[3][1]=[1,4,0,2,1,3,18],e[3][2]=[2,5,7,6,5,4,17],e[3][3]=[3,7,10,9,11,8,19];const t=[,,,,];function r(e,t,r){const n=t+e,i=n<<r|n>>>32-r;return(s[0][i>>>24]^s[1][i>>>16&255])-s[2][i>>>8&255]+s[3][255&i]}function n(e,t,r){const n=t^e,i=n<<r|n>>>32-r;return s[0][i>>>24]-s[1][i>>>16&255]+s[2][i>>>8&255]^s[3][255&i]}function i(e,t,r){const n=t-e,i=n<<r|n>>>32-r;return(s[0][i>>>24]+s[1][i>>>16&255]^s[2][i>>>8&255])-s[3][255&i]}t[0]=[,,,,],t[0][0]=[24,25,23,22,18],t[0][1]=[26,27,21,20,22],t[0][2]=[28,29,19,18,25],t[0][3]=[30,31,17,16,28],t[1]=[,,,,],t[1][0]=[3,2,12,13,8],t[1][1]=[1,0,14,15,13],t[1][2]=[7,6,8,9,3],t[1][3]=[5,4,10,11,7],t[2]=[,,,,],t[2][0]=[19,18,28,29,25],t[2][1]=[17,16,30,31,28],t[2][2]=[23,22,24,25,18],t[2][3]=[21,20,26,27,22],t[3]=[,,,,],t[3][0]=[8,9,7,6,3],t[3][1]=[10,11,5,4,7],t[3][2]=[12,13,3,2,8],t[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const n=[,,,,,,,,],i=Array(32);let a;for(let e=0;e<4;e++)a=4*e,n[e]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,u=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const t=e[r][a];c=n[t[1]],c^=s[4][n[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[5][n[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[6][n[t[4]>>>2]>>>24-8*(3&t[4])&255],c^=s[7][n[t[5]>>>2]>>>24-8*(3&t[5])&255],c^=s[o[a]][n[t[6]>>>2]>>>24-8*(3&t[6])&255],n[t[0]]=c}for(a=0;a<4;a++){const e=t[r][a];c=s[4][n[e[0]>>>2]>>>24-8*(3&e[0])&255],c^=s[5][n[e[1]>>>2]>>>24-8*(3&e[1])&255],c^=s[6][n[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[7][n[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[4+a][n[e[4]>>>2]>>>24-8*(3&e[4])&255],i[u]=c,u++}}for(let e=0;e<16;e++)this.masking[e]=i[e],this.rotate[e]=31&i[16+e]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function Dl(e){this.cast5=new Cl,this.cast5.setKey(e),this.encrypt=function(e){return this.cast5.encrypt(e)}}Kl.keySize=Kl.prototype.keySize=24,Kl.blockSize=Kl.prototype.blockSize=8,Dl.blockSize=Dl.prototype.blockSize=8,Dl.keySize=Dl.prototype.keySize=16;const Ul=4294967295;function Pl(e,t){return(e<<t|e>>>32-t)&Ul}function xl(e,t){return e[t]|e[t+1]<<8|e[t+2]<<16|e[t+3]<<24}function Ql(e,t,r){e.splice(t,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function Rl(e,t){return e>>>8*t&255}function Tl(e){this.tf=function(){let e=null,t=null,r=-1,n=[],i=[[],[],[],[]];function s(e){return i[0][Rl(e,0)]^i[1][Rl(e,1)]^i[2][Rl(e,2)]^i[3][Rl(e,3)]}function a(e){return i[0][Rl(e,3)]^i[1][Rl(e,0)]^i[2][Rl(e,1)]^i[3][Rl(e,2)]}function o(e,t){let r=s(t[0]),i=a(t[1]);t[2]=Pl(t[2]^r+i+n[4*e+8]&Ul,31),t[3]=Pl(t[3],1)^r+2*i+n[4*e+9]&Ul,r=s(t[2]),i=a(t[3]),t[0]=Pl(t[0]^r+i+n[4*e+10]&Ul,31),t[1]=Pl(t[1],1)^r+2*i+n[4*e+11]&Ul}function c(e,t){let r=s(t[0]),i=a(t[1]);t[2]=Pl(t[2],1)^r+i+n[4*e+10]&Ul,t[3]=Pl(t[3]^r+2*i+n[4*e+11]&Ul,31),r=s(t[2]),i=a(t[3]),t[0]=Pl(t[0],1)^r+i+n[4*e+8]&Ul,t[1]=Pl(t[1]^r+2*i+n[4*e+9]&Ul,31)}return{name:"twofish",blocksize:16,open:function(t){let r,s,a,o,c;e=t;const u=[],h=[],f=[];let l;const y=[];let g,p,d;const A=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],w=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],m=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],k=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],E=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],v=[[],[]],B=[[],[],[],[]];function I(e){return e^e>>2^[0,90,180,238][3&e]}function S(e){return e^e>>1^e>>2^[0,238,180,90][3&e]}function K(e,t){let r,n,i;for(r=0;r<8;r++)n=t>>>24,t=t<<8&Ul|e>>>24,e=e<<8&Ul,i=n<<1,128&n&&(i^=333),t^=n^i<<16,i^=n>>>1,1&n&&(i^=166),t^=i<<24|i<<8;return t}function C(e,t){const r=t>>4,n=15&t,i=A[e][r^n],s=w[e][k[n]^E[r]];return b[e][k[s]^E[i]]<<4|m[e][i^s]}function D(e,t){let r=Rl(e,0),n=Rl(e,1),i=Rl(e,2),s=Rl(e,3);switch(l){case 4:r=v[1][r]^Rl(t[3],0),n=v[0][n]^Rl(t[3],1),i=v[0][i]^Rl(t[3],2),s=v[1][s]^Rl(t[3],3);case 3:r=v[1][r]^Rl(t[2],0),n=v[1][n]^Rl(t[2],1),i=v[0][i]^Rl(t[2],2),s=v[0][s]^Rl(t[2],3);case 2:r=v[0][v[0][r]^Rl(t[1],0)]^Rl(t[0],0),n=v[0][v[1][n]^Rl(t[1],1)]^Rl(t[0],1),i=v[1][v[0][i]^Rl(t[1],2)]^Rl(t[0],2),s=v[1][v[1][s]^Rl(t[1],3)]^Rl(t[0],3)}return B[0][r]^B[1][n]^B[2][i]^B[3][s]}for(e=e.slice(0,32),r=e.length;16!==r&&24!==r&&32!==r;)e[r++]=0;for(r=0;r<e.length;r+=4)f[r>>2]=xl(e,r);for(r=0;r<256;r++)v[0][r]=C(0,r),v[1][r]=C(1,r);for(r=0;r<256;r++)g=v[1][r],p=I(g),d=S(g),B[0][r]=g+(p<<8)+(d<<16)+(d<<24),B[2][r]=p+(d<<8)+(g<<16)+(d<<24),g=v[0][r],p=I(g),d=S(g),B[1][r]=d+(d<<8)+(p<<16)+(g<<24),B[3][r]=p+(g<<8)+(d<<16)+(p<<24);for(l=f.length/2,r=0;r<l;r++)s=f[r+r],u[r]=s,a=f[r+r+1],h[r]=a,y[l-r-1]=K(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=D(s,u),a=Pl(D(a,h),8),n[r]=s+a&Ul,n[r+1]=Pl(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,l){case 4:s=v[1][s]^Rl(y[3],0),a=v[0][a]^Rl(y[3],1),o=v[0][o]^Rl(y[3],2),c=v[1][c]^Rl(y[3],3);case 3:s=v[1][s]^Rl(y[2],0),a=v[1][a]^Rl(y[2],1),o=v[0][o]^Rl(y[2],2),c=v[0][c]^Rl(y[2],3);case 2:i[0][r]=B[0][v[0][v[0][s]^Rl(y[1],0)]^Rl(y[0],0)],i[1][r]=B[1][v[0][v[1][a]^Rl(y[1],1)]^Rl(y[0],1)],i[2][r]=B[2][v[1][v[0][o]^Rl(y[1],2)]^Rl(y[0],2)],i[3][r]=B[3][v[1][v[1][c]^Rl(y[1],3)]^Rl(y[0],3)]}},close:function(){n=[],i=[[],[],[],[]]},encrypt:function(e,i){t=e,r=i;const s=[xl(t,r)^n[0],xl(t,r+4)^n[1],xl(t,r+8)^n[2],xl(t,r+12)^n[3]];for(let e=0;e<8;e++)o(e,s);return Ql(t,r,s[2]^n[4]),Ql(t,r+4,s[3]^n[5]),Ql(t,r+8,s[0]^n[6]),Ql(t,r+12,s[1]^n[7]),r+=16,t},decrypt:function(e,i){t=e,r=i;const s=[xl(t,r)^n[4],xl(t,r+4)^n[5],xl(t,r+8)^n[6],xl(t,r+12)^n[7]];for(let e=7;e>=0;e--)c(e,s);Ql(t,r,s[2]^n[0]),Ql(t,r+4,s[3]^n[1]),Ql(t,r+8,s[0]^n[2]),Ql(t,r+12,s[1]^n[3]),r+=16},finalize:function(){return t}}}(),this.tf.open(Array.from(e),0),this.encrypt=function(e){return this.tf.encrypt(Array.from(e),0)}}function Ml(){}function Fl(e){this.bf=new Ml,this.bf.init(e),this.encrypt=function(e){return this.bf.encryptBlock(e)}}Tl.keySize=Tl.prototype.keySize=32,Tl.blockSize=Tl.prototype.blockSize=16,Ml.prototype.BLOCKSIZE=8,Ml.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],Ml.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],Ml.prototype.NN=16,Ml.prototype._clean=function(e){return e<0&&(e=2147483648+(2147483647&e)),e},Ml.prototype._F=function(e){let t;const r=255&e,n=255&(e>>>=8),i=255&(e>>>=8),s=255&(e>>>=8);return t=this.sboxes[0][s]+this.sboxes[1][i],t^=this.sboxes[2][n],t+=this.sboxes[3][r],t},Ml.prototype._encryptBlock=function(e){let t,r=e[0],n=e[1];for(t=0;t<this.NN;++t){r^=this.parray[t],n=this._F(r)^n;const e=r;r=n,n=e}r^=this.parray[this.NN+0],n^=this.parray[this.NN+1],e[0]=this._clean(n),e[1]=this._clean(r)},Ml.prototype.encryptBlock=function(e){let t;const r=[0,0],n=this.BLOCKSIZE/2;for(t=0;t<this.BLOCKSIZE/2;++t)r[0]=r[0]<<8|255&e[t+0],r[1]=r[1]<<8|255&e[t+n];this._encryptBlock(r);const i=[];for(t=0;t<this.BLOCKSIZE/2;++t)i[t+0]=r[0]>>>24-8*t&255,i[t+n]=r[1]>>>24-8*t&255;return i},Ml.prototype._decryptBlock=function(e){let t,r=e[0],n=e[1];for(t=this.NN+1;t>1;--t){r^=this.parray[t],n=this._F(r)^n;const e=r;r=n,n=e}r^=this.parray[1],n^=this.parray[0],e[0]=this._clean(n),e[1]=this._clean(r)},Ml.prototype.init=function(e){let t,r=0;for(this.parray=[],t=0;t<this.NN+2;++t){let n=0;for(let t=0;t<4;++t)n=n<<8|255&e[r],++r>=e.length&&(r=0);this.parray[t]=this.PARRAY[t]^n}for(this.sboxes=[],t=0;t<4;++t)for(this.sboxes[t]=[],r=0;r<256;++r)this.sboxes[t][r]=this.SBOXES[t][r];const n=[0,0];for(t=0;t<this.NN+2;t+=2)this._encryptBlock(n),this.parray[t+0]=n[0],this.parray[t+1]=n[1];for(t=0;t<4;++t)for(r=0;r<256;r+=2)this._encryptBlock(n),this.sboxes[t][r+0]=n[0],this.sboxes[t][r+1]=n[1]},Fl.keySize=Fl.prototype.keySize=16,Fl.blockSize=Fl.prototype.blockSize=8;const Ll=new Map(Object.entries({tripledes:Kl,cast5:Dl,twofish:Tl,blowfish:Fl}));var Nl=Object.freeze({__proto__:null,legacyCiphers:Ll});function Ol(e,t,r,n){e[t]+=r[n],e[t+1]+=r[n+1]+(e[t]<r[n])}function Hl(e,t){e[0]+=t,e[1]+=e[0]<t}function zl(e,t,r,n,i,s,a,o){Ol(e,r,e,n),Ol(e,r,t,a);let c=e[s]^e[r],u=e[s+1]^e[r+1];e[s]=u,e[s+1]=c,Ol(e,i,e,s),c=e[n]^e[i],u=e[n+1]^e[i+1],e[n]=c>>>24^u<<8,e[n+1]=u>>>24^c<<8,Ol(e,r,e,n),Ol(e,r,t,o),c=e[s]^e[r],u=e[s+1]^e[r+1],e[s]=c>>>16^u<<16,e[s+1]=u>>>16^c<<16,Ol(e,i,e,s),c=e[n]^e[i],u=e[n+1]^e[i+1],e[n]=u>>>31^c<<1,e[n+1]=c>>>31^u<<1}const Gl=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),_l=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map(e=>2*e));function jl(e,t){const r=new Uint32Array(32),n=new Uint32Array(e.b.buffer,e.b.byteOffset,32);for(let t=0;t<16;t++)r[t]=e.h[t],r[t+16]=Gl[t];r[24]^=e.t0[0],r[25]^=e.t0[1];const i=t?4294967295:0;r[28]^=i,r[29]^=i;for(let e=0;e<12;e++){const t=e<<4;zl(r,n,0,8,16,24,_l[t+0],_l[t+1]),zl(r,n,2,10,18,26,_l[t+2],_l[t+3]),zl(r,n,4,12,20,28,_l[t+4],_l[t+5]),zl(r,n,6,14,22,30,_l[t+6],_l[t+7]),zl(r,n,0,10,20,30,_l[t+8],_l[t+9]),zl(r,n,2,12,22,24,_l[t+10],_l[t+11]),zl(r,n,4,14,16,26,_l[t+12],_l[t+13]),zl(r,n,6,8,18,28,_l[t+14],_l[t+15])}for(let t=0;t<16;t++)e.h[t]^=r[t]^r[t+16]}class Vl{constructor(e,t,r,n){const i=new Uint8Array(64);this.S={b:new Uint8Array(Zl),h:new Uint32Array(Yl/4),t0:new Uint32Array(2),c:0,outlen:e},i[0]=e,t&&(i[1]=t.length),i[2]=1,i[3]=1,r&&i.set(r,32),n&&i.set(n,48);const s=new Uint32Array(i.buffer,i.byteOffset,i.length/Uint32Array.BYTES_PER_ELEMENT);for(let e=0;e<16;e++)this.S.h[e]=Gl[e]^s[e];if(t){const e=new Uint8Array(Zl);e.set(t),this.update(e)}}update(e){if(!(e instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let t=0;for(;t<e.length;){this.S.c===Zl&&(Hl(this.S.t0,this.S.c),jl(this.S,!1),this.S.c=0);let r=Zl-this.S.c;this.S.b.set(e.subarray(t,t+r),this.S.c);const n=Math.min(r,e.length-t);this.S.c+=n,t+=n}return this}digest(e){Hl(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=Zl,jl(this.S,!0);const t=e||new Uint8Array(this.S.outlen);for(let e=0;e<this.S.outlen;e++)t[e]=this.S.h[e>>2]>>8*(3&e);return this.S.h=null,t.buffer}}function ql(e,t,r,n){if(e>Yl)throw Error(`outlen must be at most ${Yl} (given: ${e})`);return new Vl(e,t,r,n)}const Yl=64,Zl=128,Jl=1024,Xl=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function Wl(e,t,r){return e[r+0]=t,e[r+1]=t>>8,e[r+2]=t>>16,e[r+3]=t>>24,e}function $l(e,t,r){if(t>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let n=t;for(let t=r;t<r+7;t++)e[t]=n,n=(n-e[t])/256;return e}function ey(e,t,r){const n=new Uint8Array(64),i=new Uint8Array(4+t.length);if(Wl(i,e,0),i.set(t,4),e<=64)return ql(e).update(i).digest(r),r;const s=Math.ceil(e/32)-2;for(let e=0;e<s;e++)ql(64).update(0===e?i:n).digest(n),r.set(n.subarray(0,32),32*e);const a=new Uint8Array(ql(e-32*s).update(n).digest());return r.set(a,32*s),r}function ty(e,t,r,n){return e.fn.XOR(t.byteOffset,r.byteOffset,n.byteOffset),t}function ry(e,t,r,n){return e.fn.G(t.byteOffset,r.byteOffset,n.byteOffset,e.refs.gZ.byteOffset),n}function ny(e,t,r,n){return e.fn.G2(t.byteOffset,r.byteOffset,n.byteOffset,e.refs.gZ.byteOffset),n}function*iy(e,t,r,n,i,s,a,o){e.refs.prngTmp.fill(0);const c=e.refs.prngTmp.subarray(0,48);$l(c,t,0),$l(c,r,8),$l(c,n,16),$l(c,i,24),$l(c,s,32),$l(c,2,40);for(let t=1;t<=a;t++){$l(e.refs.prngTmp,t,c.length);const r=ny(e,e.refs.ZERO1024,e.refs.prngTmp,e.refs.prngR);for(let e=1===t?8*o:0;e<r.length;e+=8)yield r.subarray(e,e+8)}return[]}let sy;function ay(e,t,r,i){var s=null,a=n.atob(r),o=a.length;s=new Uint8Array(new ArrayBuffer(o));for(var c=0;c<o;c++)s[c]=a.charCodeAt(c);return function(e,t){var r=WebAssembly.instantiate,n=WebAssembly.compile;return t?r(e,t):n(e)}(s,i)}var oy,cy,uy,hy,fy,ly,yy,gy,py=Object.freeze({__proto__:null,default:async()=>async function(e,t){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),n=await async function(e,t,r){const n={env:{memory:e}};if(void 0===sy)try{const e=await t(n);return sy=!0,e}catch(e){sy=!1}return(sy?t:r)(n)}(r,e,t);return e=>function(e,{memory:t,instance:r}){if(!Xl)throw Error("BigEndian system not supported");const n=function({type:e,version:t,tagLength:r,password:n,salt:i,ad:s,secret:a,parallelism:o,memorySize:c,passes:u}){const h=(e,t,r,n)=>{if(t<r||t>n)throw Error(`${e} size should be between ${r} and ${n} bytes`)};if(2!==e||19!==t)throw Error("Unsupported type or version");return h("password",n,8,4294967295),h("salt",i,8,4294967295),h("tag",r,4,4294967295),h("memory",c,8*o,4294967295),s&&h("associated data",s,0,4294967295),a&&h("secret",a,0,32),{type:e,version:t,tagLength:r,password:n,salt:i,ad:s,secret:a,lanes:o,memorySize:c,passes:u}}({type:2,version:19,...e}),{G:i,G2:s,xor:a,getLZ:o}=r.exports,c={},u={};u.G=i,u.G2=s,u.XOR=a;const h=4*n.lanes*Math.floor(n.memorySize/(4*n.lanes)),f=h*Jl+10240;if(t.buffer.byteLength<f){const e=Math.ceil((f-t.buffer.byteLength)/65536);t.grow(e)}let l=0;c.gZ=new Uint8Array(t.buffer,l,Jl),l+=c.gZ.length,c.prngR=new Uint8Array(t.buffer,l,Jl),l+=c.prngR.length,c.prngTmp=new Uint8Array(t.buffer,l,Jl),l+=c.prngTmp.length,c.ZERO1024=new Uint8Array(t.buffer,l,1024),l+=c.ZERO1024.length;const y=new Uint32Array(t.buffer,l,2);l+=y.length*Uint32Array.BYTES_PER_ELEMENT;const g={fn:u,refs:c},p=new Uint8Array(t.buffer,l,Jl);l+=p.length;const d=new Uint8Array(t.buffer,l,n.memorySize*Jl),A=new Uint8Array(t.buffer,0,l),w=function(e){const t=ql(64),r=new Uint8Array(4),n=new Uint8Array(24);Wl(n,e.lanes,0),Wl(n,e.tagLength,4),Wl(n,e.memorySize,8),Wl(n,e.passes,12),Wl(n,e.version,16),Wl(n,e.type,20);const i=[n];e.password?(i.push(Wl(new Uint8Array(4),e.password.length,0)),i.push(e.password)):i.push(r),e.salt?(i.push(Wl(new Uint8Array(4),e.salt.length,0)),i.push(e.salt)):i.push(r),e.secret?(i.push(Wl(new Uint8Array(4),e.secret.length,0)),i.push(e.secret)):i.push(r),e.ad?(i.push(Wl(new Uint8Array(4),e.ad.length,0)),i.push(e.ad)):i.push(r),t.update(function(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!(e[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let n=0;return e.forEach(e=>{r.set(e,n),n+=e.length}),r}(i));const s=t.digest();return new Uint8Array(s)}(n),m=h/n.lanes,b=Array(n.lanes).fill(null).map(()=>Array(m)),k=(e,t)=>(b[e][t]=d.subarray(e*m*1024+1024*t,e*m*1024+1024*t+Jl),b[e][t]);for(let e=0;e<n.lanes;e++){const t=new Uint8Array(w.length+8);t.set(w),Wl(t,0,w.length),Wl(t,e,w.length+4),ey(Jl,t,k(e,0)),Wl(t,1,w.length),ey(Jl,t,k(e,1))}const E=m/4;for(let e=0;e<n.passes;e++)for(let t=0;t<4;t++){const r=0===e&&t<=1;for(let i=0;i<n.lanes;i++){let s=0===t&&0===e?2:0;const a=r?iy(g,e,i,t,h,n.passes,E,s):null;for(;s<E;s++){const c=t*E+s,u=c>0?b[i][c-1]:b[i][m-1],h=r?a.next().value:u;o(y.byteOffset,h.byteOffset,i,n.lanes,e,t,s,4,E);const f=y[0],l=y[1];0===e&&k(i,c),ry(g,u,b[f][l],e>0?p:b[i][c]),e>0&&ty(g,b[i][c],p,b[i][c])}}}const v=b[0][m-1];for(let e=1;e<n.lanes;e++)ty(g,v,v,b[e][m-1]);const B=ey(n.tagLength,v,new Uint8Array(n.tagLength));return A.fill(0),t.grow(0),B}(e,{instance:n.instance,memory:r})}(e=>ay(0,0,"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",e),e=>ay(0,0,"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",e))}),dy=function(){if(gy)return yy;gy=1;var e,t=function(){if(cy)return oy;cy=1;var e=[0,1,3,7,15,31,63,127,255],t=function(e){this.stream=e,this.bitOffset=0,this.curByte=0,this.hasByte=!1};return t.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},t.prototype.read=function(t){for(var r=0;t>0;){this._ensureByte();var n=8-this.bitOffset;if(t>=n)r<<=n,r|=e[n]&this.curByte,this.hasByte=!1,this.bitOffset=0,t-=n;else{r<<=t;var i=n-t;r|=(this.curByte&e[t]<<i)>>i,this.bitOffset+=t,t=0}}return r},t.prototype.seek=function(e){var t=e%8,r=(e-t)/8;this.bitOffset=t,this.stream.seek(r),this.hasByte=!1},t.prototype.pi=function(){var e,t=new Uint8Array(6);for(e=0;e<t.length;e++)t[e]=this.read(8);return function(e){return Array.prototype.map.call(e,e=>("00"+e.toString(16)).slice(-2)).join("")}(t)},oy=t}(),r=function(){if(hy)return uy;hy=1;var e=function(){};return e.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},e.prototype.read=function(e,t,r){for(var n=0;n<r;){var i=this.readByte();if(i<0)return 0===n?-1:n;e[t++]=i,n++}return n},e.prototype.seek=function(e){throw Error("abstract method seek() not implemented")},e.prototype.writeByte=function(e){throw Error("abstract method readByte() not implemented")},e.prototype.write=function(e,t,r){var n;for(n=0;n<r;n++)this.writeByte(e[t++]);return r},e.prototype.flush=function(){},uy=e}(),n=ly?fy:(ly=1,e=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),fy=function(){var t=4294967295;this.getCRC=function(){return~t>>>0},this.updateCRC=function(r){t=t<<8^e[255&(t>>>24^r)]},this.updateCRCRun=function(r,n){for(;n-- >0;)t=t<<8^e[255&(t>>>24^r)]}}),i=function(e,t){var r,n=e[t];for(r=t;r>0;r--)e[r]=e[r-1];return e[0]=n,n},s={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},a={};a[s.LAST_BLOCK]="Bad file checksum",a[s.NOT_BZIP_DATA]="Not bzip data",a[s.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",a[s.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",a[s.DATA_ERROR]="Data error",a[s.OUT_OF_MEMORY]="Out of memory",a[s.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var o=function(e,t){var r=a[e]||"unknown error";t&&(r+=": "+t);var n=new TypeError(r);throw n.errorCode=e,n},c=function(e,t){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(e,t)};c.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new n,!0):(this.writeCount=-1,!1)},c.prototype._start_bunzip=function(e,r){var n=new Uint8Array(4);4===e.read(n,0,4)&&"BZh"===String.fromCharCode(n[0],n[1],n[2])||o(s.NOT_BZIP_DATA,"bad magic");var i=n[3]-48;(i<1||i>9)&&o(s.NOT_BZIP_DATA,"level out of range"),this.reader=new t(e),this.dbufSize=1e5*i,this.nextoutput=0,this.outputStream=r,this.streamCRC=0},c.prototype._get_next_block=function(){var e,t,r,n=this.reader,a=n.pi();if("177245385090"===a)return!1;"314159265359"!==a&&o(s.NOT_BZIP_DATA),this.targetBlockCRC=n.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,n.read(1)&&o(s.OBSOLETE_INPUT);var c=n.read(24);c>this.dbufSize&&o(s.DATA_ERROR,"initial position out of bounds");var u=n.read(16),h=new Uint8Array(256),f=0;for(e=0;e<16;e++)if(u&1<<15-e){var l=16*e;for(r=n.read(16),t=0;t<16;t++)r&1<<15-t&&(h[f++]=l+t)}var y=n.read(3);(y<2||y>6)&&o(s.DATA_ERROR);var g=n.read(15);0===g&&o(s.DATA_ERROR);var p=new Uint8Array(256);for(e=0;e<y;e++)p[e]=e;var d=new Uint8Array(g);for(e=0;e<g;e++){for(t=0;n.read(1);t++)t>=y&&o(s.DATA_ERROR);d[e]=i(p,t)}var A,w=f+2,m=[];for(t=0;t<y;t++){var b,k,E=new Uint8Array(w),v=new Uint16Array(21);for(u=n.read(5),e=0;e<w;e++){for(;(u<1||u>20)&&o(s.DATA_ERROR),n.read(1);)n.read(1)?u--:u++;E[e]=u}for(b=k=E[0],e=1;e<w;e++)E[e]>k?k=E[e]:E[e]<b&&(b=E[e]);A={},m.push(A),A.permute=new Uint16Array(258),A.limit=new Uint32Array(22),A.base=new Uint32Array(21),A.minLen=b,A.maxLen=k;var B=0;for(e=b;e<=k;e++)for(v[e]=A.limit[e]=0,u=0;u<w;u++)E[u]===e&&(A.permute[B++]=u);for(e=0;e<w;e++)v[E[e]]++;for(B=u=0,e=b;e<k;e++)B+=v[e],A.limit[e]=B-1,B<<=1,u+=v[e],A.base[e+1]=B-u;A.limit[k+1]=Number.MAX_VALUE,A.limit[k]=B+v[k]-1,A.base[b]=0}var I=new Uint32Array(256);for(e=0;e<256;e++)p[e]=e;var S,K=0,C=0,D=0,U=this.dbuf=new Uint32Array(this.dbufSize);for(w=0;;){for(w--||(w=49,D>=g&&o(s.DATA_ERROR),A=m[d[D++]]),e=A.minLen,t=n.read(e);e>A.maxLen&&o(s.DATA_ERROR),!(t<=A.limit[e]);e++)t=t<<1|n.read(1);((t-=A.base[e])<0||t>=258)&&o(s.DATA_ERROR);var P=A.permute[t];if(0!==P&&1!==P){if(K)for(K=0,C+u>this.dbufSize&&o(s.DATA_ERROR),I[S=h[p[0]]]+=u;u--;)U[C++]=S;if(P>f)break;C>=this.dbufSize&&o(s.DATA_ERROR),I[S=h[S=i(p,e=P-1)]]++,U[C++]=S}else K||(K=1,u=0),u+=0===P?K:2*K,K<<=1}for((c<0||c>=C)&&o(s.DATA_ERROR),t=0,e=0;e<256;e++)r=t+I[e],I[e]=t,t=r;for(e=0;e<C;e++)U[I[S=255&U[e]]]|=e<<8,I[S]++;var x=0,Q=0,R=0;return C&&(Q=255&(x=U[c]),x>>=8,R=-1),this.writePos=x,this.writeCurrent=Q,this.writeCount=C,this.writeRun=R,!0},c.prototype._read_bunzip=function(e,t){var r,n,i;if(this.writeCount<0)return 0;var a=this.dbuf,c=this.writePos,u=this.writeCurrent,h=this.writeCount;this.outputsize;for(var f=this.writeRun;h;){for(h--,n=u,u=255&(c=a[c]),c>>=8,3==f++?(r=u,i=n,u=-1):(r=1,i=u),this.blockCRC.updateCRCRun(i,r);r--;)this.outputStream.writeByte(i),this.nextoutput++;u!=n&&(f=0)}return this.writeCount=h,this.blockCRC.getCRC()!==this.targetBlockCRC&&o(s.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var u=function(e){if("readByte"in e)return e;var t=new r;return t.pos=0,t.readByte=function(){return e[this.pos++]},t.seek=function(e){this.pos=e},t.eof=function(){return this.pos>=e.length},t},h=function(e){var t=new r,n=!0;if(e)if("number"==typeof e)t.buffer=new Uint8Array(e),n=!1;else{if("writeByte"in e)return e;t.buffer=e,n=!1}else t.buffer=new Uint8Array(16384);return t.pos=0,t.writeByte=function(e){if(n&&this.pos>=this.buffer.length){var t=new Uint8Array(2*this.buffer.length);t.set(this.buffer),this.buffer=t}this.buffer[this.pos++]=e},t.getBuffer=function(){if(this.pos!==this.buffer.length){if(!n)throw new TypeError("outputsize does not match decoded input");var e=new Uint8Array(this.pos);e.set(this.buffer.subarray(0,this.pos)),this.buffer=e}return this.buffer},t._coerced=!0,t};return yy={Bunzip:c,Stream:r,Err:s,decode:function(e,t,r){for(var n=u(e),i=h(t),a=new c(n,i);!("eof"in n)||!n.eof();)if(a._init_block())a._read_bunzip();else{var f=a.reader.read(32)>>>0;if(f!==a.streamCRC&&o(s.DATA_ERROR,"Bad stream CRC (got "+a.streamCRC.toString(16)+" expected "+f.toString(16)+")"),!r||!("eof"in n)||n.eof())break;a._start_bunzip(n,i)}if("getBuffer"in i)return i.getBuffer()},decodeBlock:function(e,t,r){var i=u(e),s=h(r),a=new c(i,s);if(a.reader.seek(t),a._get_next_block()&&(a.blockCRC=new n,a.writeCopies=0,a._read_bunzip()),"getBuffer"in s)return s.getBuffer()},table:function(e,t,n){var i=new r;i.delegate=u(e),i.pos=0,i.readByte=function(){return this.pos++,this.delegate.readByte()},i.delegate.eof&&(i.eof=i.delegate.eof.bind(i.delegate));var s=new r;s.pos=0,s.writeByte=function(){this.pos++};for(var a=new c(i,s),o=a.dbufSize;!("eof"in i)||!i.eof();){var h=8*i.pos+a.reader.bitOffset;if(a.reader.hasByte&&(h-=8),a._init_block()){var f=s.pos;a._read_bunzip(),t(h,s.pos-f)}else{if(a.reader.read(32),!n||!("eof"in i)||i.eof())break;a._start_bunzip(i,s),console.assert(a.dbufSize===o,"shouldn't change block size within multistream file")}}}}}(),Ay=i({__proto__:null},[dy])}};