ts-mls 1.0.1

package/dist/test/test-vectors/keySchedule.test.js

@@ -0,0 +1,53 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const ciphersuite_1 = require("../../src/crypto/ciphersuite");
+const groupContext_1 = require("../../src/groupContext");
+const utils_1 = require("@noble/ciphers/utils");
+const key_schedule_json_1 = __importDefault(require("../../test_vectors/key-schedule.json"));
+const keySchedule_1 = require("../../src/keySchedule");
+for (const [index, x] of key_schedule_json_1.default.entries()) {
+    test(`key-schedule test vectors ${index}`, async () => {
+        const cipherSuite = x.cipher_suite;
+        const impl = await (0, ciphersuite_1.getCiphersuiteImpl)((0, ciphersuite_1.getCiphersuiteFromId)(cipherSuite));
+        await testKeySchedule(x.group_id, x.initial_init_secret, x.epochs, cipherSuite, impl);
+    });
+}
+async function testKeySchedule(group_id, initial_init_secret, epochs, cipher_suite, impl) {
+    await epochs.reduce(async (prevInitSecret, epoch, index) => {
+        const initSecret = await prevInitSecret;
+        const gc = {
+            version: "mls10",
+            cipherSuite: (0, ciphersuite_1.getCiphersuiteNameFromId)(cipher_suite),
+            groupId: (0, utils_1.hexToBytes)(group_id),
+            epoch: BigInt(index),
+            treeHash: (0, utils_1.hexToBytes)(epoch.tree_hash),
+            confirmedTranscriptHash: (0, utils_1.hexToBytes)(epoch.confirmed_transcript_hash),
+            extensions: [],
+        };
+        // Verify that group context matches the provided group_context value
+        expect((0, groupContext_1.encodeGroupContext)(gc)).toStrictEqual((0, utils_1.hexToBytes)(epoch.group_context));
+        const { keySchedule, joinerSecret, welcomeSecret } = await (0, keySchedule_1.initializeEpoch)(initSecret, (0, utils_1.hexToBytes)(epoch.commit_secret), gc, (0, utils_1.hexToBytes)(epoch.psk_secret), impl.kdf);
+        expect(joinerSecret).toStrictEqual((0, utils_1.hexToBytes)(epoch.joiner_secret));
+        expect(welcomeSecret).toStrictEqual((0, utils_1.hexToBytes)(epoch.welcome_secret));
+        expect(keySchedule.initSecret).toStrictEqual((0, utils_1.hexToBytes)(epoch.init_secret));
+        expect(keySchedule.senderDataSecret).toStrictEqual((0, utils_1.hexToBytes)(epoch.sender_data_secret));
+        expect(keySchedule.encryptionSecret).toStrictEqual((0, utils_1.hexToBytes)(epoch.encryption_secret));
+        expect(keySchedule.exporterSecret).toStrictEqual((0, utils_1.hexToBytes)(epoch.exporter_secret));
+        expect(keySchedule.externalSecret).toStrictEqual((0, utils_1.hexToBytes)(epoch.external_secret));
+        expect(keySchedule.confirmationKey).toStrictEqual((0, utils_1.hexToBytes)(epoch.confirmation_key));
+        expect(keySchedule.membershipKey).toStrictEqual((0, utils_1.hexToBytes)(epoch.membership_key));
+        expect(keySchedule.resumptionPsk).toStrictEqual((0, utils_1.hexToBytes)(epoch.resumption_psk));
+        expect(keySchedule.epochAuthenticator).toStrictEqual((0, utils_1.hexToBytes)(epoch.epoch_authenticator));
+        //Verify the external_pub is the public key output from KEM.DeriveKeyPair(external_secret)
+        const { publicKey } = await impl.hpke.deriveKeyPair((0, utils_1.hexToBytes)(epoch.external_secret));
+        expect(await impl.hpke.exportPublicKey(publicKey)).toStrictEqual((0, utils_1.hexToBytes)(epoch.external_pub));
+        //Verify the exporter.secret is the value output from MLS-Exporter(exporter.label, exporter.context, exporter.length)
+        const exporter = await (0, keySchedule_1.mlsExporter)(keySchedule.exporterSecret, epoch.exporter.label, (0, utils_1.hexToBytes)(epoch.exporter.context), epoch.exporter.length, impl);
+        expect(exporter).toStrictEqual((0, utils_1.hexToBytes)(epoch.exporter.secret));
+        return keySchedule.initSecret;
+    }, Promise.resolve((0, utils_1.hexToBytes)(initial_init_secret)));
+}
+//# sourceMappingURL=keySchedule.test.js.map

package/dist/test/test-vectors/keySchedule.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keySchedule.test.js","sourceRoot":"","sources":["../../../test/test-vectors/keySchedule.test.ts"],"names":[],"mappings":";;;;;AAAA,8DAMqC;AACrC,yDAAyE;AACzE,gDAAiD;AACjD,6FAAuD;AAEvD,uDAAoE;AAEpE,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,2BAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACxC,IAAI,CAAC,6BAA6B,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,WAAW,GAAG,CAAC,CAAC,YAA6B,CAAA;QACnD,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAkB,EAAC,IAAA,kCAAoB,EAAC,WAAW,CAAC,CAAC,CAAA;QACxE,MAAM,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAAgB,EAChB,mBAA2B,EAC3B,MAAe,EACf,YAA2B,EAC3B,IAAqB;IAErB,MAAM,MAAM,CAAC,MAAM,CACjB,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACrC,MAAM,UAAU,GAAG,MAAM,cAAc,CAAA;QAEvC,MAAM,EAAE,GAAiB;YACvB,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,IAAA,sCAAwB,EAAC,YAAY,CAAC;YACnD,OAAO,EAAE,IAAA,kBAAU,EAAC,QAAQ,CAAC;YAC7B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;YACpB,QAAQ,EAAE,IAAA,kBAAU,EAAC,KAAK,CAAC,SAAS,CAAC;YACrC,uBAAuB,EAAE,IAAA,kBAAU,EAAC,KAAK,CAAC,yBAAyB,CAAC;YACpE,UAAU,EAAE,EAAE;SACf,CAAA;QAED,qEAAqE;QACrE,MAAM,CAAC,IAAA,iCAAkB,EAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAA;QAE7E,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,MAAM,IAAA,6BAAe,EACxE,UAAU,EACV,IAAA,kBAAU,EAAC,KAAK,CAAC,aAAa,CAAC,EAC/B,EAAE,EACF,IAAA,kBAAU,EAAC,KAAK,CAAC,UAAU,CAAC,EAC5B,IAAI,CAAC,GAAG,CACT,CAAA;QAED,MAAM,CAAC,YAAY,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAA;QACnE,MAAM,CAAC,aAAa,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAA;QACrE,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA;QAC3E,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAA;QACxF,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAA;QACvF,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAA;QACnF,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAA;QACnF,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAA;QACrF,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAA;QACjF,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAA;QACjF,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAA;QAE3F,0FAA0F;QAC1F,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAA;QACtF,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAA;QAEhG,qHAAqH;QACrH,MAAM,QAAQ,GAAG,MAAM,IAAA,yBAAW,EAChC,WAAW,CAAC,cAAc,EAC1B,KAAK,CAAC,QAAQ,CAAC,KAAK,EACpB,IAAA,kBAAU,EAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAClC,KAAK,CAAC,QAAQ,CAAC,MAAM,EACrB,IAAI,CACL,CAAA;QACD,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAEjE,OAAO,WAAW,CAAC,UAAU,CAAA;IAC/B,CAAC,EACD,OAAO,CAAC,OAAO,CAAC,IAAA,kBAAU,EAAC,mBAAmB,CAAC,CAAC,CACjD,CAAA;AACH,CAAC"}

package/dist/test/test-vectors/messageProtection.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/test-vectors/messageProtection.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messageProtection.test.d.ts","sourceRoot":"","sources":["../../../test/test-vectors/messageProtection.test.ts"],"names":[],"mappings":""}

package/dist/test/test-vectors/messageProtection.test.js

@@ -0,0 +1,220 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const message_protection_json_1 = __importDefault(require("../../test_vectors/message-protection.json"));
+const utils_1 = require("@noble/ciphers/utils");
+const ciphersuite_1 = require("../../src/crypto/ciphersuite");
+const message_1 = require("../../src/message");
+const messageProtection_1 = require("../../src/messageProtection");
+const framedContent_1 = require("../../src/framedContent");
+const proposal_1 = require("../../src/proposal");
+const commit_1 = require("../../src/commit");
+const secretTree_1 = require("../../src/secretTree");
+const messageProtection_2 = require("../../src/messageProtection");
+const messageProtectionPublic_1 = require("../../src/messageProtectionPublic");
+const keyRetentionConfig_1 = require("../../src/keyRetentionConfig");
+const defaultCapabilities_1 = require("../../src/defaultCapabilities");
+const mlsError_1 = require("../../src/mlsError");
+const paddingConfig_1 = require("../../src/paddingConfig");
+for (const [index, x] of message_protection_json_1.default.entries()) {
+    test(`message-protection test vectors ${index}`, async () => {
+        const impl = await (0, ciphersuite_1.getCiphersuiteImpl)((0, ciphersuite_1.getCiphersuiteFromId)(x.cipher_suite));
+        await testMessageProtection(x, impl);
+    });
+}
+async function testMessageProtection(data, impl) {
+    const gc = {
+        version: "mls10",
+        cipherSuite: (0, ciphersuite_1.getCiphersuiteNameFromId)(data.cipher_suite),
+        groupId: (0, utils_1.hexToBytes)(data.group_id),
+        epoch: BigInt(data.epoch),
+        treeHash: (0, utils_1.hexToBytes)(data.tree_hash),
+        confirmedTranscriptHash: (0, utils_1.hexToBytes)(data.confirmed_transcript_hash),
+        extensions: [],
+    };
+    await publicProposal(data, gc, impl);
+    await protectThenUnprotectProposalPublic(data, gc, impl);
+    await publicCommit(data, gc, impl);
+    await protectThenUnprotectCommitPublic(data, gc, impl);
+    await proposal(data, gc, impl);
+    await protectThenUnprotectProposal(data, gc, impl);
+    await application(data, gc, impl);
+    await protectThenUnprotectApplication(data, gc, impl);
+    await commit(data, gc, impl);
+    await protectThenUnprotectCommit(data, gc, impl);
+    await publicApplicationFails(data, gc, impl);
+}
+// need to provide a ratchet tree with non blank leaf node so senderData validation doesn't fail
+const treeForLeafIndex1 = [
+    undefined,
+    undefined,
+    {
+        nodeType: "leaf",
+        leaf: {
+            leafNodeSource: "commit",
+            hpkePublicKey: new Uint8Array(),
+            signaturePublicKey: new Uint8Array(),
+            capabilities: (0, defaultCapabilities_1.defaultCapabilities)(),
+            parentHash: new Uint8Array(),
+            extensions: [],
+            signature: new Uint8Array(),
+            credential: { credentialType: "basic", identity: new Uint8Array() },
+        },
+    },
+];
+async function protectThenUnprotectProposalPublic(data, gc, impl) {
+    const p = (0, proposal_1.decodeProposal)((0, utils_1.hexToBytes)(data.proposal), 0);
+    if (p === undefined)
+        throw new Error("could not decode proposal");
+    const prot = await (0, messageProtectionPublic_1.protectProposalPublic)((0, utils_1.hexToBytes)(data.signature_priv), (0, utils_1.hexToBytes)(data.membership_key), gc, new Uint8Array(), p[0], 1, impl);
+    const unprotected = await (0, messageProtectionPublic_1.unprotectPublicMessage)((0, utils_1.hexToBytes)(data.membership_key), gc, [], prot.publicMessage, impl, (0, utils_1.hexToBytes)(data.signature_pub));
+    if (unprotected === undefined || unprotected.content.contentType !== "proposal")
+        throw new Error("could not unprotect mls public message");
+    expect((0, proposal_1.encodeProposal)(unprotected.content.proposal)).toStrictEqual((0, utils_1.hexToBytes)(data.proposal));
+}
+async function protectThenUnprotectCommitPublic(data, gc, impl) {
+    const c = (0, commit_1.decodeCommit)((0, utils_1.hexToBytes)(data.commit), 0);
+    if (c === undefined)
+        throw new Error("could not decode commit");
+    const confirmationTag = crypto.getRandomValues(new Uint8Array(impl.hpke.keyLength)); // should I be getting this elsewhere?
+    const { framedContent, signature } = await (0, framedContent_1.createContentCommitSignature)(gc, "mls_public_message", c[0], { leafIndex: 1, senderType: "member" }, new Uint8Array(), (0, utils_1.hexToBytes)(data.signature_priv), impl.signature);
+    const authenticatedContent = {
+        wireformat: "mls_public_message",
+        content: framedContent,
+        auth: { contentType: "commit", signature: signature, confirmationTag },
+    };
+    const prot = await (0, messageProtectionPublic_1.protectPublicMessage)((0, utils_1.hexToBytes)(data.membership_key), gc, authenticatedContent, impl);
+    const unprotected = await (0, messageProtectionPublic_1.unprotectPublicMessage)((0, utils_1.hexToBytes)(data.membership_key), gc, [], prot, impl, (0, utils_1.hexToBytes)(data.signature_pub));
+    if (unprotected === undefined || unprotected.content.contentType !== "commit")
+        throw new Error("could not unprotect mls public message");
+    expect((0, commit_1.encodeCommit)(unprotected.content.commit)).toStrictEqual((0, utils_1.hexToBytes)(data.commit));
+}
+async function publicProposal(data, gc, impl) {
+    const prop = (0, message_1.decodeMlsMessage)((0, utils_1.hexToBytes)(data.proposal_pub), 0);
+    if (prop === undefined || prop[0].wireformat !== "mls_public_message")
+        throw new Error("could not decode mls public message");
+    const unprotected = await (0, messageProtectionPublic_1.unprotectPublicMessage)((0, utils_1.hexToBytes)(data.membership_key), gc, [], prop[0].publicMessage, impl, (0, utils_1.hexToBytes)(data.signature_pub));
+    if (unprotected.content.contentType !== "proposal")
+        throw new Error("Could not decode as proposal");
+    expect((0, proposal_1.encodeProposal)(unprotected.content.proposal)).toStrictEqual((0, utils_1.hexToBytes)(data.proposal));
+}
+async function publicCommit(data, gc, impl) {
+    const c = (0, message_1.decodeMlsMessage)((0, utils_1.hexToBytes)(data.commit_pub), 0);
+    if (c === undefined || c[0].wireformat !== "mls_public_message")
+        throw new Error("could not decode mls public message");
+    const unprotected = await (0, messageProtectionPublic_1.unprotectPublicMessage)((0, utils_1.hexToBytes)(data.membership_key), gc, [], c[0].publicMessage, impl, (0, utils_1.hexToBytes)(data.signature_pub));
+    if (unprotected.content.contentType !== "commit")
+        throw new Error("Could not decode as commit");
+    expect((0, commit_1.encodeCommit)(unprotected.content.commit)).toStrictEqual((0, utils_1.hexToBytes)(data.commit));
+}
+async function publicApplicationFails(data, gc, impl) {
+    const privateApplication = (0, message_1.decodeMlsMessage)((0, utils_1.hexToBytes)(data.application_priv), 0);
+    if (privateApplication === undefined || privateApplication[0].wireformat !== "mls_private_message")
+        throw new Error("could not decode mls private message");
+    const secretTree = await (0, secretTree_1.createSecretTree)(2, (0, utils_1.hexToBytes)(data.encryption_secret), impl.kdf);
+    const unprotected = await (0, messageProtection_1.unprotectPrivateMessage)((0, utils_1.hexToBytes)(data.sender_data_secret), privateApplication[0].privateMessage, secretTree, treeForLeafIndex1, gc, keyRetentionConfig_1.defaultKeyRetentionConfig, impl, (0, utils_1.hexToBytes)(data.signature_pub));
+    if (unprotected === undefined || unprotected.content.content.contentType !== "application")
+        throw new Error("could not unprotect mls private message");
+    const content = {
+        content: {
+            ...unprotected.content.content,
+            contentType: "application",
+            groupId: gc.groupId,
+            sender: { leafIndex: 0, senderType: "member" },
+            epoch: gc.epoch,
+            authenticatedData: new Uint8Array(),
+        },
+        auth: unprotected.content.auth,
+        wireformat: "mls_public_message",
+    };
+    await expect((0, messageProtectionPublic_1.protectPublicMessage)((0, utils_1.hexToBytes)(data.membership_key), gc, content, impl)).rejects.toThrow(mlsError_1.UsageError);
+}
+async function commit(data, gc, impl) {
+    const privateCommit = (0, message_1.decodeMlsMessage)((0, utils_1.hexToBytes)(data.commit_priv), 0);
+    if (privateCommit === undefined || privateCommit[0].wireformat !== "mls_private_message")
+        throw new Error("could not decode mls private message");
+    const secretTree = await (0, secretTree_1.createSecretTree)(2, (0, utils_1.hexToBytes)(data.encryption_secret), impl.kdf);
+    const unprotected = await (0, messageProtection_1.unprotectPrivateMessage)((0, utils_1.hexToBytes)(data.sender_data_secret), privateCommit[0].privateMessage, secretTree, treeForLeafIndex1, gc, keyRetentionConfig_1.defaultKeyRetentionConfig, impl, (0, utils_1.hexToBytes)(data.signature_pub));
+    if (unprotected === undefined || unprotected.content.content.contentType !== "commit")
+        throw new Error("could not unprotect mls private message");
+    expect((0, commit_1.encodeCommit)(unprotected.content.content.commit)).toStrictEqual((0, utils_1.hexToBytes)(data.commit));
+}
+async function application(data, gc, impl) {
+    const privateApplication = (0, message_1.decodeMlsMessage)((0, utils_1.hexToBytes)(data.application_priv), 0);
+    if (privateApplication === undefined || privateApplication[0].wireformat !== "mls_private_message")
+        throw new Error("could not decode mls private message");
+    const secretTree = await (0, secretTree_1.createSecretTree)(2, (0, utils_1.hexToBytes)(data.encryption_secret), impl.kdf);
+    const unprotected = await (0, messageProtection_1.unprotectPrivateMessage)((0, utils_1.hexToBytes)(data.sender_data_secret), privateApplication[0].privateMessage, secretTree, treeForLeafIndex1, gc, keyRetentionConfig_1.defaultKeyRetentionConfig, impl, (0, utils_1.hexToBytes)(data.signature_pub));
+    if (unprotected === undefined || unprotected.content.content.contentType !== "application")
+        throw new Error("could not unprotect mls private message");
+    expect(unprotected.content.content.applicationData).toStrictEqual((0, utils_1.hexToBytes)(data.application));
+}
+async function protectThenUnprotectProposal(data, gc, impl) {
+    const p = (0, proposal_1.decodeProposal)((0, utils_1.hexToBytes)(data.proposal), 0);
+    if (p === undefined)
+        throw new Error("could not decode proposal");
+    const secretTree = await (0, secretTree_1.createSecretTree)(2, (0, utils_1.hexToBytes)(data.encryption_secret), impl.kdf);
+    const pro = await (0, messageProtection_2.protectProposal)((0, utils_1.hexToBytes)(data.signature_priv), (0, utils_1.hexToBytes)(data.sender_data_secret), p[0], new Uint8Array(), gc, secretTree, 1, paddingConfig_1.defaultPaddingConfig, impl);
+    const unprotected = await (0, messageProtection_1.unprotectPrivateMessage)((0, utils_1.hexToBytes)(data.sender_data_secret), pro.privateMessage, secretTree, treeForLeafIndex1, gc, keyRetentionConfig_1.defaultKeyRetentionConfig, impl, (0, utils_1.hexToBytes)(data.signature_pub));
+    if (unprotected === undefined || unprotected.content.content.contentType !== "proposal")
+        throw new Error("could not unprotect mls private message");
+    expect((0, proposal_1.encodeProposal)(unprotected.content.content.proposal)).toStrictEqual((0, utils_1.hexToBytes)(data.proposal));
+}
+async function protectThenUnprotectApplication(data, gc, impl) {
+    const secretTree = await (0, secretTree_1.createSecretTree)(2, (0, utils_1.hexToBytes)(data.encryption_secret), impl.kdf);
+    const pro = await (0, messageProtection_2.protectApplicationData)((0, utils_1.hexToBytes)(data.signature_priv), (0, utils_1.hexToBytes)(data.sender_data_secret), (0, utils_1.hexToBytes)(data.application), new Uint8Array(), gc, secretTree, 1, paddingConfig_1.defaultPaddingConfig, impl);
+    const unprotected = await (0, messageProtection_1.unprotectPrivateMessage)((0, utils_1.hexToBytes)(data.sender_data_secret), pro.privateMessage, secretTree, treeForLeafIndex1, gc, keyRetentionConfig_1.defaultKeyRetentionConfig, impl, (0, utils_1.hexToBytes)(data.signature_pub));
+    if (unprotected === undefined || unprotected.content.content.contentType !== "application")
+        throw new Error("could not unprotect mls private message");
+    expect(unprotected.content.content.applicationData).toStrictEqual((0, utils_1.hexToBytes)(data.application));
+}
+async function protectThenUnprotectCommit(data, gc, impl) {
+    const c = (0, commit_1.decodeCommit)((0, utils_1.hexToBytes)(data.commit), 0);
+    if (c === undefined)
+        throw new Error("could not decode commit");
+    const secretTree = await (0, secretTree_1.createSecretTree)(2, (0, utils_1.hexToBytes)(data.encryption_secret), impl.kdf);
+    const confirmationTag = crypto.getRandomValues(new Uint8Array(impl.hpke.keyLength)); // should I be getting this elsewhere?
+    const { framedContent, signature } = await (0, framedContent_1.createContentCommitSignature)(gc, "mls_private_message", c[0], { leafIndex: 1, senderType: "member" }, new Uint8Array(), (0, utils_1.hexToBytes)(data.signature_priv), impl.signature);
+    const content = {
+        ...framedContent,
+        auth: {
+            contentType: framedContent.contentType,
+            signature,
+            confirmationTag,
+        },
+    };
+    const pro = await (0, messageProtection_1.protect)((0, utils_1.hexToBytes)(data.sender_data_secret), new Uint8Array(), gc, secretTree, content, 1, paddingConfig_1.defaultPaddingConfig, impl);
+    const unprotected = await (0, messageProtection_1.unprotectPrivateMessage)((0, utils_1.hexToBytes)(data.sender_data_secret), pro.privateMessage, secretTree, treeForLeafIndex1, gc, keyRetentionConfig_1.defaultKeyRetentionConfig, impl, (0, utils_1.hexToBytes)(data.signature_pub));
+    if (unprotected === undefined || unprotected.content.content.contentType !== "commit")
+        throw new Error("could not unprotect mls private message");
+    expect((0, commit_1.encodeCommit)(unprotected.content.content.commit)).toStrictEqual((0, utils_1.hexToBytes)(data.commit));
+}
+async function proposal(data, gc, impl) {
+    const privateProposal = (0, message_1.decodeMlsMessage)((0, utils_1.hexToBytes)(data.proposal_priv), 0);
+    if (privateProposal === undefined || privateProposal[0].wireformat !== "mls_private_message")
+        throw new Error("could not decode mls private message");
+    const secretTree = await (0, secretTree_1.createSecretTree)(2, (0, utils_1.hexToBytes)(data.encryption_secret), impl.kdf);
+    const unprotected = await (0, messageProtection_1.unprotectPrivateMessage)((0, utils_1.hexToBytes)(data.sender_data_secret), privateProposal[0].privateMessage, secretTree, [
+        undefined,
+        undefined,
+        {
+            nodeType: "leaf",
+            leaf: {
+                leafNodeSource: "commit",
+                hpkePublicKey: new Uint8Array(),
+                signaturePublicKey: new Uint8Array(),
+                capabilities: (0, defaultCapabilities_1.defaultCapabilities)(),
+                parentHash: new Uint8Array(),
+                extensions: [],
+                signature: new Uint8Array(),
+                credential: { credentialType: "basic", identity: new Uint8Array() },
+            },
+        },
+    ], gc, keyRetentionConfig_1.defaultKeyRetentionConfig, impl, (0, utils_1.hexToBytes)(data.signature_pub));
+    if (unprotected === undefined || unprotected.content.content.contentType !== "proposal")
+        throw new Error("could not unprotect mls private message");
+    expect((0, proposal_1.encodeProposal)(unprotected.content.content.proposal)).toStrictEqual((0, utils_1.hexToBytes)(data.proposal));
+}
+//# sourceMappingURL=messageProtection.test.js.map

package/dist/test/test-vectors/messageProtection.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messageProtection.test.js","sourceRoot":"","sources":["../../../test/test-vectors/messageProtection.test.ts"],"names":[],"mappings":";;;;;AAAA,yGAA6D;AAC7D,gDAAiD;AAEjD,8DAMqC;AACrC,+CAAoD;AACpD,mEAA8E;AAC9E,2DAAsE;AACtE,iDAAmE;AACnE,6CAA6D;AAE7D,qDAAuD;AACvD,mEAAqF;AACrF,+EAAuH;AACvH,qEAAwE;AACxE,uEAAmE;AAEnE,iDAA+C;AAC/C,2DAA8D;AAE9D,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,iCAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACxC,IAAI,CAAC,mCAAmC,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAkB,EAAC,IAAA,kCAAoB,EAAC,CAAC,CAAC,YAA6B,CAAC,CAAC,CAAA;QAC5F,MAAM,qBAAqB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;AACJ,CAAC;AAuBD,KAAK,UAAU,qBAAqB,CAAC,IAA2B,EAAE,IAAqB;IACrF,MAAM,EAAE,GAAiB;QACvB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,IAAA,sCAAwB,EAAC,IAAI,CAAC,YAA6B,CAAC;QACzE,OAAO,EAAE,IAAA,kBAAU,EAAC,IAAI,CAAC,QAAQ,CAAC;QAClC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACzB,QAAQ,EAAE,IAAA,kBAAU,EAAC,IAAI,CAAC,SAAS,CAAC;QACpC,uBAAuB,EAAE,IAAA,kBAAU,EAAC,IAAI,CAAC,yBAAyB,CAAC;QACnE,UAAU,EAAE,EAAE;KACf,CAAA;IAED,MAAM,cAAc,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IACpC,MAAM,kCAAkC,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAExD,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAClC,MAAM,gCAAgC,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAEtD,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAC9B,MAAM,4BAA4B,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAElD,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IACjC,MAAM,+BAA+B,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAErD,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAC5B,MAAM,0BAA0B,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAEhD,MAAM,sBAAsB,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;AAC9C,CAAC;AAED,gGAAgG;AAChG,MAAM,iBAAiB,GAAgB;IACrC,SAAS;IACT,SAAS;IACT;QACE,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE;YACJ,cAAc,EAAE,QAAQ;YACxB,aAAa,EAAE,IAAI,UAAU,EAAE;YAC/B,kBAAkB,EAAE,IAAI,UAAU,EAAE;YACpC,YAAY,EAAE,IAAA,yCAAmB,GAAE;YACnC,UAAU,EAAE,IAAI,UAAU,EAAE;YAC5B,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,IAAI,UAAU,EAAE;YAC3B,UAAU,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,UAAU,EAAE,EAAE;SACpE;KACF;CACF,CAAA;AAED,KAAK,UAAU,kCAAkC,CAC/C,IAA2B,EAC3B,EAAgB,EAChB,IAAqB;IAErB,MAAM,CAAC,GAAG,IAAA,yBAAc,EAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IACtD,IAAI,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAEjE,MAAM,IAAI,GAAG,MAAM,IAAA,+CAAqB,EACtC,IAAA,kBAAU,EAAC,IAAI,CAAC,cAAc,CAAC,EAC/B,IAAA,kBAAU,EAAC,IAAI,CAAC,cAAc,CAAC,EAC/B,EAAE,EACF,IAAI,UAAU,EAAE,EAChB,CAAC,CAAC,CAAC,CAAC,EACJ,CAAC,EACD,IAAI,CACL,CAAA;IAED,MAAM,WAAW,GAAG,MAAM,IAAA,gDAAsB,EAC9C,IAAA,kBAAU,EAAC,IAAI,CAAC,cAAc,CAAC,EAC/B,EAAE,EACF,EAAE,EACF,IAAI,CAAC,aAAa,EAClB,IAAI,EACJ,IAAA,kBAAU,EAAC,IAAI,CAAC,aAAa,CAAC,CAC/B,CAAA;IAED,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,OAAO,CAAC,WAAW,KAAK,UAAU;QAC7E,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAE3D,MAAM,CAAC,IAAA,yBAAc,EAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;AAC/F,CAAC;AAED,KAAK,UAAU,gCAAgC,CAAC,IAA2B,EAAE,EAAgB,EAAE,IAAqB;IAClH,MAAM,CAAC,GAAG,IAAA,qBAAY,EAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;IAClD,IAAI,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAE/D,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA,CAAC,sCAAsC;IAE1H,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,IAAA,4CAA4B,EACrE,EAAE,EACF,oBAAoB,EACpB,CAAC,CAAC,CAAC,CAAC,EACJ,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EACtC,IAAI,UAAU,EAAE,EAChB,IAAA,kBAAU,EAAC,IAAI,CAAC,cAAc,CAAC,EAC/B,IAAI,CAAC,SAAS,CACf,CAAA;IAED,MAAM,oBAAoB,GAAyB;QACjD,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,aAAa;QACtB,IAAI,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE;KACvE,CAAA;IAED,MAAM,IAAI,GAAG,MAAM,IAAA,8CAAoB,EAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAA;IAExG,MAAM,WAAW,GAAG,MAAM,IAAA,gDAAsB,EAC9C,IAAA,kBAAU,EAAC,IAAI,CAAC,cAAc,CAAC,EAC/B,EAAE,EACF,EAAE,EACF,IAAI,EACJ,IAAI,EACJ,IAAA,kBAAU,EAAC,IAAI,CAAC,aAAa,CAAC,CAC/B,CAAA;IAED,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ;QAC3E,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAE3D,MAAM,CAAC,IAAA,qBAAY,EAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;AACzF,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAA2B,EAAE,EAAgB,EAAE,IAAqB;IAChG,MAAM,IAAI,GAAG,IAAA,0BAAgB,EAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,oBAAoB;QACnE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAExD,MAAM,WAAW,GAAG,MAAM,IAAA,gDAAsB,EAC9C,IAAA,kBAAU,EAAC,IAAI,CAAC,cAAc,CAAC,EAC/B,EAAE,EACF,EAAE,EACF,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,EACrB,IAAI,EACJ,IAAA,kBAAU,EAAC,IAAI,CAAC,aAAa,CAAC,CAC/B,CAAA;IAED,IAAI,WAAW,CAAC,OAAO,CAAC,WAAW,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IAEnG,MAAM,CAAC,IAAA,yBAAc,EAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;AAC/F,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAA2B,EAAE,EAAgB,EAAE,IAAqB;IAC9F,MAAM,CAAC,GAAG,IAAA,0BAAgB,EAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1D,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,oBAAoB;QAC7D,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAExD,MAAM,WAAW,GAAG,MAAM,IAAA,gDAAsB,EAC9C,IAAA,kBAAU,EAAC,IAAI,CAAC,cAAc,CAAC,EAC/B,EAAE,EACF,EAAE,EACF,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,EAClB,IAAI,EACJ,IAAA,kBAAU,EAAC,IAAI,CAAC,aAAa,CAAC,CAC/B,CAAA;IAED,IAAI,WAAW,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAE/F,MAAM,CAAC,IAAA,qBAAY,EAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;AACzF,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,IAA2B,EAAE,EAAgB,EAAE,IAAqB;IACxG,MAAM,kBAAkB,GAAG,IAAA,0BAAgB,EAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAA;IACjF,IAAI,kBAAkB,KAAK,SAAS,IAAI,kBAAkB,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,qBAAqB;QAChG,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IAEzD,MAAM,UAAU,GAAG,MAAM,IAAA,6BAAgB,EAAC,CAAC,EAAE,IAAA,kBAAU,EAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAE1F,MAAM,WAAW,GAAG,MAAM,IAAA,2CAAuB,EAC/C,IAAA,kBAAU,EAAC,IAAI,CAAC,kBAAkB,CAAC,EACnC,kBAAkB,CAAC,CAAC,CAAC,CAAC,cAAc,EACpC,UAAU,EACV,iBAAiB,EACjB,EAAE,EACF,8CAAyB,EACzB,IAAI,EACJ,IAAA,kBAAU,EAAC,IAAI,CAAC,aAAa,CAAC,CAC/B,CAAA;IAED,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,KAAK,aAAa;QACxF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAE5D,MAAM,OAAO,GAAyB;QACpC,OAAO,EAAE;YACP,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO;YAC9B,WAAW,EAAE,aAAa;YAC1B,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE;YAC9C,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,iBAAiB,EAAE,IAAI,UAAU,EAAE;SACpC;QACD,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI;QAC9B,UAAU,EAAE,oBAAoB;KACjC,CAAA;IAED,MAAM,MAAM,CAAC,IAAA,8CAAoB,EAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAU,CAAC,CAAA;AACpH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAA2B,EAAE,EAAgB,EAAE,IAAqB;IACxF,MAAM,aAAa,GAAG,IAAA,0BAAgB,EAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAA;IACvE,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,qBAAqB;QACtF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IAEzD,MAAM,UAAU,GAAG,MAAM,IAAA,6BAAgB,EAAC,CAAC,EAAE,IAAA,kBAAU,EAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAE1F,MAAM,WAAW,GAAG,MAAM,IAAA,2CAAuB,EAC/C,IAAA,kBAAU,EAAC,IAAI,CAAC,kBAAkB,CAAC,EACnC,aAAa,CAAC,CAAC,CAAC,CAAC,cAAc,EAC/B,UAAU,EACV,iBAAiB,EACjB,EAAE,EACF,8CAAyB,EACzB,IAAI,EACJ,IAAA,kBAAU,EAAC,IAAI,CAAC,aAAa,CAAC,CAC/B,CAAA;IAED,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ;QACnF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAE5D,MAAM,CAAC,IAAA,qBAAY,EAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;AACjG,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAA2B,EAAE,EAAgB,EAAE,IAAqB;IAC7F,MAAM,kBAAkB,GAAG,IAAA,0BAAgB,EAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAA;IACjF,IAAI,kBAAkB,KAAK,SAAS,IAAI,kBAAkB,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,qBAAqB;QAChG,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IAEzD,MAAM,UAAU,GAAG,MAAM,IAAA,6BAAgB,EAAC,CAAC,EAAE,IAAA,kBAAU,EAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAE1F,MAAM,WAAW,GAAG,MAAM,IAAA,2CAAuB,EAC/C,IAAA,kBAAU,EAAC,IAAI,CAAC,kBAAkB,CAAC,EACnC,kBAAkB,CAAC,CAAC,CAAC,CAAC,cAAc,EACpC,UAAU,EACV,iBAAiB,EACjB,EAAE,EACF,8CAAyB,EACzB,IAAI,EACJ,IAAA,kBAAU,EAAC,IAAI,CAAC,aAAa,CAAC,CAC/B,CAAA;IAED,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,KAAK,aAAa;QACxF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAE5D,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAA;AACjG,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,IAA2B,EAAE,EAAgB,EAAE,IAAqB;IAC9G,MAAM,CAAC,GAAG,IAAA,yBAAc,EAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IACtD,IAAI,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAEjE,MAAM,UAAU,GAAG,MAAM,IAAA,6BAAgB,EAAC,CAAC,EAAE,IAAA,kBAAU,EAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAE1F,MAAM,GAAG,GAAG,MAAM,IAAA,mCAAe,EAC/B,IAAA,kBAAU,EAAC,IAAI,CAAC,cAAc,CAAC,EAC/B,IAAA,kBAAU,EAAC,IAAI,CAAC,kBAAkB,CAAC,EACnC,CAAC,CAAC,CAAC,CAAC,EACJ,IAAI,UAAU,EAAE,EAChB,EAAE,EACF,UAAU,EACV,CAAC,EACD,oCAAoB,EACpB,IAAI,CACL,CAAA;IAED,MAAM,WAAW,GAAG,MAAM,IAAA,2CAAuB,EAC/C,IAAA,kBAAU,EAAC,IAAI,CAAC,kBAAkB,CAAC,EACnC,GAAG,CAAC,cAAc,EAClB,UAAU,EACV,iBAAiB,EACjB,EAAE,EACF,8CAAyB,EACzB,IAAI,EACJ,IAAA,kBAAU,EAAC,IAAI,CAAC,aAAa,CAAC,CAC/B,CAAA;IAED,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,KAAK,UAAU;QACrF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAE5D,MAAM,CAAC,IAAA,yBAAc,EAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;AACvG,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,IAA2B,EAAE,EAAgB,EAAE,IAAqB;IACjH,MAAM,UAAU,GAAG,MAAM,IAAA,6BAAgB,EAAC,CAAC,EAAE,IAAA,kBAAU,EAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAE1F,MAAM,GAAG,GAAG,MAAM,IAAA,0CAAsB,EACtC,IAAA,kBAAU,EAAC,IAAI,CAAC,cAAc,CAAC,EAC/B,IAAA,kBAAU,EAAC,IAAI,CAAC,kBAAkB,CAAC,EACnC,IAAA,kBAAU,EAAC,IAAI,CAAC,WAAW,CAAC,EAC5B,IAAI,UAAU,EAAE,EAChB,EAAE,EACF,UAAU,EACV,CAAC,EACD,oCAAoB,EACpB,IAAI,CACL,CAAA;IAED,MAAM,WAAW,GAAG,MAAM,IAAA,2CAAuB,EAC/C,IAAA,kBAAU,EAAC,IAAI,CAAC,kBAAkB,CAAC,EACnC,GAAG,CAAC,cAAc,EAClB,UAAU,EACV,iBAAiB,EACjB,EAAE,EACF,8CAAyB,EACzB,IAAI,EACJ,IAAA,kBAAU,EAAC,IAAI,CAAC,aAAa,CAAC,CAC/B,CAAA;IAED,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,KAAK,aAAa;QACxF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAE5D,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAA;AACjG,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,IAA2B,EAAE,EAAgB,EAAE,IAAqB;IAC5G,MAAM,CAAC,GAAG,IAAA,qBAAY,EAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;IAClD,IAAI,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAE/D,MAAM,UAAU,GAAG,MAAM,IAAA,6BAAgB,EAAC,CAAC,EAAE,IAAA,kBAAU,EAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAE1F,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA,CAAC,sCAAsC;IAE1H,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,IAAA,4CAA4B,EACrE,EAAE,EACF,qBAAqB,EACrB,CAAC,CAAC,CAAC,CAAC,EACJ,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EACtC,IAAI,UAAU,EAAE,EAChB,IAAA,kBAAU,EAAC,IAAI,CAAC,cAAc,CAAC,EAC/B,IAAI,CAAC,SAAS,CACf,CAAA;IAED,MAAM,OAAO,GAAG;QACd,GAAG,aAAa;QAChB,IAAI,EAAE;YACJ,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,SAAS;YACT,eAAe;SAChB;KACF,CAAA;IAED,MAAM,GAAG,GAAG,MAAM,IAAA,2BAAO,EACvB,IAAA,kBAAU,EAAC,IAAI,CAAC,kBAAkB,CAAC,EACnC,IAAI,UAAU,EAAE,EAChB,EAAE,EACF,UAAU,EACV,OAAO,EACP,CAAC,EACD,oCAAoB,EACpB,IAAI,CACL,CAAA;IAED,MAAM,WAAW,GAAG,MAAM,IAAA,2CAAuB,EAC/C,IAAA,kBAAU,EAAC,IAAI,CAAC,kBAAkB,CAAC,EACnC,GAAG,CAAC,cAAc,EAClB,UAAU,EACV,iBAAiB,EACjB,EAAE,EACF,8CAAyB,EACzB,IAAI,EACJ,IAAA,kBAAU,EAAC,IAAI,CAAC,aAAa,CAAC,CAC/B,CAAA;IAED,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ;QACnF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAE5D,MAAM,CAAC,IAAA,qBAAY,EAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;AACjG,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAA2B,EAAE,EAAgB,EAAE,IAAqB;IAC1F,MAAM,eAAe,GAAG,IAAA,0BAAgB,EAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3E,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,qBAAqB;QAC1F,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IAEzD,MAAM,UAAU,GAAG,MAAM,IAAA,6BAAgB,EAAC,CAAC,EAAE,IAAA,kBAAU,EAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAE1F,MAAM,WAAW,GAAG,MAAM,IAAA,2CAAuB,EAC/C,IAAA,kBAAU,EAAC,IAAI,CAAC,kBAAkB,CAAC,EACnC,eAAe,CAAC,CAAC,CAAC,CAAC,cAAc,EACjC,UAAU,EACV;QACE,SAAS;QACT,SAAS;QACT;YACE,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE;gBACJ,cAAc,EAAE,QAAQ;gBACxB,aAAa,EAAE,IAAI,UAAU,EAAE;gBAC/B,kBAAkB,EAAE,IAAI,UAAU,EAAE;gBACpC,YAAY,EAAE,IAAA,yCAAmB,GAAE;gBACnC,UAAU,EAAE,IAAI,UAAU,EAAE;gBAC5B,UAAU,EAAE,EAAE;gBACd,SAAS,EAAE,IAAI,UAAU,EAAE;gBAC3B,UAAU,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,UAAU,EAAE,EAAE;aACpE;SACF;KACF,EACD,EAAE,EACF,8CAAyB,EACzB,IAAI,EACJ,IAAA,kBAAU,EAAC,IAAI,CAAC,aAAa,CAAC,CAC/B,CAAA;IAED,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,KAAK,UAAU;QACrF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAE5D,MAAM,CAAC,IAAA,yBAAc,EAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;AACvG,CAAC"}

package/dist/test/test-vectors/messages.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/test-vectors/messages.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.test.d.ts","sourceRoot":"","sources":["../../../test/test-vectors/messages.test.ts"],"names":[],"mappings":""}

package/dist/test/test-vectors/messages.test.js

@@ -0,0 +1,141 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const messages_json_1 = __importDefault(require("../../test_vectors/messages.json"));
+const utils_1 = require("@noble/ciphers/utils");
+const message_1 = require("../../src/message");
+const commit_1 = require("../../src/commit");
+const proposal_1 = require("../../src/proposal");
+const ratchetTree_1 = require("../../src/ratchetTree");
+const groupSecrets_1 = require("../../src/groupSecrets");
+for (const [index, x] of messages_json_1.default.entries()) {
+    test(`messages test vectors ${index}`, () => {
+        codecRoundtrip(x);
+    });
+}
+function codecRoundtrip(msgs) {
+    welcome(msgs.mls_welcome);
+    groupInfo(msgs.mls_group_info);
+    keyPackage(msgs.mls_key_package);
+    ratchetTree(msgs.ratchet_tree);
+    groupSecrets(msgs.group_secrets);
+    addProposal(msgs.add_proposal);
+    updateProposal(msgs.update_proposal);
+    removeProposal(msgs.remove_proposal);
+    pskProposal(msgs.pre_shared_key_proposal);
+    reinitProposal(msgs.re_init_proposal);
+    externalInitProposal(msgs.external_init_proposal);
+    groupContextExtension(msgs.group_context_extensions_proposal);
+    commit(msgs.commit);
+    publicMessageApplication(msgs.public_message_application);
+    publicMessageCommit(msgs.public_message_commit);
+    publicMessageProposal(msgs.public_message_proposal);
+    privateMessage(msgs.private_message);
+}
+function welcome(s) {
+    const inputBytes = (0, utils_1.hexToBytes)(s);
+    const mlsWelcome = (0, message_1.decodeMlsMessage)(inputBytes, 0);
+    if (mlsWelcome === undefined || mlsWelcome[0].wireformat !== "mls_welcome") {
+        throw new Error("could not decode mls welcome");
+    }
+    else {
+        const reEncoded = (0, message_1.encodeMlsMessage)(mlsWelcome[0]);
+        expect(reEncoded).toStrictEqual(inputBytes);
+    }
+}
+function privateMessage(s) {
+    const inputBytes = (0, utils_1.hexToBytes)(s);
+    const p = (0, message_1.decodeMlsMessage)(inputBytes, 0);
+    if (p === undefined || p[0].wireformat !== "mls_private_message") {
+        throw new Error("could not decode mls private message");
+    }
+    else {
+        const reEncoded = (0, message_1.encodeMlsMessage)(p?.[0]);
+        expect(reEncoded).toStrictEqual(inputBytes);
+    }
+}
+function groupInfo(s) {
+    const inputBytes = (0, utils_1.hexToBytes)(s);
+    const gi = (0, message_1.decodeMlsMessage)(inputBytes, 0);
+    if (gi === undefined || gi[0].wireformat !== "mls_group_info") {
+        throw new Error("could not decode mls_group_info");
+    }
+    else {
+        const reEncoded = (0, message_1.encodeMlsMessage)(gi[0]);
+        expect(reEncoded).toStrictEqual(inputBytes);
+    }
+}
+function keyPackage(s) {
+    const inputBytes = (0, utils_1.hexToBytes)(s);
+    const kp = (0, message_1.decodeMlsMessage)(inputBytes, 0);
+    if (kp === undefined || kp[0].wireformat !== "mls_key_package") {
+        throw new Error("could not decode mls_key_package");
+    }
+    else {
+        const reEncoded = (0, message_1.encodeMlsMessage)(kp[0]);
+        expect(reEncoded).toStrictEqual(inputBytes);
+    }
+}
+function publicMessageApplication(s) {
+    const inputBytes = (0, utils_1.hexToBytes)(s);
+    const p = (0, message_1.decodeMlsMessage)(inputBytes, 0);
+    if (p === undefined || p[0].wireformat !== "mls_public_message") {
+        throw new Error("could not decode mls_public_message");
+    }
+    else {
+        expect(p[0].publicMessage.content.contentType).toBe("application");
+        const reEncoded = (0, message_1.encodeMlsMessage)(p[0]);
+        expect(reEncoded).toStrictEqual(inputBytes);
+    }
+}
+function publicMessageProposal(s) {
+    const inputBytes = (0, utils_1.hexToBytes)(s);
+    const p = (0, message_1.decodeMlsMessage)(inputBytes, 0);
+    if (p === undefined || p[0].wireformat !== "mls_public_message") {
+        throw new Error("could not decode mls_public_message");
+    }
+    else {
+        expect(p[0].publicMessage.content.contentType).toBe("proposal");
+        const reEncoded = (0, message_1.encodeMlsMessage)(p[0]);
+        expect(reEncoded).toStrictEqual(inputBytes);
+    }
+}
+function publicMessageCommit(s) {
+    const inputBytes = (0, utils_1.hexToBytes)(s);
+    const p = (0, message_1.decodeMlsMessage)(inputBytes, 0);
+    if (p === undefined || p[0].wireformat !== "mls_public_message") {
+        throw new Error("could not decode mls_public_message");
+    }
+    else {
+        expect(p[0].publicMessage.content.contentType).toBe("commit");
+        const reEncoded = (0, message_1.encodeMlsMessage)(p[0]);
+        expect(reEncoded).toStrictEqual(inputBytes);
+    }
+}
+//const keyPackage = createTest(encodeKeyPackage, decodeKeyPackage, '')
+const commit = createTest(commit_1.encodeCommit, commit_1.decodeCommit, "commit");
+const groupSecrets = createTest(groupSecrets_1.encodeGroupSecrets, groupSecrets_1.decodeGroupSecrets, "group_secrets");
+const ratchetTree = createTest(ratchetTree_1.encodeRatchetTree, ratchetTree_1.decodeRatchetTree, "ratchet_tree");
+const updateProposal = createTest(proposal_1.encodeUpdate, proposal_1.decodeUpdate, "update_proposal");
+const addProposal = createTest(proposal_1.encodeAdd, proposal_1.decodeAdd, "add_proposal");
+const pskProposal = createTest(proposal_1.encodePSK, proposal_1.decodePSK, "pre_shared_key_proposal");
+const removeProposal = createTest(proposal_1.encodeRemove, proposal_1.decodeRemove, "remove_proposal");
+const reinitProposal = createTest(proposal_1.encodeReinit, proposal_1.decodeReinit, "re_init_proposal");
+const externalInitProposal = createTest(proposal_1.encodeExternalInit, proposal_1.decodeExternalInit, "external_init_proposal");
+const groupContextExtension = createTest(proposal_1.encodeGroupContextExtensions, proposal_1.decodeGroupContextExtensions, "group_context_extensions_proposal");
+function createTest(enc, dec, typeName) {
+    return (s) => {
+        const inputBytes = (0, utils_1.hexToBytes)(s);
+        const decoded = dec(inputBytes, 0);
+        if (decoded === undefined) {
+            throw new Error(`could not decode ${typeName}`);
+        }
+        else {
+            const reEncoded = enc(decoded[0]);
+            expect(reEncoded).toStrictEqual(inputBytes);
+        }
+    };
+}
+//# sourceMappingURL=messages.test.js.map

package/dist/test/test-vectors/messages.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.test.js","sourceRoot":"","sources":["../../../test/test-vectors/messages.test.ts"],"names":[],"mappings":";;;;;AAAA,qFAAmD;AAEnD,gDAAiD;AACjD,+CAAsE;AACtE,6CAA6D;AAG7D,iDAe2B;AAC3B,uDAA4E;AAC5E,yDAA+E;AAE/E,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,uBAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACxC,IAAI,CAAC,yBAAyB,KAAK,EAAE,EAAE,GAAG,EAAE;QAC1C,cAAc,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC,CAAC,CAAA;AACJ,CAAC;AAsBD,SAAS,cAAc,CAAC,IAAc;IACpC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACzB,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAC9B,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAChC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAC9B,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAChC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAC9B,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IACpC,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IACpC,WAAW,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;IACzC,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;IACrC,oBAAoB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;IACjD,qBAAqB,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;IAC7D,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACnB,wBAAwB,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;IACzD,mBAAmB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;IAC/C,qBAAqB,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;IACnD,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;AACtC,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,MAAM,UAAU,GAAG,IAAA,kBAAU,EAAC,CAAC,CAAC,CAAA;IAChC,MAAM,UAAU,GAAG,IAAA,0BAAgB,EAAC,UAAU,EAAE,CAAC,CAAC,CAAA;IAElD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,aAAa,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IACjD,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,IAAA,0BAAgB,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;QACjD,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,CAAS;IAC/B,MAAM,UAAU,GAAG,IAAA,kBAAU,EAAC,CAAC,CAAC,CAAA;IAChC,MAAM,CAAC,GAAG,IAAA,0BAAgB,EAAC,UAAU,EAAE,CAAC,CAAC,CAAA;IAEzC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,qBAAqB,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACzD,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,IAAA,0BAAgB,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1C,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,MAAM,UAAU,GAAG,IAAA,kBAAU,EAAC,CAAC,CAAC,CAAA;IAChC,MAAM,EAAE,GAAG,IAAA,0BAAgB,EAAC,UAAU,EAAE,CAAC,CAAC,CAAA;IAE1C,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,gBAAgB,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACpD,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,IAAA,0BAAgB,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,MAAM,UAAU,GAAG,IAAA,kBAAU,EAAC,CAAC,CAAC,CAAA;IAChC,MAAM,EAAE,GAAG,IAAA,0BAAgB,EAAC,UAAU,EAAE,CAAC,CAAC,CAAA;IAE1C,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACrD,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,IAAA,0BAAgB,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,CAAS;IACzC,MAAM,UAAU,GAAG,IAAA,kBAAU,EAAC,CAAC,CAAC,CAAA;IAChC,MAAM,CAAC,GAAG,IAAA,0BAAgB,EAAC,UAAU,EAAE,CAAC,CAAC,CAAA;IAEzC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACxD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAClE,MAAM,SAAS,GAAG,IAAA,0BAAgB,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAS;IACtC,MAAM,UAAU,GAAG,IAAA,kBAAU,EAAC,CAAC,CAAC,CAAA;IAChC,MAAM,CAAC,GAAG,IAAA,0BAAgB,EAAC,UAAU,EAAE,CAAC,CAAC,CAAA;IAEzC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACxD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC/D,MAAM,SAAS,GAAG,IAAA,0BAAgB,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,CAAS;IACpC,MAAM,UAAU,GAAG,IAAA,kBAAU,EAAC,CAAC,CAAC,CAAA;IAChC,MAAM,CAAC,GAAG,IAAA,0BAAgB,EAAC,UAAU,EAAE,CAAC,CAAC,CAAA;IAEzC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACxD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC7D,MAAM,SAAS,GAAG,IAAA,0BAAgB,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,MAAM,GAAG,UAAU,CAAC,qBAAY,EAAE,qBAAY,EAAE,QAAQ,CAAC,CAAA;AAC/D,MAAM,YAAY,GAAG,UAAU,CAAC,iCAAkB,EAAE,iCAAkB,EAAE,eAAe,CAAC,CAAA;AACxF,MAAM,WAAW,GAAG,UAAU,CAAC,+BAAiB,EAAE,+BAAiB,EAAE,cAAc,CAAC,CAAA;AACpF,MAAM,cAAc,GAAG,UAAU,CAAC,uBAAY,EAAE,uBAAY,EAAE,iBAAiB,CAAC,CAAA;AAChF,MAAM,WAAW,GAAG,UAAU,CAAC,oBAAS,EAAE,oBAAS,EAAE,cAAc,CAAC,CAAA;AACpE,MAAM,WAAW,GAAG,UAAU,CAAC,oBAAS,EAAE,oBAAS,EAAE,yBAAyB,CAAC,CAAA;AAC/E,MAAM,cAAc,GAAG,UAAU,CAAC,uBAAY,EAAE,uBAAY,EAAE,iBAAiB,CAAC,CAAA;AAChF,MAAM,cAAc,GAAG,UAAU,CAAC,uBAAY,EAAE,uBAAY,EAAE,kBAAkB,CAAC,CAAA;AACjF,MAAM,oBAAoB,GAAG,UAAU,CAAC,6BAAkB,EAAE,6BAAkB,EAAE,wBAAwB,CAAC,CAAA;AACzG,MAAM,qBAAqB,GAAG,UAAU,CACtC,uCAA4B,EAC5B,uCAA4B,EAC5B,mCAAmC,CACpC,CAAA;AAED,SAAS,UAAU,CAAI,GAAe,EAAE,GAAe,EAAE,QAAgB;IACvE,OAAO,CAAC,CAAC,EAAE,EAAE;QACX,MAAM,UAAU,GAAG,IAAA,kBAAU,EAAC,CAAC,CAAC,CAAA;QAChC,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAA;QAElC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,EAAE,CAAC,CAAA;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;YACjC,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC,CAAA;AACH,CAAC"}

package/dist/test/test-vectors/passiveClientScenarios.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/test-vectors/passiveClientScenarios.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passiveClientScenarios.test.d.ts","sourceRoot":"","sources":["../../../test/test-vectors/passiveClientScenarios.test.ts"],"names":[],"mappings":""}

package/dist/test/test-vectors/passiveClientScenarios.test.js

@@ -0,0 +1,91 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const ciphersuite_1 = require("../../src/crypto/ciphersuite");
+const utils_1 = require("@noble/ciphers/utils");
+const passive_client_handling_commit_json_1 = __importDefault(require("../../test_vectors/passive-client-handling-commit.json"));
+const passive_client_random_json_1 = __importDefault(require("../../test_vectors/passive-client-random.json"));
+const passive_client_welcome_json_1 = __importDefault(require("../../test_vectors/passive-client-welcome.json"));
+const keyMatch_1 = require("../crypto/keyMatch");
+const message_1 = require("../../src/message");
+const ratchetTree_1 = require("../../src/ratchetTree");
+const clientState_1 = require("../../src/clientState");
+const processMessages_1 = require("../../src/processMessages");
+const byteArray_1 = require("../../src/util/byteArray");
+for (const [index, x] of passive_client_handling_commit_json_1.default.entries()) {
+    test(`passive-client-handling-commit test vectors ${index}`, async () => {
+        const impl = await (0, ciphersuite_1.getCiphersuiteImpl)((0, ciphersuite_1.getCiphersuiteFromId)(x.cipher_suite));
+        await testPassiveClientScenario(x, impl);
+    });
+}
+for (const [index, x] of passive_client_random_json_1.default.entries()) {
+    test(`passive-client-random test vectors ${index}`, async () => {
+        const impl = await (0, ciphersuite_1.getCiphersuiteImpl)((0, ciphersuite_1.getCiphersuiteFromId)(x.cipher_suite));
+        await testPassiveClientScenario(x, impl);
+    }, 40000);
+}
+for (const [index, x] of passive_client_welcome_json_1.default.entries()) {
+    test(`passive-client-welcome test vectors ${index}`, async () => {
+        const impl = await (0, ciphersuite_1.getCiphersuiteImpl)((0, ciphersuite_1.getCiphersuiteFromId)(x.cipher_suite));
+        await testPassiveClientScenario(x, impl);
+    });
+}
+async function testPassiveClientScenario(data, impl) {
+    const kp = (0, message_1.decodeMlsMessage)((0, utils_1.hexToBytes)(data.key_package), 0);
+    if (kp === undefined || kp[0].wireformat !== "mls_key_package")
+        throw new Error("Could not decode KeyPackage");
+    await verifyKeys(data, kp[0].keyPackage, impl);
+    const welcome = (0, message_1.decodeMlsMessage)((0, utils_1.hexToBytes)(data.welcome), 0);
+    if (welcome === undefined || welcome[0].wireformat !== "mls_welcome")
+        throw new Error("Could not decode Welcome");
+    const pks = {
+        hpkePrivateKey: (0, utils_1.hexToBytes)(data.encryption_priv),
+        initPrivateKey: (0, utils_1.hexToBytes)(data.init_priv),
+        signaturePrivateKey: (0, utils_1.hexToBytes)(data.signature_priv),
+    };
+    const tree = data.ratchet_tree !== null ? (0, ratchetTree_1.decodeRatchetTree)((0, utils_1.hexToBytes)(data.ratchet_tree), 0)?.[0] : undefined;
+    const psks = data.external_psks.reduce((acc, psk) => ({ ...acc, [(0, byteArray_1.bytesToBase64)((0, utils_1.hexToBytes)(psk.psk_id))]: (0, utils_1.hexToBytes)(psk.psk) }), {});
+    let state = await (0, clientState_1.joinGroup)(welcome[0].welcome, kp[0].keyPackage, pks, (0, clientState_1.makePskIndex)(undefined, psks), impl, tree);
+    expect(state.keySchedule.epochAuthenticator).toStrictEqual((0, utils_1.hexToBytes)(data.initial_epoch_authenticator));
+    for (const epoch of data.epochs) {
+        for (const proposal of epoch.proposals) {
+            const mlsProposal = (0, message_1.decodeMlsMessage)((0, utils_1.hexToBytes)(proposal), 0);
+            if (mlsProposal === undefined ||
+                (mlsProposal[0].wireformat !== "mls_private_message" && mlsProposal[0].wireformat !== "mls_public_message"))
+                throw new Error("Could not decode proposal message");
+            if (mlsProposal[0].wireformat === "mls_private_message") {
+                const res = await (0, processMessages_1.processPrivateMessage)(state, mlsProposal[0].privateMessage, (0, clientState_1.makePskIndex)(state, psks), impl);
+                state = res.newState;
+            }
+            else {
+                const res = await (0, processMessages_1.processPublicMessage)(state, mlsProposal[0].publicMessage, (0, clientState_1.makePskIndex)(state, psks), impl);
+                state = res.newState;
+            }
+        }
+        const mlsCommit = (0, message_1.decodeMlsMessage)((0, utils_1.hexToBytes)(epoch.commit), 0);
+        if (mlsCommit === undefined ||
+            (mlsCommit[0].wireformat !== "mls_private_message" && mlsCommit[0].wireformat !== "mls_public_message"))
+            throw new Error("Could not decode commit message");
+        if (mlsCommit[0].wireformat === "mls_private_message") {
+            const res = await (0, processMessages_1.processPrivateMessage)(state, mlsCommit[0].privateMessage, (0, clientState_1.makePskIndex)(state, psks), impl);
+            state = res.newState;
+        }
+        else {
+            const res = await (0, processMessages_1.processPublicMessage)(state, mlsCommit[0].publicMessage, (0, clientState_1.makePskIndex)(state, psks), impl);
+            state = res.newState;
+        }
+        expect(state.keySchedule.epochAuthenticator).toStrictEqual((0, utils_1.hexToBytes)(epoch.epoch_authenticator));
+    }
+}
+async function verifyKeys(data, kp, impl) {
+    const hpke = await (0, keyMatch_1.hpkeKeysMatch)(kp.leafNode.hpkePublicKey, (0, utils_1.hexToBytes)(data.encryption_priv), impl.hpke);
+    expect(hpke).toBe(true);
+    const hpkeInit = await (0, keyMatch_1.hpkeKeysMatch)(kp.initKey, (0, utils_1.hexToBytes)(data.init_priv), impl.hpke);
+    expect(hpkeInit).toBe(true);
+    const sig = await (0, keyMatch_1.signatureKeysMatch)(kp.leafNode.signaturePublicKey, (0, utils_1.hexToBytes)(data.signature_priv), impl.signature);
+    expect(sig).toBe(true);
+    (0, utils_1.hexToBytes)(data.init_priv);
+}
+//# sourceMappingURL=passiveClientScenarios.test.js.map

package/dist/test/test-vectors/passiveClientScenarios.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passiveClientScenarios.test.js","sourceRoot":"","sources":["../../../test/test-vectors/passiveClientScenarios.test.ts"],"names":[],"mappings":";;;;;AAAA,8DAAuH;AAEvH,gDAAiD;AACjD,iIAA+E;AAC/E,+GAAsE;AACtE,iHAAwE;AACxE,iDAAsE;AACtE,+CAAoD;AACpD,uDAAyD;AAEzD,uDAA+D;AAC/D,+DAAuF;AACvF,wDAAwD;AAExD,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,6CAAU,CAAC,OAAO,EAAE,EAAE,CAAC;IAC9C,IAAI,CAAC,+CAA+C,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAkB,EAAC,IAAA,kCAAoB,EAAC,CAAC,CAAC,YAA6B,CAAC,CAAC,CAAA;QAC5F,MAAM,yBAAyB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,oCAAU,CAAC,OAAO,EAAE,EAAE,CAAC;IAC9C,IAAI,CAAC,sCAAsC,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAkB,EAAC,IAAA,kCAAoB,EAAC,CAAC,CAAC,YAA6B,CAAC,CAAC,CAAA;QAC5F,MAAM,yBAAyB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IAC1C,CAAC,EAAE,KAAK,CAAC,CAAA;AACX,CAAC;AAED,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,qCAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IAC/C,IAAI,CAAC,uCAAuC,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAkB,EAAC,IAAA,kCAAoB,EAAC,CAAC,CAAC,YAA6B,CAAC,CAAC,CAAA;QAC5F,MAAM,yBAAyB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,IAAmB,EAAE,IAAqB;IACjF,MAAM,EAAE,GAAG,IAAA,0BAAgB,EAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAA;IAE5D,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;IAC9G,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;IAE9C,MAAM,OAAO,GAAG,IAAA,0BAAgB,EAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;IAE7D,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAEjH,MAAM,GAAG,GAAsB;QAC7B,cAAc,EAAE,IAAA,kBAAU,EAAC,IAAI,CAAC,eAAe,CAAC;QAChD,cAAc,EAAE,IAAA,kBAAU,EAAC,IAAI,CAAC,SAAS,CAAC;QAC1C,mBAAmB,EAAE,IAAA,kBAAU,EAAC,IAAI,CAAC,cAAc,CAAC;KACrD,CAAA;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAA,+BAAiB,EAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAE9G,MAAM,IAAI,GAA+B,IAAI,CAAC,aAAa,CAAC,MAAM,CAChE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,IAAA,yBAAa,EAAC,IAAA,kBAAU,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAA,kBAAU,EAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EACxF,EAAE,CACH,CAAA;IACD,IAAI,KAAK,GAAG,MAAM,IAAA,uBAAS,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,IAAA,0BAAY,EAAC,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;IAEjH,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAA;IAExG,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,WAAW,GAAG,IAAA,0BAAgB,EAAC,IAAA,kBAAU,EAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;YAC7D,IACE,WAAW,KAAK,SAAS;gBACzB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,qBAAqB,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,oBAAoB,CAAC;gBAE3G,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;YAEtD,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,qBAAqB,EAAE,CAAC;gBACxD,MAAM,GAAG,GAAG,MAAM,IAAA,uCAAqB,EAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,IAAA,0BAAY,EAAC,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;gBAE9G,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAA;YACtB,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,MAAM,IAAA,sCAAoB,EAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,IAAA,0BAAY,EAAC,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;gBAE5G,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAA;YACtB,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,IAAA,0BAAgB,EAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/D,IACE,SAAS,KAAK,SAAS;YACvB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,qBAAqB,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,oBAAoB,CAAC;YAEvG,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QAEpD,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,qBAAqB,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,MAAM,IAAA,uCAAqB,EAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,IAAA,0BAAY,EAAC,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;YAE5G,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAA;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,MAAM,IAAA,sCAAoB,EAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,IAAA,0BAAY,EAAC,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;YAC1G,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAA;QACtB,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,aAAa,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAA;IACnG,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAmB,EAAE,EAAc,EAAE,IAAqB;IAClF,MAAM,IAAI,GAAG,MAAM,IAAA,wBAAa,EAAC,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAA,kBAAU,EAAC,IAAI,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IACxG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEvB,MAAM,QAAQ,GAAG,MAAM,IAAA,wBAAa,EAAC,EAAE,CAAC,OAAO,EAAE,IAAA,kBAAU,EAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IACvF,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAE3B,MAAM,GAAG,GAAG,MAAM,IAAA,6BAAkB,EAAC,EAAE,CAAC,QAAQ,CAAC,kBAAkB,EAAE,IAAA,kBAAU,EAAC,IAAI,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IACrH,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtB,IAAA,kBAAU,EAAC,IAAI,CAAC,SAAS,CAAC,CAAA;AAC5B,CAAC"}

package/dist/test/test-vectors/pskSecret.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/test-vectors/pskSecret.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pskSecret.test.d.ts","sourceRoot":"","sources":["../../../test/test-vectors/pskSecret.test.ts"],"names":[],"mappings":""}

package/dist/test/test-vectors/pskSecret.test.js

@@ -0,0 +1,23 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const psk_secret_json_1 = __importDefault(require("../../test_vectors/psk_secret.json"));
+const ciphersuite_1 = require("../../src/crypto/ciphersuite");
+const presharedkey_1 = require("../../src/presharedkey");
+const utils_1 = require("@noble/ciphers/utils");
+for (const [index, x] of psk_secret_json_1.default.entries()) {
+    test(`psk_secret test vectors ${index}`, async () => {
+        const impl = await (0, ciphersuite_1.getCiphersuiteImpl)((0, ciphersuite_1.getCiphersuiteFromId)(x.cipher_suite));
+        await testPskSecret(x.psk_secret, x.psks, impl);
+    });
+}
+function toExternalPsk(p) {
+    return [{ psktype: "external", pskId: (0, utils_1.hexToBytes)(p.psk_id), pskNonce: (0, utils_1.hexToBytes)(p.psk_nonce) }, (0, utils_1.hexToBytes)(p.psk)];
+}
+async function testPskSecret(secret, psks, impl) {
+    const computedSecret = await (0, presharedkey_1.computePskSecret)(psks.map(toExternalPsk), impl);
+    expect((0, utils_1.bytesToHex)(computedSecret)).toBe(secret);
+}
+//# sourceMappingURL=pskSecret.test.js.map