ts-mls 1.0.1

package/dist/src/messageProtectionPublic.js

@@ -0,0 +1,105 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.protectProposalPublic = protectProposalPublic;
+exports.protectExternalProposalPublic = protectExternalProposalPublic;
+exports.protectPublicMessage = protectPublicMessage;
+exports.unprotectPublicMessage = unprotectPublicMessage;
+const authenticatedContent_1 = require("./authenticatedContent");
+const framedContent_1 = require("./framedContent");
+const mlsError_1 = require("./mlsError");
+const publicMessage_1 = require("./publicMessage");
+async function protectProposalPublic(signKey, membershipKey, groupContext, authenticatedData, proposal, leafIndex, cs) {
+    const framedContent = {
+        groupId: groupContext.groupId,
+        epoch: groupContext.epoch,
+        sender: { senderType: "member", leafIndex },
+        contentType: "proposal",
+        authenticatedData,
+        proposal,
+    };
+    const tbs = {
+        protocolVersion: groupContext.version,
+        wireformat: "mls_public_message",
+        content: framedContent,
+        senderType: "member",
+        context: groupContext,
+    };
+    const auth = await (0, framedContent_1.signFramedContentApplicationOrProposal)(signKey, tbs, cs);
+    const authenticatedContent = {
+        wireformat: "mls_public_message",
+        content: framedContent,
+        auth,
+    };
+    const msg = await protectPublicMessage(membershipKey, groupContext, authenticatedContent, cs);
+    return { publicMessage: msg };
+}
+async function protectExternalProposalPublic(signKey, groupContext, authenticatedData, proposal, sender, cs) {
+    const framedContent = {
+        groupId: groupContext.groupId,
+        epoch: groupContext.epoch,
+        sender,
+        contentType: "proposal",
+        authenticatedData,
+        proposal,
+    };
+    const tbs = {
+        protocolVersion: groupContext.version,
+        wireformat: "mls_public_message",
+        content: framedContent,
+        senderType: sender.senderType,
+        context: groupContext,
+    };
+    const auth = await (0, framedContent_1.signFramedContentApplicationOrProposal)(signKey, tbs, cs);
+    const msg = {
+        content: framedContent,
+        auth,
+        senderType: sender.senderType,
+    };
+    return { publicMessage: msg };
+}
+async function protectPublicMessage(membershipKey, groupContext, content, cs) {
+    if (content.content.contentType === "application")
+        throw new mlsError_1.UsageError("Can't make an application message public");
+    if (content.content.sender.senderType == "member") {
+        const authenticatedContent = {
+            contentTbs: (0, framedContent_1.toTbs)(content.content, "mls_public_message", groupContext),
+            auth: content.auth,
+        };
+        const tag = await (0, authenticatedContent_1.createMembershipTag)(membershipKey, authenticatedContent, cs.hash);
+        return {
+            content: content.content,
+            auth: content.auth,
+            senderType: "member",
+            membershipTag: tag,
+        };
+    }
+    return {
+        content: content.content,
+        auth: content.auth,
+        senderType: content.content.sender.senderType,
+    };
+}
+async function unprotectPublicMessage(membershipKey, groupContext, ratchetTree, msg, cs, overrideSignatureKey) {
+    if (msg.content.contentType === "application")
+        throw new mlsError_1.UsageError("Can't make an application message public");
+    if (msg.senderType === "member") {
+        const authenticatedContent = {
+            contentTbs: (0, framedContent_1.toTbs)(msg.content, "mls_public_message", groupContext),
+            auth: msg.auth,
+        };
+        if (!(await (0, authenticatedContent_1.verifyMembershipTag)(membershipKey, authenticatedContent, msg.membershipTag, cs.hash)))
+            throw new mlsError_1.CryptoVerificationError("Could not verify membership");
+    }
+    const signaturePublicKey = overrideSignatureKey !== undefined
+        ? overrideSignatureKey
+        : (0, publicMessage_1.findSignaturePublicKey)(ratchetTree, groupContext, msg.content);
+    const signatureValid = await (0, framedContent_1.verifyFramedContentSignature)(signaturePublicKey, "mls_public_message", msg.content, msg.auth, groupContext, cs.signature);
+    if (!signatureValid)
+        throw new mlsError_1.CryptoVerificationError("Signature invalid");
+    return {
+        wireformat: "mls_public_message",
+        content: msg.content,
+        auth: msg.auth,
+    };
+}
+//# sourceMappingURL=messageProtectionPublic.js.map

package/dist/src/messageProtectionPublic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messageProtectionPublic.js","sourceRoot":"","sources":["../../src/messageProtectionPublic.ts"],"names":[],"mappings":";;AAuBA,sDAqCC;AAED,sEAkCC;AAED,oDA4BC;AAID,wDAyCC;AA3KD,iEAM+B;AAE/B,mDAKwB;AAExB,yCAAgE;AAEhE,mDAA8F;AAMvF,KAAK,UAAU,qBAAqB,CACzC,OAAmB,EACnB,aAAyB,EACzB,YAA0B,EAC1B,iBAA6B,EAC7B,QAAkB,EAClB,SAAiB,EACjB,EAAmB;IAEnB,MAAM,aAAa,GAAkB;QACnC,OAAO,EAAE,YAAY,CAAC,OAAO;QAC7B,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE;QAC3C,WAAW,EAAE,UAAU;QACvB,iBAAiB;QACjB,QAAQ;KACT,CAAA;IAED,MAAM,GAAG,GAAG;QACV,eAAe,EAAE,YAAY,CAAC,OAAO;QACrC,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,aAAa;QACtB,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,YAAY;KACb,CAAA;IAEV,MAAM,IAAI,GAAG,MAAM,IAAA,sDAAsC,EAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAE3E,MAAM,oBAAoB,GAAyB;QACjD,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,aAAa;QACtB,IAAI;KACL,CAAA;IAED,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,aAAa,EAAE,YAAY,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAA;IAE7F,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,CAAA;AAC/B,CAAC;AAEM,KAAK,UAAU,6BAA6B,CACjD,OAAmB,EACnB,YAA0B,EAC1B,iBAA6B,EAC7B,QAAkB,EAClB,MAAuB,EACvB,EAAmB;IAEnB,MAAM,aAAa,GAAkB;QACnC,OAAO,EAAE,YAAY,CAAC,OAAO;QAC7B,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,MAAM;QACN,WAAW,EAAE,UAAU;QACvB,iBAAiB;QACjB,QAAQ;KACT,CAAA;IAED,MAAM,GAAG,GAAG;QACV,eAAe,EAAE,YAAY,CAAC,OAAO;QACrC,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,aAAa;QACtB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,YAAY;KACb,CAAA;IAEV,MAAM,IAAI,GAAG,MAAM,IAAA,sDAAsC,EAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAE3E,MAAM,GAAG,GAA0B;QACjC,OAAO,EAAE,aAAa;QACtB,IAAI;QACJ,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAA;IAED,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,CAAA;AAC/B,CAAC;AAEM,KAAK,UAAU,oBAAoB,CACxC,aAAyB,EACzB,YAA0B,EAC1B,OAA6B,EAC7B,EAAmB;IAEnB,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,KAAK,aAAa;QAAE,MAAM,IAAI,qBAAU,CAAC,0CAA0C,CAAC,CAAA;IAEnH,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,QAAQ,EAAE,CAAC;QAClD,MAAM,oBAAoB,GAA4B;YACpD,UAAU,EAAE,IAAA,qBAAK,EAAC,OAAO,CAAC,OAAO,EAAE,oBAAoB,EAAE,YAAY,CAAC;YACtE,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAA;QAED,MAAM,GAAG,GAAG,MAAM,IAAA,0CAAmB,EAAC,aAAa,EAAE,oBAAoB,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;QACnF,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,QAAQ;YACpB,aAAa,EAAE,GAAG;SACnB,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU;KAC9C,CAAA;AACH,CAAC;AAIM,KAAK,UAAU,sBAAsB,CAC1C,aAAyB,EACzB,YAA0B,EAC1B,WAAwB,EACxB,GAAkB,EAClB,EAAmB,EACnB,oBAAiC;IAEjC,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,aAAa;QAAE,MAAM,IAAI,qBAAU,CAAC,0CAA0C,CAAC,CAAA;IAE/G,IAAI,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,oBAAoB,GAA4B;YACpD,UAAU,EAAE,IAAA,qBAAK,EAAC,GAAG,CAAC,OAAO,EAAE,oBAAoB,EAAE,YAAY,CAAC;YAClE,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAA;QAED,IAAI,CAAC,CAAC,MAAM,IAAA,0CAAmB,EAAC,aAAa,EAAE,oBAAoB,EAAE,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAC/F,MAAM,IAAI,kCAAuB,CAAC,6BAA6B,CAAC,CAAA;IACpE,CAAC;IAED,MAAM,kBAAkB,GACtB,oBAAoB,KAAK,SAAS;QAChC,CAAC,CAAC,oBAAoB;QACtB,CAAC,CAAC,IAAA,sCAAsB,EAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IAEpE,MAAM,cAAc,GAAG,MAAM,IAAA,4CAA4B,EACvD,kBAAkB,EAClB,oBAAoB,EACpB,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,IAAI,EACR,YAAY,EACZ,EAAE,CAAC,SAAS,CACb,CAAA;IAED,IAAI,CAAC,cAAc;QAAE,MAAM,IAAI,kCAAuB,CAAC,mBAAmB,CAAC,CAAA;IAE3E,OAAO;QACL,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI;KACf,CAAA;AACH,CAAC"}

package/dist/src/mlsError.d.ts

@@ -0,0 +1,24 @@
+export declare class MlsError extends Error {
+    constructor(message: string);
+}
+export declare class ValidationError extends MlsError {
+    constructor(message: string);
+}
+export declare class CodecError extends MlsError {
+    constructor(message: string);
+}
+export declare class UsageError extends MlsError {
+    constructor(message: string);
+}
+export declare class DependencyError extends MlsError {
+    constructor(message: string);
+}
+export declare class CryptoVerificationError extends MlsError {
+    constructor(message: string);
+}
+export declare class CryptoError extends MlsError {
+    constructor(message: string);
+}
+export declare class InternalError extends MlsError {
+    constructor(message: string);
+}

package/dist/src/mlsError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mlsError.d.ts","sourceRoot":"","sources":["../../src/mlsError.ts"],"names":[],"mappings":"AAAA,qBAAa,QAAS,SAAQ,KAAK;gBACrB,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,eAAgB,SAAQ,QAAQ;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,UAAW,SAAQ,QAAQ;gBAC1B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,UAAW,SAAQ,QAAQ;gBAC1B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,eAAgB,SAAQ,QAAQ;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,uBAAwB,SAAQ,QAAQ;gBACvC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,WAAY,SAAQ,QAAQ;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,aAAc,SAAQ,QAAQ;gBAC7B,OAAO,EAAE,MAAM;CAI5B"}

package/dist/src/mlsError.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InternalError = exports.CryptoError = exports.CryptoVerificationError = exports.DependencyError = exports.UsageError = exports.CodecError = exports.ValidationError = exports.MlsError = void 0;
+class MlsError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "MlsError";
+    }
+}
+exports.MlsError = MlsError;
+class ValidationError extends MlsError {
+    constructor(message) {
+        super(message);
+        this.name = "ValidationError";
+    }
+}
+exports.ValidationError = ValidationError;
+class CodecError extends MlsError {
+    constructor(message) {
+        super(message);
+        this.name = "CodecError";
+    }
+}
+exports.CodecError = CodecError;
+class UsageError extends MlsError {
+    constructor(message) {
+        super(message);
+        this.name = "UsageError";
+    }
+}
+exports.UsageError = UsageError;
+class DependencyError extends MlsError {
+    constructor(message) {
+        super(message);
+        this.name = "DependencyError";
+    }
+}
+exports.DependencyError = DependencyError;
+class CryptoVerificationError extends MlsError {
+    constructor(message) {
+        super(message);
+        this.name = "CryptoVerificationError";
+    }
+}
+exports.CryptoVerificationError = CryptoVerificationError;
+class CryptoError extends MlsError {
+    constructor(message) {
+        super(message);
+        this.name = "CryptoError";
+    }
+}
+exports.CryptoError = CryptoError;
+class InternalError extends MlsError {
+    constructor(message) {
+        super(`This error should never occur, if you see this please submit a bug report. Message: ${message}`);
+        this.name = "InternalError";
+    }
+}
+exports.InternalError = InternalError;
+//# sourceMappingURL=mlsError.js.map

package/dist/src/mlsError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mlsError.js","sourceRoot":"","sources":["../../src/mlsError.ts"],"names":[],"mappings":";;;AAAA,MAAa,QAAS,SAAQ,KAAK;IACjC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,UAAU,CAAA;IACxB,CAAC;CACF;AALD,4BAKC;AAED,MAAa,eAAgB,SAAQ,QAAQ;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;IAC/B,CAAC;CACF;AALD,0CAKC;AAED,MAAa,UAAW,SAAQ,QAAQ;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,YAAY,CAAA;IAC1B,CAAC;CACF;AALD,gCAKC;AAED,MAAa,UAAW,SAAQ,QAAQ;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,YAAY,CAAA;IAC1B,CAAC;CACF;AALD,gCAKC;AAED,MAAa,eAAgB,SAAQ,QAAQ;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;IAC/B,CAAC;CACF;AALD,0CAKC;AAED,MAAa,uBAAwB,SAAQ,QAAQ;IACnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IACvC,CAAC;CACF;AALD,0DAKC;AAED,MAAa,WAAY,SAAQ,QAAQ;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,aAAa,CAAA;IAC3B,CAAC;CACF;AALD,kCAKC;AAED,MAAa,aAAc,SAAQ,QAAQ;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,uFAAuF,OAAO,EAAE,CAAC,CAAA;QACvG,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC7B,CAAC;CACF;AALD,sCAKC"}

package/dist/src/nodeType.d.ts

@@ -0,0 +1,11 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+declare const nodeTypes: {
+    readonly leaf: 1;
+    readonly parent: 2;
+};
+export type NodeTypeName = keyof typeof nodeTypes;
+export type NodeTypeValue = (typeof nodeTypes)[NodeTypeName];
+export declare const encodeNodeType: Encoder<NodeTypeName>;
+export declare const decodeNodeType: Decoder<NodeTypeName>;
+export {};

package/dist/src/nodeType.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeType.d.ts","sourceRoot":"","sources":["../../src/nodeType.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAoB,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAoB,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAG9D,QAAA,MAAM,SAAS;;;CAGL,CAAA;AAEV,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,SAAS,CAAA;AACjD,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,YAAY,CAAC,CAAA;AAE5D,eAAO,MAAM,cAAc,EAAE,OAAO,CAAC,YAAY,CAAsD,CAAA;AAEvG,eAAO,MAAM,cAAc,EAAE,OAAO,CAAC,YAAY,CAA6D,CAAA"}

package/dist/src/nodeType.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeNodeType = exports.encodeNodeType = void 0;
+const number_1 = require("./codec/number");
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const enumHelpers_1 = require("./util/enumHelpers");
+const nodeTypes = {
+    leaf: 1,
+    parent: 2,
+};
+exports.encodeNodeType = (0, tlsEncoder_1.contramapEncoder)(number_1.encodeUint8, (t) => nodeTypes[t]);
+exports.decodeNodeType = (0, tlsDecoder_1.mapDecoderOption)(number_1.decodeUint8, (0, enumHelpers_1.enumNumberToKey)(nodeTypes));
+//# sourceMappingURL=nodeType.js.map

package/dist/src/nodeType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeType.js","sourceRoot":"","sources":["../../src/nodeType.ts"],"names":[],"mappings":";;;AAAA,2CAAyD;AACzD,mDAA8D;AAC9D,mDAA8D;AAC9D,oDAAoD;AAEpD,MAAM,SAAS,GAAG;IAChB,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;CACD,CAAA;AAKG,QAAA,cAAc,GAA0B,IAAA,6BAAgB,EAAC,oBAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;AAE1F,QAAA,cAAc,GAA0B,IAAA,6BAAgB,EAAC,oBAAW,EAAE,IAAA,6BAAe,EAAC,SAAS,CAAC,CAAC,CAAA"}

package/dist/src/paddingConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paddingConfig.d.ts","sourceRoot":"","sources":["../../src/paddingConfig.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAA;AAEhD,eAAO,MAAM,oBAAoB,EAAE,aAA+D,CAAA;AAElG,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,CAGpF"}

package/dist/src/parentHash.d.ts

@@ -0,0 +1,16 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { Hash } from "./crypto/hash";
+import { RatchetTree } from "./ratchetTree";
+export type ParentHashInput = {
+    encryptionKey: Uint8Array;
+    parentHash: Uint8Array;
+    originalSiblingTreeHash: Uint8Array;
+};
+export declare const encodeParentHashInput: Encoder<ParentHashInput>;
+export declare const decodeParentHashInput: Decoder<ParentHashInput>;
+export declare function verifyParentHashes(tree: RatchetTree, h: Hash): Promise<boolean>;
+/**
+ * Calculcates parent hash for a given node or leaf and returns the node index of the parent or undefined if the given node is the root node.
+ */
+export declare function calculateParentHash(tree: RatchetTree, nodeIndex: number, h: Hash): Promise<[Uint8Array, number | undefined]>;

package/dist/src/parentHash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parentHash.d.ts","sourceRoot":"","sources":["../../src/parentHash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAqB,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAE/D,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAA;AAEpC,OAAO,EAAmC,WAAW,EAAgB,MAAM,eAAe,CAAA;AAM1F,MAAM,MAAM,eAAe,GAAG;IAC5B,aAAa,EAAE,UAAU,CAAA;IACzB,UAAU,EAAE,UAAU,CAAA;IACtB,uBAAuB,EAAE,UAAU,CAAA;CACpC,CAAA;AAED,eAAO,MAAM,qBAAqB,EAAE,OAAO,CAAC,eAAe,CAG1D,CAAA;AAED,eAAO,MAAM,qBAAqB,EAAE,OAAO,CAAC,eAAe,CAO1D,CAAA;AAWD,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAYrF;AAuDD;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,WAAW,EACjB,SAAS,EAAE,MAAM,EACjB,CAAC,EAAE,IAAI,GACN,OAAO,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CA8B3C"}

package/dist/src/parentHash.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeParentHashInput = exports.encodeParentHashInput = void 0;
+exports.verifyParentHashes = verifyParentHashes;
+exports.calculateParentHash = calculateParentHash;
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const variableLength_1 = require("./codec/variableLength");
+const mlsError_1 = require("./mlsError");
+const ratchetTree_1 = require("./ratchetTree");
+const treeHash_1 = require("./treeHash");
+const treemath_1 = require("./treemath");
+const constantTimeCompare_1 = require("./util/constantTimeCompare");
+exports.encodeParentHashInput = (0, tlsEncoder_1.contramapEncoders)([variableLength_1.encodeVarLenData, variableLength_1.encodeVarLenData, variableLength_1.encodeVarLenData], (i) => [i.encryptionKey, i.parentHash, i.originalSiblingTreeHash]);
+exports.decodeParentHashInput = (0, tlsDecoder_1.mapDecoders)([variableLength_1.decodeVarLenData, variableLength_1.decodeVarLenData, variableLength_1.decodeVarLenData], (encryptionKey, parentHash, originalSiblingTreeHash) => ({
+    encryptionKey,
+    parentHash,
+    originalSiblingTreeHash,
+}));
+function validateParentHashCoverage(parentIndices, coverage) {
+    for (const index of parentIndices) {
+        if ((coverage[index] ?? 0) !== 1) {
+            return false;
+        }
+    }
+    return true;
+}
+async function verifyParentHashes(tree, h) {
+    const parentNodes = tree.reduce((acc, cur, index) => {
+        if (cur !== undefined && cur.nodeType === "parent") {
+            return [...acc, index];
+        }
+        else
+            return acc;
+    }, []);
+    if (parentNodes.length === 0)
+        return true;
+    const coverage = await parentHashCoverage(tree, h);
+    return validateParentHashCoverage(parentNodes, coverage);
+}
+/**
+ * Traverse tree from bottom up, verifying that all non-blank parent nodes are covered by exactly one chain
+ */
+function parentHashCoverage(tree, h) {
+    const leaves = tree.filter((_v, i) => (0, treemath_1.isLeaf)(i));
+    return leaves.reduce(async (acc, leafNode, leafIndex) => {
+        if (leafNode === undefined)
+            return acc;
+        let currentIndex = (0, treemath_1.leafToNodeIndex)(leafIndex);
+        let updated = { ...(await acc) };
+        const rootIndex = (0, treemath_1.root)((0, treemath_1.leafWidth)(tree.length));
+        while (currentIndex !== rootIndex) {
+            const currentNode = tree[currentIndex];
+            // skip blank nodes
+            if (currentNode === undefined) {
+                continue;
+            }
+            // parentHashNodeIndex is the node index where the nearest non blank ancestor was
+            const [parentHash, parentHashNodeIndex] = await calculateParentHash(tree, currentIndex, h);
+            if (parentHashNodeIndex === undefined) {
+                throw new mlsError_1.InternalError("Reached root before completing parent hash coeverage");
+            }
+            const expectedParentHash = getParentHash(currentNode);
+            if (expectedParentHash !== undefined && (0, constantTimeCompare_1.constantTimeEqual)(parentHash, expectedParentHash)) {
+                const newCount = (updated[parentHashNodeIndex] ?? 0) + 1;
+                updated = { ...updated, [parentHashNodeIndex]: newCount };
+            }
+            else {
+                // skip to next leaf
+                break;
+            }
+            currentIndex = parentHashNodeIndex;
+        }
+        return updated;
+    }, Promise.resolve({}));
+}
+function getParentHash(node) {
+    if (node.nodeType === "parent")
+        return node.parent.parentHash;
+    else if (node.leaf.leafNodeSource === "commit")
+        return node.leaf.parentHash;
+}
+/**
+ * Calculcates parent hash for a given node or leaf and returns the node index of the parent or undefined if the given node is the root node.
+ */
+async function calculateParentHash(tree, nodeIndex, h) {
+    const rootIndex = (0, treemath_1.root)((0, treemath_1.leafWidth)(tree.length));
+    if (nodeIndex === rootIndex) {
+        return [new Uint8Array(), undefined];
+    }
+    const parentNodeIndex = (0, ratchetTree_1.findFirstNonBlankAncestor)(tree, nodeIndex);
+    const parentNode = tree[parentNodeIndex];
+    if (parentNodeIndex === rootIndex && parentNode === undefined) {
+        return [new Uint8Array(), parentNodeIndex];
+    }
+    const siblingIndex = nodeIndex < parentNodeIndex ? (0, treemath_1.right)(parentNodeIndex) : (0, treemath_1.left)(parentNodeIndex);
+    if (parentNode === undefined || parentNode.nodeType === "leaf")
+        throw new mlsError_1.InternalError("Expected non-blank parent Node");
+    const removedUnmerged = (0, ratchetTree_1.removeLeaves)(tree, parentNode.parent.unmergedLeaves);
+    const originalSiblingTreeHash = await (0, treeHash_1.treeHash)(removedUnmerged, siblingIndex, h);
+    const input = {
+        encryptionKey: parentNode.parent.hpkePublicKey,
+        parentHash: parentNode.parent.parentHash,
+        originalSiblingTreeHash,
+    };
+    return [await h.digest((0, exports.encodeParentHashInput)(input)), parentNodeIndex];
+}
+//# sourceMappingURL=parentHash.js.map

package/dist/src/parentHash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parentHash.js","sourceRoot":"","sources":["../../src/parentHash.ts"],"names":[],"mappings":";;;AAwCA,gDAYC;AA0DD,kDAkCC;AAhJD,mDAAyD;AACzD,mDAA+D;AAC/D,2DAA2E;AAE3E,yCAA0C;AAC1C,+CAA0F;AAC1F,yCAAqC;AACrC,yCAAkF;AAElF,oEAA8D;AAQjD,QAAA,qBAAqB,GAA6B,IAAA,8BAAiB,EAC9E,CAAC,iCAAgB,EAAE,iCAAgB,EAAE,iCAAgB,CAAC,EACtD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,uBAAuB,CAAU,CAC3E,CAAA;AAEY,QAAA,qBAAqB,GAA6B,IAAA,wBAAW,EACxE,CAAC,iCAAgB,EAAE,iCAAgB,EAAE,iCAAgB,CAAC,EACtD,CAAC,aAAa,EAAE,UAAU,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC;IACvD,aAAa;IACb,UAAU;IACV,uBAAuB;CACxB,CAAC,CACH,CAAA;AAED,SAAS,0BAA0B,CAAC,aAAuB,EAAE,QAAgC;IAC3F,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,IAAiB,EAAE,CAAO;IACjE,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAClD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACnD,OAAO,CAAC,GAAG,GAAG,EAAE,KAAK,CAAC,CAAA;QACxB,CAAC;;YAAM,OAAO,GAAG,CAAA;IACnB,CAAC,EAAE,EAAc,CAAC,CAAA;IAElB,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAEzC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAElD,OAAO,0BAA0B,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;AAC1D,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAiB,EAAE,CAAO;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAA,iBAAM,EAAC,CAAC,CAAC,CAAC,CAAA;IAChD,OAAO,MAAM,CAAC,MAAM,CAClB,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE;QACjC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,GAAG,CAAA;QAEtC,IAAI,YAAY,GAAG,IAAA,0BAAe,EAAC,SAAS,CAAC,CAAA;QAC7C,IAAI,OAAO,GAAG,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAA;QAEhC,MAAM,SAAS,GAAG,IAAA,eAAI,EAAC,IAAA,oBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;QAE9C,OAAO,YAAY,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,CAAA;YAEtC,mBAAmB;YACnB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,SAAQ;YACV,CAAC;YAED,iFAAiF;YACjF,MAAM,CAAC,UAAU,EAAE,mBAAmB,CAAC,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAA;YAE1F,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,IAAI,wBAAa,CAAC,sDAAsD,CAAC,CAAA;YACjF,CAAC;YAED,MAAM,kBAAkB,GAAG,aAAa,CAAC,WAAW,CAAC,CAAA;YAErD,IAAI,kBAAkB,KAAK,SAAS,IAAI,IAAA,uCAAiB,EAAC,UAAU,EAAE,kBAAkB,CAAC,EAAE,CAAC;gBAC1F,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;gBACxD,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAA;YAC3D,CAAC;iBAAM,CAAC;gBACN,oBAAoB;gBACpB,MAAK;YACP,CAAC;YAED,YAAY,GAAG,mBAAmB,CAAA;QACpC,CAAC;QAED,OAAO,OAAO,CAAA;IAChB,CAAC,EACD,OAAO,CAAC,OAAO,CAAC,EAA4B,CAAC,CAC9C,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAU;IAC/B,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAA;SACxD,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAA;AAC7E,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,mBAAmB,CACvC,IAAiB,EACjB,SAAiB,EACjB,CAAO;IAEP,MAAM,SAAS,GAAG,IAAA,eAAI,EAAC,IAAA,oBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,UAAU,EAAE,EAAE,SAAS,CAAC,CAAA;IACtC,CAAC;IAED,MAAM,eAAe,GAAG,IAAA,uCAAyB,EAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAElE,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,CAAA;IAExC,IAAI,eAAe,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC9D,OAAO,CAAC,IAAI,UAAU,EAAE,EAAE,eAAe,CAAC,CAAA;IAC5C,CAAC;IAED,MAAM,YAAY,GAAG,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,IAAA,gBAAK,EAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAA,eAAI,EAAC,eAAe,CAAC,CAAA;IAEjG,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM;QAC5D,MAAM,IAAI,wBAAa,CAAC,gCAAgC,CAAC,CAAA;IAE3D,MAAM,eAAe,GAAG,IAAA,0BAAY,EAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;IAE5E,MAAM,uBAAuB,GAAG,MAAM,IAAA,mBAAQ,EAAC,eAAe,EAAE,YAAY,EAAE,CAAC,CAAC,CAAA;IAEhF,MAAM,KAAK,GAAG;QACZ,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,aAAa;QAC9C,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU;QACxC,uBAAuB;KACxB,CAAA;IAED,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAA,6BAAqB,EAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;AACxE,CAAC"}

package/dist/src/parentNode.d.ts

@@ -0,0 +1,9 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+export type ParentNode = {
+    hpkePublicKey: Uint8Array;
+    parentHash: Uint8Array;
+    unmergedLeaves: number[];
+};
+export declare const encodeParentNode: Encoder<ParentNode>;
+export declare const decodeParentNode: Decoder<ParentNode>;

package/dist/src/parentNode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parentNode.d.ts","sourceRoot":"","sources":["../../src/parentNode.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAe,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,OAAO,EAAqB,MAAM,oBAAoB,CAAA;AAG/D,MAAM,MAAM,UAAU,GAAG;IAAE,aAAa,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC;IAAC,cAAc,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAExG,eAAO,MAAM,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAGhD,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAOhD,CAAA"}

package/dist/src/parentNode.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeParentNode = exports.encodeParentNode = void 0;
+const number_1 = require("./codec/number");
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const variableLength_1 = require("./codec/variableLength");
+exports.encodeParentNode = (0, tlsEncoder_1.contramapEncoders)([variableLength_1.encodeVarLenData, variableLength_1.encodeVarLenData, (0, variableLength_1.encodeVarLenType)(number_1.encodeUint32)], (node) => [node.hpkePublicKey, node.parentHash, node.unmergedLeaves]);
+exports.decodeParentNode = (0, tlsDecoder_1.mapDecoders)([variableLength_1.decodeVarLenData, variableLength_1.decodeVarLenData, (0, variableLength_1.decodeVarLenType)(number_1.decodeUint32)], (hpkePublicKey, parentHash, unmergedLeaves) => ({
+    hpkePublicKey,
+    parentHash,
+    unmergedLeaves,
+}));
+//# sourceMappingURL=parentNode.js.map

package/dist/src/parentNode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parentNode.js","sourceRoot":"","sources":["../../src/parentNode.ts"],"names":[],"mappings":";;;AAAA,2CAA2D;AAC3D,mDAAyD;AACzD,mDAA+D;AAC/D,2DAA+G;AAIlG,QAAA,gBAAgB,GAAwB,IAAA,8BAAiB,EACpE,CAAC,iCAAgB,EAAE,iCAAgB,EAAE,IAAA,iCAAgB,EAAC,qBAAY,CAAC,CAAC,EACpE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,cAAc,CAAU,CAC9E,CAAA;AAEY,QAAA,gBAAgB,GAAwB,IAAA,wBAAW,EAC9D,CAAC,iCAAgB,EAAE,iCAAgB,EAAE,IAAA,iCAAgB,EAAC,qBAAY,CAAC,CAAC,EACpE,CAAC,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;IAC9C,aAAa;IACb,UAAU;IACV,cAAc;CACf,CAAC,CACH,CAAA"}

package/dist/src/pathSecrets.d.ts

@@ -0,0 +1,10 @@
+import { Kdf } from "./crypto/kdf";
+import { RatchetTree } from "./ratchetTree";
+import { PathSecret } from "./updatePath";
+/**
+ * PathSecrets is a record with nodeIndex as keys and the path secret as values
+ */
+export type PathSecrets = Record<number, Uint8Array>;
+export declare function pathToPathSecrets(pathSecrets: PathSecret[]): PathSecrets;
+export declare function getCommitSecret(tree: RatchetTree, nodeIndex: number, pathSecret: Uint8Array, kdf: Kdf): Promise<Uint8Array>;
+export declare function pathToRoot(tree: RatchetTree, nodeIndex: number, pathSecret: Uint8Array, kdf: Kdf): Promise<PathSecrets>;

package/dist/src/pathSecrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathSecrets.d.ts","sourceRoot":"","sources":["../../src/pathSecrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAgB,MAAM,cAAc,CAAA;AAEhD,OAAO,EAAE,WAAW,EAA6B,MAAM,eAAe,CAAA;AAEtE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAEzC;;GAEG;AAEH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;AACpD,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,WAAW,CAQxE;AACD,wBAAsB,eAAe,CACnC,IAAI,EAAE,WAAW,EACjB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,UAAU,CAAC,CAOrB;AAED,wBAAsB,UAAU,CAC9B,IAAI,EAAE,WAAW,EACjB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,WAAW,CAAC,CAatB"}

package/dist/src/pathSecrets.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pathToPathSecrets = pathToPathSecrets;
+exports.getCommitSecret = getCommitSecret;
+exports.pathToRoot = pathToRoot;
+const kdf_1 = require("./crypto/kdf");
+const mlsError_1 = require("./mlsError");
+const ratchetTree_1 = require("./ratchetTree");
+const treemath_1 = require("./treemath");
+function pathToPathSecrets(pathSecrets) {
+    return pathSecrets.reduce((acc, cur) => ({
+        ...acc,
+        [cur.nodeIndex]: cur.secret,
+    }), {});
+}
+async function getCommitSecret(tree, nodeIndex, pathSecret, kdf) {
+    const rootIndex = (0, treemath_1.root)((0, treemath_1.leafWidth)(tree.length));
+    const path = await pathToRoot(tree, nodeIndex, pathSecret, kdf);
+    const rootSecret = path[rootIndex];
+    if (rootSecret === undefined)
+        throw new mlsError_1.InternalError("Could not find secret for root");
+    return (0, kdf_1.deriveSecret)(rootSecret, "path", kdf);
+}
+async function pathToRoot(tree, nodeIndex, pathSecret, kdf) {
+    const rootIndex = (0, treemath_1.root)((0, treemath_1.leafWidth)(tree.length));
+    let currentIndex = nodeIndex;
+    let pathSecrets = { [nodeIndex]: pathSecret };
+    while (currentIndex != rootIndex) {
+        const nextIndex = (0, ratchetTree_1.findFirstNonBlankAncestor)(tree, currentIndex);
+        const nextSecret = await (0, kdf_1.deriveSecret)(pathSecrets[currentIndex], "path", kdf);
+        pathSecrets[nextIndex] = nextSecret;
+        currentIndex = nextIndex;
+    }
+    return pathSecrets;
+}
+//# sourceMappingURL=pathSecrets.js.map

package/dist/src/pathSecrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathSecrets.js","sourceRoot":"","sources":["../../src/pathSecrets.ts"],"names":[],"mappings":";;AAWA,8CAQC;AACD,0CAYC;AAED,gCAkBC;AApDD,sCAAgD;AAChD,yCAA0C;AAC1C,+CAAsE;AACtE,yCAA4C;AAQ5C,SAAgB,iBAAiB,CAAC,WAAyB;IACzD,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACb,GAAG,GAAG;QACN,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,MAAM;KAC5B,CAAC,EACF,EAAE,CACH,CAAA;AACH,CAAC;AACM,KAAK,UAAU,eAAe,CACnC,IAAiB,EACjB,SAAiB,EACjB,UAAsB,EACtB,GAAQ;IAER,MAAM,SAAS,GAAG,IAAA,eAAI,EAAC,IAAA,oBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,CAAA;IAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,CAAA;IAElC,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,IAAI,wBAAa,CAAC,gCAAgC,CAAC,CAAA;IACvF,OAAO,IAAA,kBAAY,EAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;AAC9C,CAAC;AAEM,KAAK,UAAU,UAAU,CAC9B,IAAiB,EACjB,SAAiB,EACjB,UAAsB,EACtB,GAAQ;IAER,MAAM,SAAS,GAAG,IAAA,eAAI,EAAC,IAAA,oBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9C,IAAI,YAAY,GAAG,SAAS,CAAA;IAC5B,IAAI,WAAW,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAA;IAC7C,OAAO,YAAY,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,IAAA,uCAAyB,EAAC,IAAI,EAAE,YAAY,CAAC,CAAA;QAC/D,MAAM,UAAU,GAAG,MAAM,IAAA,kBAAY,EAAC,WAAW,CAAC,YAAY,CAAE,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;QAE9E,WAAW,CAAC,SAAS,CAAC,GAAG,UAAU,CAAA;QACnC,YAAY,GAAG,SAAS,CAAA;IAC1B,CAAC;IAED,OAAO,WAAW,CAAA;AACpB,CAAC"}

package/dist/src/presharedkey.d.ts

@@ -0,0 +1,51 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { CiphersuiteImpl } from "./crypto/ciphersuite";
+export declare const pskTypes: {
+    readonly external: 1;
+    readonly resumption: 2;
+};
+export type PSKTypeName = keyof typeof pskTypes;
+export type PSKType = (typeof pskTypes)[PSKTypeName];
+export declare const encodePskType: Encoder<PSKTypeName>;
+export declare const decodePskType: Decoder<PSKTypeName>;
+declare const resumptionPSKUsages: {
+    readonly application: 1;
+    readonly reinit: 2;
+    readonly branch: 3;
+};
+export type ResumptionPSKUsageName = keyof typeof resumptionPSKUsages;
+export type ResumptionPSKUsage = (typeof resumptionPSKUsages)[ResumptionPSKUsageName];
+export declare const encodeResumptionPSKUsage: Encoder<ResumptionPSKUsageName>;
+export declare const decodeResumptionPSKUsage: Decoder<ResumptionPSKUsageName>;
+export type PSKInfoExternal = {
+    psktype: "external";
+    pskId: Uint8Array;
+};
+export type PSKInfoResumption = {
+    psktype: "resumption";
+    usage: ResumptionPSKUsageName;
+    pskGroupId: Uint8Array;
+    pskEpoch: bigint;
+};
+export type PSKInfo = PSKInfoExternal | PSKInfoResumption;
+export declare const encodePskInfo: Encoder<PSKInfo>;
+export declare const decodePskInfo: Decoder<PSKInfo>;
+type PSKNonce = {
+    pskNonce: Uint8Array;
+};
+export type PreSharedKeyID = PSKInfo & PSKNonce;
+export declare const encodePskId: Encoder<PreSharedKeyID>;
+export declare const decodePskId: Decoder<PreSharedKeyID>;
+type PSKLabel = {
+    id: PreSharedKeyID;
+    index: number;
+    count: number;
+};
+export declare const encodePskLabel: Encoder<PSKLabel>;
+export declare const decodePskLabel: Decoder<PSKLabel>;
+export type PreSharedKeyIdExternal = PSKInfoExternal & PSKNonce;
+export type PreSharedKeyIdResumption = PSKInfoResumption & PSKNonce;
+export declare function computePskSecret(psks: [PreSharedKeyID, Uint8Array][], impl: CiphersuiteImpl): Promise<Uint8Array<ArrayBufferLike>>;
+export declare function updatePskSecret(secret: Uint8Array, pskId: PreSharedKeyID, psk: Uint8Array, index: number, count: number, impl: CiphersuiteImpl): Promise<Uint8Array<ArrayBufferLike>>;
+export {};

package/dist/src/presharedkey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presharedkey.d.ts","sourceRoot":"","sources":["../../src/presharedkey.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAA6D,MAAM,oBAAoB,CAAA;AACvG,OAAO,EAAuC,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAEjF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAKtD,eAAO,MAAM,QAAQ;;;CAGX,CAAA;AAEV,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,QAAQ,CAAA;AAC/C,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAA;AAEpD,eAAO,MAAM,aAAa,EAAE,OAAO,CAAC,WAAW,CAAqD,CAAA;AACpG,eAAO,MAAM,aAAa,EAAE,OAAO,CAAC,WAAW,CAA4D,CAAA;AAE3G,QAAA,MAAM,mBAAmB;;;;CAIf,CAAA;AAEV,MAAM,MAAM,sBAAsB,GAAG,MAAM,OAAO,mBAAmB,CAAA;AACrE,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,sBAAsB,CAAC,CAAA;AAErF,eAAO,MAAM,wBAAwB,EAAE,OAAO,CAAC,sBAAsB,CAGpE,CAAA;AAED,eAAO,MAAM,wBAAwB,EAAE,OAAO,CAAC,sBAAsB,CAGpE,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAA;AACxE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,YAAY,CAAA;IACrB,KAAK,EAAE,sBAAsB,CAAA;IAC7B,UAAU,EAAE,UAAU,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;CACjB,CAAA;AACD,MAAM,MAAM,OAAO,GAAG,eAAe,GAAG,iBAAiB,CAAA;AAmBzD,eAAO,MAAM,aAAa,EAAE,OAAO,CAAC,OAAO,CAO1C,CAAA;AAED,eAAO,MAAM,aAAa,EAAE,OAAO,CAAC,OAAO,CAazC,CAAA;AAEF,KAAK,QAAQ,GAAG;IAAE,QAAQ,EAAE,UAAU,CAAA;CAAE,CAAA;AAExC,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,QAAQ,CAAA;AAE/C,eAAO,MAAM,WAAW,EAAE,OAAO,CAAC,cAAc,CAG/C,CAAA;AAED,eAAO,MAAM,WAAW,EAAE,OAAO,CAAC,cAAc,CAG/C,CAAA;AAED,KAAK,QAAQ,GAAG;IACd,EAAE,EAAE,cAAc,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED,eAAO,MAAM,cAAc,EAAE,OAAO,CAAC,QAAQ,CAG5C,CAAA;AAED,eAAO,MAAM,cAAc,EAAE,OAAO,CAAC,QAAQ,CAG5C,CAAA;AAED,MAAM,MAAM,sBAAsB,GAAG,eAAe,GAAG,QAAQ,CAAA;AAC/D,MAAM,MAAM,wBAAwB,GAAG,iBAAiB,GAAG,QAAQ,CAAA;AAEnE,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,CAAC,cAAc,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,eAAe,wCAOjG;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,cAAc,EACrB,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,eAAe,wCAatB"}

package/dist/src/presharedkey.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodePskLabel = exports.encodePskLabel = exports.decodePskId = exports.encodePskId = exports.decodePskInfo = exports.encodePskInfo = exports.decodeResumptionPSKUsage = exports.encodeResumptionPSKUsage = exports.decodePskType = exports.encodePskType = exports.pskTypes = void 0;
+exports.computePskSecret = computePskSecret;
+exports.updatePskSecret = updatePskSecret;
+const number_1 = require("./codec/number");
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const variableLength_1 = require("./codec/variableLength");
+const kdf_1 = require("./crypto/kdf");
+const enumHelpers_1 = require("./util/enumHelpers");
+exports.pskTypes = {
+    external: 1,
+    resumption: 2,
+};
+exports.encodePskType = (0, tlsEncoder_1.contramapEncoder)(number_1.encodeUint8, (t) => exports.pskTypes[t]);
+exports.decodePskType = (0, tlsDecoder_1.mapDecoderOption)(number_1.decodeUint8, (0, enumHelpers_1.enumNumberToKey)(exports.pskTypes));
+const resumptionPSKUsages = {
+    application: 1,
+    reinit: 2,
+    branch: 3,
+};
+exports.encodeResumptionPSKUsage = (0, tlsEncoder_1.contramapEncoder)(number_1.encodeUint8, (u) => resumptionPSKUsages[u]);
+exports.decodeResumptionPSKUsage = (0, tlsDecoder_1.mapDecoderOption)(number_1.decodeUint8, (0, enumHelpers_1.enumNumberToKey)(resumptionPSKUsages));
+const encodePskInfoExternal = (0, tlsEncoder_1.contramapEncoders)([exports.encodePskType, variableLength_1.encodeVarLenData], (i) => [i.psktype, i.pskId]);
+const encodePskInfoResumption = (0, tlsEncoder_1.contramapEncoders)([exports.encodePskType, exports.encodeResumptionPSKUsage, variableLength_1.encodeVarLenData, number_1.encodeUint64], (info) => [info.psktype, info.usage, info.pskGroupId, info.pskEpoch]);
+const decodePskInfoResumption = (0, tlsDecoder_1.mapDecoders)([exports.decodeResumptionPSKUsage, variableLength_1.decodeVarLenData, number_1.decodeUint64], (usage, pskGroupId, pskEpoch) => {
+    return { usage, pskGroupId, pskEpoch };
+});
+const encodePskInfo = (info) => {
+    switch (info.psktype) {
+        case "external":
+            return encodePskInfoExternal(info);
+        case "resumption":
+            return encodePskInfoResumption(info);
+    }
+};
+exports.encodePskInfo = encodePskInfo;
+exports.decodePskInfo = (0, tlsDecoder_1.flatMapDecoder)(exports.decodePskType, (psktype) => {
+    switch (psktype) {
+        case "external":
+            return (0, tlsDecoder_1.mapDecoder)(variableLength_1.decodeVarLenData, (pskId) => ({
+                psktype,
+                pskId,
+            }));
+        case "resumption":
+            return (0, tlsDecoder_1.mapDecoder)(decodePskInfoResumption, (resumption) => ({
+                psktype,
+                ...resumption,
+            }));
+    }
+});
+exports.encodePskId = (0, tlsEncoder_1.contramapEncoders)([exports.encodePskInfo, variableLength_1.encodeVarLenData], (pskid) => [pskid, pskid.pskNonce]);
+exports.decodePskId = (0, tlsDecoder_1.mapDecoders)([exports.decodePskInfo, variableLength_1.decodeVarLenData], (info, pskNonce) => ({ ...info, pskNonce }));
+exports.encodePskLabel = (0, tlsEncoder_1.contramapEncoders)([exports.encodePskId, number_1.encodeUint16, number_1.encodeUint16], (label) => [label.id, label.index, label.count]);
+exports.decodePskLabel = (0, tlsDecoder_1.mapDecoders)([exports.decodePskId, number_1.decodeUint16, number_1.decodeUint16], (id, index, count) => ({ id, index, count }));
+async function computePskSecret(psks, impl) {
+    const zeroes = new Uint8Array(impl.kdf.size);
+    return psks.reduce(async (acc, [curId, curPsk], index) => updatePskSecret(await acc, curId, curPsk, index, psks.length, impl), Promise.resolve(zeroes));
+}
+async function updatePskSecret(secret, pskId, psk, index, count, impl) {
+    const zeroes = new Uint8Array(impl.kdf.size);
+    return impl.kdf.extract(await (0, kdf_1.expandWithLabel)(await impl.kdf.extract(zeroes, psk), "derived psk", (0, exports.encodePskLabel)({ id: pskId, index, count }), impl.kdf.size, impl.kdf), secret);
+}
+//# sourceMappingURL=presharedkey.js.map

package/dist/src/presharedkey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presharedkey.js","sourceRoot":"","sources":["../../src/presharedkey.ts"],"names":[],"mappings":";;;AA0HA,4CAOC;AAED,0CAmBC;AAtJD,2CAAiH;AACjH,mDAAuG;AACvG,mDAAiF;AACjF,2DAA2E;AAE3E,sCAA8C;AAE9C,oDAAoD;AAEvC,QAAA,QAAQ,GAAG;IACtB,QAAQ,EAAE,CAAC;IACX,UAAU,EAAE,CAAC;CACL,CAAA;AAKG,QAAA,aAAa,GAAyB,IAAA,6BAAgB,EAAC,oBAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;AACvF,QAAA,aAAa,GAAyB,IAAA,6BAAgB,EAAC,oBAAW,EAAE,IAAA,6BAAe,EAAC,gBAAQ,CAAC,CAAC,CAAA;AAE3G,MAAM,mBAAmB,GAAG;IAC1B,WAAW,EAAE,CAAC;IACd,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;CACD,CAAA;AAKG,QAAA,wBAAwB,GAAoC,IAAA,6BAAgB,EACvF,oBAAW,EACX,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAC9B,CAAA;AAEY,QAAA,wBAAwB,GAAoC,IAAA,6BAAgB,EACvF,oBAAW,EACX,IAAA,6BAAe,EAAC,mBAAmB,CAAC,CACrC,CAAA;AAWD,MAAM,qBAAqB,GAA6B,IAAA,8BAAiB,EACvE,CAAC,qBAAa,EAAE,iCAAgB,CAAC,EACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAU,CACrC,CAAA;AAED,MAAM,uBAAuB,GAA+B,IAAA,8BAAiB,EAC3E,CAAC,qBAAa,EAAE,gCAAwB,EAAE,iCAAgB,EAAE,qBAAY,CAAC,EACzE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAU,CAC9E,CAAA;AAED,MAAM,uBAAuB,GAAG,IAAA,wBAAW,EACzC,CAAC,gCAAwB,EAAE,iCAAgB,EAAE,qBAAY,CAAC,EAC1D,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE;IAC9B,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;AACxC,CAAC,CACF,CAAA;AAEM,MAAM,aAAa,GAAqB,CAAC,IAAI,EAAE,EAAE;IACtD,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,UAAU;YACb,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAA;QACpC,KAAK,YAAY;YACf,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC;AACH,CAAC,CAAA;AAPY,QAAA,aAAa,iBAOzB;AAEY,QAAA,aAAa,GAAqB,IAAA,2BAAc,EAAC,qBAAa,EAAE,CAAC,OAAO,EAAoB,EAAE;IACzG,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,UAAU;YACb,OAAO,IAAA,uBAAU,EAAC,iCAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC9C,OAAO;gBACP,KAAK;aACN,CAAC,CAAC,CAAA;QACL,KAAK,YAAY;YACf,OAAO,IAAA,uBAAU,EAAC,uBAAuB,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBAC1D,OAAO;gBACP,GAAG,UAAU;aACd,CAAC,CAAC,CAAA;IACP,CAAC;AACH,CAAC,CAAC,CAAA;AAMW,QAAA,WAAW,GAA4B,IAAA,8BAAiB,EACnE,CAAC,qBAAa,EAAE,iCAAgB,CAAC,EACjC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAU,CAC5C,CAAA;AAEY,QAAA,WAAW,GAA4B,IAAA,wBAAW,EAC7D,CAAC,qBAAa,EAAE,iCAAgB,CAAC,EACjC,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,CAC5C,CAAA;AAQY,QAAA,cAAc,GAAsB,IAAA,8BAAiB,EAChE,CAAC,mBAAW,EAAE,qBAAY,EAAE,qBAAY,CAAC,EACzC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAU,CACzD,CAAA;AAEY,QAAA,cAAc,GAAsB,IAAA,wBAAW,EAC1D,CAAC,mBAAW,EAAE,qBAAY,EAAE,qBAAY,CAAC,EACzC,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAC7C,CAAA;AAKM,KAAK,UAAU,gBAAgB,CAAC,IAAoC,EAAE,IAAqB;IAChG,MAAM,MAAM,GAAe,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAExD,OAAO,IAAI,CAAC,MAAM,CAChB,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAC1G,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CACxB,CAAA;AACH,CAAC;AAEM,KAAK,UAAU,eAAe,CACnC,MAAkB,EAClB,KAAqB,EACrB,GAAe,EACf,KAAa,EACb,KAAa,EACb,IAAqB;IAErB,MAAM,MAAM,GAAe,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACxD,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CACrB,MAAM,IAAA,qBAAe,EACnB,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EACnC,aAAa,EACb,IAAA,sBAAc,EAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAC3C,IAAI,CAAC,GAAG,CAAC,IAAI,EACb,IAAI,CAAC,GAAG,CACT,EACD,MAAM,CACP,CAAA;AACH,CAAC"}

package/dist/src/privateKeyPath.d.ts

@@ -0,0 +1,12 @@
+import { CiphersuiteImpl } from "./crypto/ciphersuite";
+import { PathSecrets } from "./pathSecrets";
+export type PrivateKeyPath = {
+    leafIndex: number;
+    privateKeys: Record<number, Uint8Array>;
+};
+/**
+ * Merges PrivateKeyPaths, BEWARE, if there is a conflict, this function will prioritize the second `b` parameter
+ */
+export declare function mergePrivateKeyPaths(a: PrivateKeyPath, b: PrivateKeyPath): PrivateKeyPath;
+export declare function updateLeafKey(path: PrivateKeyPath, newKey: Uint8Array): PrivateKeyPath;
+export declare function toPrivateKeyPath(pathSecrets: PathSecrets, leafIndex: number, cs: CiphersuiteImpl): Promise<PrivateKeyPath>;

package/dist/src/privateKeyPath.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privateKeyPath.d.ts","sourceRoot":"","sources":["../../src/privateKeyPath.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAEtD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAG3C,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;CACxC,CAAA;AACD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,cAAc,GAAG,cAAc,CAEzF;AACD,wBAAgB,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,GAAG,cAAc,CAEtF;AAED,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,WAAW,EACxB,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,eAAe,GAClB,OAAO,CAAC,cAAc,CAAC,CAazB"}