ts-mls 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (887) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +194 -0
  3. package/dist/codec/number.d.ts +10 -0
  4. package/dist/codec/number.js +73 -0
  5. package/dist/codec/number.js.map +1 -0
  6. package/dist/codec/optional.d.ts +4 -0
  7. package/dist/codec/optional.js +24 -0
  8. package/dist/codec/optional.js.map +1 -0
  9. package/dist/codec/tlsDecoder.d.ts +16 -0
  10. package/dist/codec/tlsDecoder.js +98 -0
  11. package/dist/codec/tlsDecoder.js.map +1 -0
  12. package/dist/codec/tlsEncoder.d.ts +9 -0
  13. package/dist/codec/tlsEncoder.js +29 -0
  14. package/dist/codec/tlsEncoder.js.map +1 -0
  15. package/dist/codec/variableLength.d.ts +10 -0
  16. package/dist/codec/variableLength.js +102 -0
  17. package/dist/codec/variableLength.js.map +1 -0
  18. package/dist/codec/vector.d.ts +10 -0
  19. package/dist/codec/vector.js +76 -0
  20. package/dist/codec/vector.js.map +1 -0
  21. package/dist/crypto/aead.d.ts +5 -0
  22. package/dist/crypto/aead.js +56 -0
  23. package/dist/crypto/aead.js.map +1 -0
  24. package/dist/crypto/ciphersuite.d.ts +47 -0
  25. package/dist/crypto/ciphersuite.js +208 -0
  26. package/dist/crypto/ciphersuite.js.map +1 -0
  27. package/dist/crypto/hash.d.ts +8 -0
  28. package/dist/crypto/hash.js +36 -0
  29. package/dist/crypto/hash.js.map +1 -0
  30. package/dist/crypto/hpke.d.ts +46 -0
  31. package/dist/crypto/hpke.js +73 -0
  32. package/dist/crypto/hpke.js.map +1 -0
  33. package/dist/crypto/kdf.d.ts +12 -0
  34. package/dist/crypto/kdf.js +49 -0
  35. package/dist/crypto/kdf.js.map +1 -0
  36. package/dist/crypto/kem.d.ts +3 -0
  37. package/dist/crypto/kem.js +29 -0
  38. package/dist/crypto/kem.js.map +1 -0
  39. package/dist/crypto/rng.d.ts +4 -0
  40. package/dist/crypto/rng.js +9 -0
  41. package/dist/crypto/rng.js.map +1 -0
  42. package/dist/crypto/signature.d.ts +12 -0
  43. package/dist/crypto/signature.js +73 -0
  44. package/dist/crypto/signature.js.map +1 -0
  45. package/dist/src/AuthenticationService.d.ts +7 -0
  46. package/dist/src/AuthenticationService.js +9 -0
  47. package/dist/src/AuthenticationService.js.map +1 -0
  48. package/dist/src/IncomingMessageAction.d.ts +10 -0
  49. package/dist/src/IncomingMessageAction.d.ts.map +1 -0
  50. package/dist/src/IncomingMessageAction.js +6 -0
  51. package/dist/src/IncomingMessageAction.js.map +1 -0
  52. package/dist/src/PaddingConfig.d.ts +9 -0
  53. package/dist/src/PaddingConfig.js +12 -0
  54. package/dist/src/PaddingConfig.js.map +1 -0
  55. package/dist/src/authenticatedContent.d.ts +32 -0
  56. package/dist/src/authenticatedContent.d.ts.map +1 -0
  57. package/dist/src/authenticatedContent.js +32 -0
  58. package/dist/src/authenticatedContent.js.map +1 -0
  59. package/dist/src/authenticationService.d.ts.map +1 -0
  60. package/dist/src/capabilities.d.ts +14 -0
  61. package/dist/src/capabilities.d.ts.map +1 -0
  62. package/dist/src/capabilities.js +31 -0
  63. package/dist/src/capabilities.js.map +1 -0
  64. package/dist/src/clientConfig.d.ts +21 -0
  65. package/dist/src/clientConfig.d.ts.map +1 -0
  66. package/dist/src/clientConfig.js +16 -0
  67. package/dist/src/clientConfig.js.map +1 -0
  68. package/dist/src/clientState.d.ts +122 -0
  69. package/dist/src/clientState.d.ts.map +1 -0
  70. package/dist/src/clientState.js +562 -0
  71. package/dist/src/clientState.js.map +1 -0
  72. package/dist/src/codec/number.d.ts +10 -0
  73. package/dist/src/codec/number.d.ts.map +1 -0
  74. package/dist/src/codec/number.js +67 -0
  75. package/dist/src/codec/number.js.map +1 -0
  76. package/dist/src/codec/optional.d.ts +4 -0
  77. package/dist/src/codec/optional.d.ts.map +1 -0
  78. package/dist/src/codec/optional.js +24 -0
  79. package/dist/src/codec/optional.js.map +1 -0
  80. package/dist/src/codec/tlsDecoder.d.ts +14 -0
  81. package/dist/src/codec/tlsDecoder.d.ts.map +1 -0
  82. package/dist/src/codec/tlsDecoder.js +90 -0
  83. package/dist/src/codec/tlsDecoder.js.map +1 -0
  84. package/dist/src/codec/tlsEncoder.d.ts +9 -0
  85. package/dist/src/codec/tlsEncoder.d.ts.map +1 -0
  86. package/dist/src/codec/tlsEncoder.js +29 -0
  87. package/dist/src/codec/tlsEncoder.js.map +1 -0
  88. package/dist/src/codec/variableLength.d.ts +11 -0
  89. package/dist/src/codec/variableLength.d.ts.map +1 -0
  90. package/dist/src/codec/variableLength.js +104 -0
  91. package/dist/src/codec/variableLength.js.map +1 -0
  92. package/dist/src/commit.d.ts +10 -0
  93. package/dist/src/commit.d.ts.map +1 -0
  94. package/dist/src/commit.js +12 -0
  95. package/dist/src/commit.js.map +1 -0
  96. package/dist/src/contentType.d.ts +12 -0
  97. package/dist/src/contentType.d.ts.map +1 -0
  98. package/dist/src/contentType.js +15 -0
  99. package/dist/src/contentType.js.map +1 -0
  100. package/dist/src/createCommit.d.ts +32 -0
  101. package/dist/src/createCommit.d.ts.map +1 -0
  102. package/dist/src/createCommit.js +260 -0
  103. package/dist/src/createCommit.js.map +1 -0
  104. package/dist/src/createMessage.d.ts +24 -0
  105. package/dist/src/createMessage.d.ts.map +1 -0
  106. package/dist/src/createMessage.js +36 -0
  107. package/dist/src/createMessage.js.map +1 -0
  108. package/dist/src/credential.d.ts +21 -0
  109. package/dist/src/credential.d.ts.map +1 -0
  110. package/dist/src/credential.js +35 -0
  111. package/dist/src/credential.js.map +1 -0
  112. package/dist/src/credentialType.d.ts +11 -0
  113. package/dist/src/credentialType.d.ts.map +1 -0
  114. package/dist/src/credentialType.js +14 -0
  115. package/dist/src/credentialType.js.map +1 -0
  116. package/dist/src/crypto/aead.d.ts +8 -0
  117. package/dist/src/crypto/aead.d.ts.map +1 -0
  118. package/dist/src/crypto/aead.js +105 -0
  119. package/dist/src/crypto/aead.js.map +1 -0
  120. package/dist/src/crypto/ciphersuite.d.ts +51 -0
  121. package/dist/src/crypto/ciphersuite.d.ts.map +1 -0
  122. package/dist/src/crypto/ciphersuite.js +252 -0
  123. package/dist/src/crypto/ciphersuite.js.map +1 -0
  124. package/dist/src/crypto/hash.d.ts +8 -0
  125. package/dist/src/crypto/hash.d.ts.map +1 -0
  126. package/dist/src/crypto/hash.js +36 -0
  127. package/dist/src/crypto/hash.js.map +1 -0
  128. package/dist/src/crypto/hpke.d.ts +51 -0
  129. package/dist/src/crypto/hpke.d.ts.map +1 -0
  130. package/dist/src/crypto/hpke.js +114 -0
  131. package/dist/src/crypto/hpke.js.map +1 -0
  132. package/dist/src/crypto/kdf.d.ts +12 -0
  133. package/dist/src/crypto/kdf.d.ts.map +1 -0
  134. package/dist/src/crypto/kdf.js +49 -0
  135. package/dist/src/crypto/kdf.js.map +1 -0
  136. package/dist/src/crypto/kem.d.ts +3 -0
  137. package/dist/src/crypto/kem.d.ts.map +1 -0
  138. package/dist/src/crypto/kem.js +85 -0
  139. package/dist/src/crypto/kem.js.map +1 -0
  140. package/dist/src/crypto/rng.d.ts +4 -0
  141. package/dist/src/crypto/rng.d.ts.map +1 -0
  142. package/dist/src/crypto/rng.js +9 -0
  143. package/dist/src/crypto/rng.js.map +1 -0
  144. package/dist/src/crypto/signature.d.ts +12 -0
  145. package/dist/src/crypto/signature.d.ts.map +1 -0
  146. package/dist/src/crypto/signature.js +165 -0
  147. package/dist/src/crypto/signature.js.map +1 -0
  148. package/dist/src/customCredential.d.ts +2 -0
  149. package/dist/src/customCredential.d.ts.map +1 -0
  150. package/dist/src/customCredential.js +14 -0
  151. package/dist/src/customCredential.js.map +1 -0
  152. package/dist/src/customExtension.d.ts +2 -0
  153. package/dist/src/customExtension.js +11 -0
  154. package/dist/src/customExtension.js.map +1 -0
  155. package/dist/src/customProposal.d.ts +2 -0
  156. package/dist/src/customProposal.js +11 -0
  157. package/dist/src/customProposal.js.map +1 -0
  158. package/dist/src/defaultCapabilities.d.ts +2 -0
  159. package/dist/src/defaultCapabilities.d.ts.map +1 -0
  160. package/dist/src/defaultCapabilities.js +15 -0
  161. package/dist/src/defaultCapabilities.js.map +1 -0
  162. package/dist/src/defaultExtensionType.d.ts +13 -0
  163. package/dist/src/defaultExtensionType.d.ts.map +1 -0
  164. package/dist/src/defaultExtensionType.js +17 -0
  165. package/dist/src/defaultExtensionType.js.map +1 -0
  166. package/dist/src/defaultProposalType.d.ts +15 -0
  167. package/dist/src/defaultProposalType.d.ts.map +1 -0
  168. package/dist/src/defaultProposalType.js +19 -0
  169. package/dist/src/defaultProposalType.js.map +1 -0
  170. package/dist/src/extension.d.ts +18 -0
  171. package/dist/src/extension.d.ts.map +1 -0
  172. package/dist/src/extension.js +38 -0
  173. package/dist/src/extension.js.map +1 -0
  174. package/dist/src/extensionType.d.ts +13 -0
  175. package/dist/src/extensionType.js +17 -0
  176. package/dist/src/extensionType.js.map +1 -0
  177. package/dist/src/externalProposal.d.ts +7 -0
  178. package/dist/src/externalProposal.d.ts.map +1 -0
  179. package/dist/src/externalProposal.js +44 -0
  180. package/dist/src/externalProposal.js.map +1 -0
  181. package/dist/src/externalSender.d.ts +9 -0
  182. package/dist/src/externalSender.d.ts.map +1 -0
  183. package/dist/src/externalSender.js +10 -0
  184. package/dist/src/externalSender.js.map +1 -0
  185. package/dist/src/framedContent.d.ts +113 -0
  186. package/dist/src/framedContent.d.ts.map +1 -0
  187. package/dist/src/framedContent.js +144 -0
  188. package/dist/src/framedContent.js.map +1 -0
  189. package/dist/src/grease.d.ts +16 -0
  190. package/dist/src/grease.d.ts.map +1 -0
  191. package/dist/src/grease.js +37 -0
  192. package/dist/src/grease.js.map +1 -0
  193. package/dist/src/groupContext.d.ts +19 -0
  194. package/dist/src/groupContext.d.ts.map +1 -0
  195. package/dist/src/groupContext.js +49 -0
  196. package/dist/src/groupContext.js.map +1 -0
  197. package/dist/src/groupInfo.d.ts +26 -0
  198. package/dist/src/groupInfo.d.ts.map +1 -0
  199. package/dist/src/groupInfo.js +55 -0
  200. package/dist/src/groupInfo.js.map +1 -0
  201. package/dist/src/groupSecrets.d.ts +10 -0
  202. package/dist/src/groupSecrets.d.ts.map +1 -0
  203. package/dist/src/groupSecrets.js +11 -0
  204. package/dist/src/groupSecrets.js.map +1 -0
  205. package/dist/src/hpkeCiphertext.d.ts +8 -0
  206. package/dist/src/hpkeCiphertext.d.ts.map +1 -0
  207. package/dist/src/hpkeCiphertext.js +9 -0
  208. package/dist/src/hpkeCiphertext.js.map +1 -0
  209. package/dist/src/index.d.ts +32 -0
  210. package/dist/src/index.d.ts.map +1 -0
  211. package/dist/src/index.js +68 -0
  212. package/dist/src/index.js.map +1 -0
  213. package/dist/src/keyPackage.d.ts +38 -0
  214. package/dist/src/keyPackage.d.ts.map +1 -0
  215. package/dist/src/keyPackage.js +79 -0
  216. package/dist/src/keyPackage.js.map +1 -0
  217. package/dist/src/keyPackageEqualityConfig.d.ts +7 -0
  218. package/dist/src/keyPackageEqualityConfig.d.ts.map +1 -0
  219. package/dist/src/keyPackageEqualityConfig.js +13 -0
  220. package/dist/src/keyPackageEqualityConfig.js.map +1 -0
  221. package/dist/src/keyRetentionConfig.d.ts +6 -0
  222. package/dist/src/keyRetentionConfig.d.ts.map +1 -0
  223. package/dist/src/keyRetentionConfig.js +9 -0
  224. package/dist/src/keyRetentionConfig.js.map +1 -0
  225. package/dist/src/keySchedule.d.ts +24 -0
  226. package/dist/src/keySchedule.d.ts.map +1 -0
  227. package/dist/src/keySchedule.js +49 -0
  228. package/dist/src/keySchedule.js.map +1 -0
  229. package/dist/src/leafNode.d.ts +78 -0
  230. package/dist/src/leafNode.d.ts.map +1 -0
  231. package/dist/src/leafNode.js +96 -0
  232. package/dist/src/leafNode.js.map +1 -0
  233. package/dist/src/leafNodeSource.d.ts +12 -0
  234. package/dist/src/leafNodeSource.d.ts.map +1 -0
  235. package/dist/src/leafNodeSource.js +15 -0
  236. package/dist/src/leafNodeSource.js.map +1 -0
  237. package/dist/src/lifetime.d.ts +9 -0
  238. package/dist/src/lifetime.d.ts.map +1 -0
  239. package/dist/src/lifetime.js +16 -0
  240. package/dist/src/lifetime.js.map +1 -0
  241. package/dist/src/lifetimeConfig.d.ts +5 -0
  242. package/dist/src/lifetimeConfig.d.ts.map +1 -0
  243. package/dist/src/lifetimeConfig.js +8 -0
  244. package/dist/src/lifetimeConfig.js.map +1 -0
  245. package/dist/src/message.d.ts +42 -0
  246. package/dist/src/message.d.ts.map +1 -0
  247. package/dist/src/message.js +49 -0
  248. package/dist/src/message.js.map +1 -0
  249. package/dist/src/messageProtection.d.ts +36 -0
  250. package/dist/src/messageProtection.d.ts.map +1 -0
  251. package/dist/src/messageProtection.js +135 -0
  252. package/dist/src/messageProtection.js.map +1 -0
  253. package/dist/src/messageProtectionPublic.d.ts +17 -0
  254. package/dist/src/messageProtectionPublic.d.ts.map +1 -0
  255. package/dist/src/messageProtectionPublic.js +105 -0
  256. package/dist/src/messageProtectionPublic.js.map +1 -0
  257. package/dist/src/mlsError.d.ts +24 -0
  258. package/dist/src/mlsError.d.ts.map +1 -0
  259. package/dist/src/mlsError.js +60 -0
  260. package/dist/src/mlsError.js.map +1 -0
  261. package/dist/src/nodeType.d.ts +11 -0
  262. package/dist/src/nodeType.d.ts.map +1 -0
  263. package/dist/src/nodeType.js +14 -0
  264. package/dist/src/nodeType.js.map +1 -0
  265. package/dist/src/paddingConfig.d.ts.map +1 -0
  266. package/dist/src/parentHash.d.ts +16 -0
  267. package/dist/src/parentHash.d.ts.map +1 -0
  268. package/dist/src/parentHash.js +108 -0
  269. package/dist/src/parentHash.js.map +1 -0
  270. package/dist/src/parentNode.d.ts +9 -0
  271. package/dist/src/parentNode.d.ts.map +1 -0
  272. package/dist/src/parentNode.js +14 -0
  273. package/dist/src/parentNode.js.map +1 -0
  274. package/dist/src/pathSecrets.d.ts +10 -0
  275. package/dist/src/pathSecrets.d.ts.map +1 -0
  276. package/dist/src/pathSecrets.js +36 -0
  277. package/dist/src/pathSecrets.js.map +1 -0
  278. package/dist/src/presharedkey.d.ts +51 -0
  279. package/dist/src/presharedkey.d.ts.map +1 -0
  280. package/dist/src/presharedkey.js +65 -0
  281. package/dist/src/presharedkey.js.map +1 -0
  282. package/dist/src/privateKeyPath.d.ts +12 -0
  283. package/dist/src/privateKeyPath.d.ts.map +1 -0
  284. package/dist/src/privateKeyPath.js +26 -0
  285. package/dist/src/privateKeyPath.js.map +1 -0
  286. package/dist/src/privateMessage.d.ts +41 -0
  287. package/dist/src/privateMessage.d.ts.map +1 -0
  288. package/dist/src/privateMessage.js +122 -0
  289. package/dist/src/privateMessage.js.map +1 -0
  290. package/dist/src/processMessages.d.ts +26 -0
  291. package/dist/src/processMessages.d.ts.map +1 -0
  292. package/dist/src/processMessages.js +201 -0
  293. package/dist/src/processMessages.js.map +1 -0
  294. package/dist/src/proposal.d.ts +97 -0
  295. package/dist/src/proposal.d.ts.map +1 -0
  296. package/dist/src/proposal.js +96 -0
  297. package/dist/src/proposal.js.map +1 -0
  298. package/dist/src/proposalOrRefType.d.ts +25 -0
  299. package/dist/src/proposalOrRefType.d.ts.map +1 -0
  300. package/dist/src/proposalOrRefType.js +35 -0
  301. package/dist/src/proposalOrRefType.js.map +1 -0
  302. package/dist/src/proposalType.d.ts +15 -0
  303. package/dist/src/proposalType.js +19 -0
  304. package/dist/src/proposalType.js.map +1 -0
  305. package/dist/src/protectMessages.d.ts +20 -0
  306. package/dist/src/protectMessages.js +116 -0
  307. package/dist/src/protectMessages.js.map +1 -0
  308. package/dist/src/protocolVersion.d.ts +9 -0
  309. package/dist/src/protocolVersion.d.ts.map +1 -0
  310. package/dist/src/protocolVersion.js +13 -0
  311. package/dist/src/protocolVersion.js.map +1 -0
  312. package/dist/src/pskIndex.d.ts +7 -0
  313. package/dist/src/pskIndex.d.ts.map +1 -0
  314. package/dist/src/pskIndex.js +22 -0
  315. package/dist/src/pskIndex.js.map +1 -0
  316. package/dist/src/publicMessage.d.ts +29 -0
  317. package/dist/src/publicMessage.d.ts.map +1 -0
  318. package/dist/src/publicMessage.js +78 -0
  319. package/dist/src/publicMessage.js.map +1 -0
  320. package/dist/src/ratchetTree.d.ts +46 -0
  321. package/dist/src/ratchetTree.d.ts.map +1 -0
  322. package/dist/src/ratchetTree.js +276 -0
  323. package/dist/src/ratchetTree.js.map +1 -0
  324. package/dist/src/requiredCapabilites.d.ts +12 -0
  325. package/dist/src/requiredCapabilites.js +12 -0
  326. package/dist/src/requiredCapabilites.js.map +1 -0
  327. package/dist/src/requiredCapabilities.d.ts +10 -0
  328. package/dist/src/requiredCapabilities.d.ts.map +1 -0
  329. package/dist/src/requiredCapabilities.js +11 -0
  330. package/dist/src/requiredCapabilities.js.map +1 -0
  331. package/dist/src/resumption.d.ts +18 -0
  332. package/dist/src/resumption.d.ts.map +1 -0
  333. package/dist/src/resumption.js +82 -0
  334. package/dist/src/resumption.js.map +1 -0
  335. package/dist/src/secretTree.d.ts +29 -0
  336. package/dist/src/secretTree.d.ts.map +1 -0
  337. package/dist/src/secretTree.js +146 -0
  338. package/dist/src/secretTree.js.map +1 -0
  339. package/dist/src/sender.d.ts +56 -0
  340. package/dist/src/sender.d.ts.map +1 -0
  341. package/dist/src/sender.js +91 -0
  342. package/dist/src/sender.js.map +1 -0
  343. package/dist/src/transcriptHash.d.ts +14 -0
  344. package/dist/src/transcriptHash.d.ts.map +1 -0
  345. package/dist/src/transcriptHash.js +28 -0
  346. package/dist/src/transcriptHash.js.map +1 -0
  347. package/dist/src/treeHash.d.ts +27 -0
  348. package/dist/src/treeHash.d.ts.map +1 -0
  349. package/dist/src/treeHash.js +76 -0
  350. package/dist/src/treeHash.js.map +1 -0
  351. package/dist/src/treemath.d.ts +14 -0
  352. package/dist/src/treemath.d.ts.map +1 -0
  353. package/dist/src/treemath.js +103 -0
  354. package/dist/src/treemath.js.map +1 -0
  355. package/dist/src/unappliedProposals.d.ts +7 -0
  356. package/dist/src/unappliedProposals.d.ts.map +1 -0
  357. package/dist/src/unappliedProposals.js +12 -0
  358. package/dist/src/unappliedProposals.js.map +1 -0
  359. package/dist/src/updatePath.d.ts +34 -0
  360. package/dist/src/updatePath.d.ts.map +1 -0
  361. package/dist/src/updatePath.js +170 -0
  362. package/dist/src/updatePath.js.map +1 -0
  363. package/dist/src/util/addToMap.d.ts +1 -0
  364. package/dist/src/util/addToMap.d.ts.map +1 -0
  365. package/dist/src/util/addToMap.js +9 -0
  366. package/dist/src/util/addToMap.js.map +1 -0
  367. package/dist/src/util/array.d.ts +2 -0
  368. package/dist/src/util/array.d.ts.map +1 -0
  369. package/dist/src/util/array.js +13 -0
  370. package/dist/src/util/array.js.map +1 -0
  371. package/dist/src/util/byteArray.d.ts +3 -0
  372. package/dist/src/util/byteArray.d.ts.map +1 -0
  373. package/dist/src/util/byteArray.js +32 -0
  374. package/dist/src/util/byteArray.js.map +1 -0
  375. package/dist/src/util/constantTimeCompare.d.ts +1 -0
  376. package/dist/src/util/constantTimeCompare.d.ts.map +1 -0
  377. package/dist/src/util/constantTimeCompare.js +13 -0
  378. package/dist/src/util/constantTimeCompare.js.map +1 -0
  379. package/dist/src/util/enumHelpers.d.ts +4 -0
  380. package/dist/src/util/enumHelpers.d.ts.map +1 -0
  381. package/dist/src/util/enumHelpers.js +34 -0
  382. package/dist/src/util/enumHelpers.js.map +1 -0
  383. package/dist/src/util/repeat.d.ts +1 -0
  384. package/dist/src/util/repeat.d.ts.map +1 -0
  385. package/dist/src/util/repeat.js +11 -0
  386. package/dist/src/util/repeat.js.map +1 -0
  387. package/dist/src/welcome.d.ts +29 -0
  388. package/dist/src/welcome.d.ts.map +1 -0
  389. package/dist/src/welcome.js +55 -0
  390. package/dist/src/welcome.js.map +1 -0
  391. package/dist/src/wireformat.d.ts +13 -0
  392. package/dist/src/wireformat.d.ts.map +1 -0
  393. package/dist/src/wireformat.js +18 -0
  394. package/dist/src/wireformat.js.map +1 -0
  395. package/dist/test/base64.test.d.ts +1 -0
  396. package/dist/test/base64.test.d.ts.map +1 -0
  397. package/dist/test/base64.test.js +69 -0
  398. package/dist/test/base64.test.js.map +1 -0
  399. package/dist/test/codec/authenticatedContent.test.d.ts +1 -0
  400. package/dist/test/codec/authenticatedContent.test.d.ts.map +1 -0
  401. package/dist/test/codec/authenticatedContent.test.js +40 -0
  402. package/dist/test/codec/authenticatedContent.test.js.map +1 -0
  403. package/dist/test/codec/capabilities.test.d.ts +1 -0
  404. package/dist/test/codec/capabilities.test.d.ts.map +1 -0
  405. package/dist/test/codec/capabilities.test.js +28 -0
  406. package/dist/test/codec/capabilities.test.js.map +1 -0
  407. package/dist/test/codec/commit.test.d.ts +1 -0
  408. package/dist/test/codec/commit.test.d.ts.map +1 -0
  409. package/dist/test/codec/commit.test.js +17 -0
  410. package/dist/test/codec/commit.test.js.map +1 -0
  411. package/dist/test/codec/composite.test.d.ts +1 -0
  412. package/dist/test/codec/composite.test.d.ts.map +1 -0
  413. package/dist/test/codec/composite.test.js +63 -0
  414. package/dist/test/codec/composite.test.js.map +1 -0
  415. package/dist/test/codec/contentType.test.d.ts +1 -0
  416. package/dist/test/codec/contentType.test.d.ts.map +1 -0
  417. package/dist/test/codec/contentType.test.js +14 -0
  418. package/dist/test/codec/contentType.test.js.map +1 -0
  419. package/dist/test/codec/credential.test.d.ts +1 -0
  420. package/dist/test/codec/credential.test.d.ts.map +1 -0
  421. package/dist/test/codec/credential.test.js +19 -0
  422. package/dist/test/codec/credential.test.js.map +1 -0
  423. package/dist/test/codec/credentialType.test.d.ts +1 -0
  424. package/dist/test/codec/credentialType.test.d.ts.map +1 -0
  425. package/dist/test/codec/credentialType.test.js +14 -0
  426. package/dist/test/codec/credentialType.test.js.map +1 -0
  427. package/dist/test/codec/encryptedGroupSecrets.test.d.ts +1 -0
  428. package/dist/test/codec/encryptedGroupSecrets.test.d.ts.map +1 -0
  429. package/dist/test/codec/encryptedGroupSecrets.test.js +20 -0
  430. package/dist/test/codec/encryptedGroupSecrets.test.js.map +1 -0
  431. package/dist/test/codec/extension.test.d.ts +1 -0
  432. package/dist/test/codec/extension.test.d.ts.map +1 -0
  433. package/dist/test/codec/extension.test.js +22 -0
  434. package/dist/test/codec/extension.test.js.map +1 -0
  435. package/dist/test/codec/extensionType.test.d.ts +1 -0
  436. package/dist/test/codec/extensionType.test.d.ts.map +1 -0
  437. package/dist/test/codec/extensionType.test.js +14 -0
  438. package/dist/test/codec/extensionType.test.js.map +1 -0
  439. package/dist/test/codec/externalSender.test.d.ts +1 -0
  440. package/dist/test/codec/externalSender.test.d.ts.map +1 -0
  441. package/dist/test/codec/externalSender.test.js +22 -0
  442. package/dist/test/codec/externalSender.test.js.map +1 -0
  443. package/dist/test/codec/framedContent.test.d.ts +1 -0
  444. package/dist/test/codec/framedContent.test.d.ts.map +1 -0
  445. package/dist/test/codec/framedContent.test.js +28 -0
  446. package/dist/test/codec/framedContent.test.js.map +1 -0
  447. package/dist/test/codec/groupContext.test.d.ts +1 -0
  448. package/dist/test/codec/groupContext.test.d.ts.map +1 -0
  449. package/dist/test/codec/groupContext.test.js +32 -0
  450. package/dist/test/codec/groupContext.test.js.map +1 -0
  451. package/dist/test/codec/groupInfo.test.d.ts +1 -0
  452. package/dist/test/codec/groupInfo.test.d.ts.map +1 -0
  453. package/dist/test/codec/groupInfo.test.js +47 -0
  454. package/dist/test/codec/groupInfo.test.js.map +1 -0
  455. package/dist/test/codec/groupSecrets.test.d.ts +1 -0
  456. package/dist/test/codec/groupSecrets.test.d.ts.map +1 -0
  457. package/dist/test/codec/groupSecrets.test.js +18 -0
  458. package/dist/test/codec/groupSecrets.test.js.map +1 -0
  459. package/dist/test/codec/hpkeCiphertext.test.d.ts +1 -0
  460. package/dist/test/codec/hpkeCiphertext.test.d.ts.map +1 -0
  461. package/dist/test/codec/hpkeCiphertext.test.js +15 -0
  462. package/dist/test/codec/hpkeCiphertext.test.js.map +1 -0
  463. package/dist/test/codec/keyPackage.test.d.ts +1 -0
  464. package/dist/test/codec/keyPackage.test.d.ts.map +1 -0
  465. package/dist/test/codec/keyPackage.test.js +60 -0
  466. package/dist/test/codec/keyPackage.test.js.map +1 -0
  467. package/dist/test/codec/keyPackageTBS.test.d.ts +1 -0
  468. package/dist/test/codec/keyPackageTBS.test.d.ts.map +1 -0
  469. package/dist/test/codec/keyPackageTBS.test.js +61 -0
  470. package/dist/test/codec/keyPackageTBS.test.js.map +1 -0
  471. package/dist/test/codec/leafNode.test.d.ts +1 -0
  472. package/dist/test/codec/leafNode.test.d.ts.map +1 -0
  473. package/dist/test/codec/leafNode.test.js +45 -0
  474. package/dist/test/codec/leafNode.test.js.map +1 -0
  475. package/dist/test/codec/leafNodeData.test.d.ts +1 -0
  476. package/dist/test/codec/leafNodeData.test.d.ts.map +1 -0
  477. package/dist/test/codec/leafNodeData.test.js +38 -0
  478. package/dist/test/codec/leafNodeData.test.js.map +1 -0
  479. package/dist/test/codec/leafNodeSource.test.d.ts +1 -0
  480. package/dist/test/codec/leafNodeSource.test.d.ts.map +1 -0
  481. package/dist/test/codec/leafNodeSource.test.js +17 -0
  482. package/dist/test/codec/leafNodeSource.test.js.map +1 -0
  483. package/dist/test/codec/lifetime.test.d.ts +1 -0
  484. package/dist/test/codec/lifetime.test.d.ts.map +1 -0
  485. package/dist/test/codec/lifetime.test.js +14 -0
  486. package/dist/test/codec/lifetime.test.js.map +1 -0
  487. package/dist/test/codec/message.test.d.ts +1 -0
  488. package/dist/test/codec/message.test.d.ts.map +1 -0
  489. package/dist/test/codec/message.test.js +102 -0
  490. package/dist/test/codec/message.test.js.map +1 -0
  491. package/dist/test/codec/nodeType.test.d.ts +1 -0
  492. package/dist/test/codec/nodeType.test.d.ts.map +1 -0
  493. package/dist/test/codec/nodeType.test.js +14 -0
  494. package/dist/test/codec/nodeType.test.js.map +1 -0
  495. package/dist/test/codec/number.test.d.ts +1 -0
  496. package/dist/test/codec/number.test.d.ts.map +1 -0
  497. package/dist/test/codec/number.test.js +76 -0
  498. package/dist/test/codec/number.test.js.map +1 -0
  499. package/dist/test/codec/optional.test.d.ts +1 -0
  500. package/dist/test/codec/optional.test.d.ts.map +1 -0
  501. package/dist/test/codec/optional.test.js +44 -0
  502. package/dist/test/codec/optional.test.js.map +1 -0
  503. package/dist/test/codec/padding.test.d.ts +1 -0
  504. package/dist/test/codec/padding.test.d.ts.map +1 -0
  505. package/dist/test/codec/padding.test.js +42 -0
  506. package/dist/test/codec/padding.test.js.map +1 -0
  507. package/dist/test/codec/parentHash.test.d.ts +1 -0
  508. package/dist/test/codec/parentHash.test.d.ts.map +1 -0
  509. package/dist/test/codec/parentHash.test.js +15 -0
  510. package/dist/test/codec/parentHash.test.js.map +1 -0
  511. package/dist/test/codec/parentNode.test.d.ts +1 -0
  512. package/dist/test/codec/parentNode.test.d.ts.map +1 -0
  513. package/dist/test/codec/parentNode.test.js +24 -0
  514. package/dist/test/codec/parentNode.test.js.map +1 -0
  515. package/dist/test/codec/presharedkey.test.d.ts +1 -0
  516. package/dist/test/codec/presharedkey.test.d.ts.map +1 -0
  517. package/dist/test/codec/presharedkey.test.js +37 -0
  518. package/dist/test/codec/presharedkey.test.js.map +1 -0
  519. package/dist/test/codec/privateContentAAD.test.d.ts +1 -0
  520. package/dist/test/codec/privateContentAAD.test.d.ts.map +1 -0
  521. package/dist/test/codec/privateContentAAD.test.js +32 -0
  522. package/dist/test/codec/privateContentAAD.test.js.map +1 -0
  523. package/dist/test/codec/privateMessage.test.d.ts +1 -0
  524. package/dist/test/codec/privateMessage.test.d.ts.map +1 -0
  525. package/dist/test/codec/privateMessage.test.js +38 -0
  526. package/dist/test/codec/privateMessage.test.js.map +1 -0
  527. package/dist/test/codec/proposal.test.d.ts +1 -0
  528. package/dist/test/codec/proposal.test.d.ts.map +1 -0
  529. package/dist/test/codec/proposal.test.js +46 -0
  530. package/dist/test/codec/proposal.test.js.map +1 -0
  531. package/dist/test/codec/proposalOrRef.test.d.ts +1 -0
  532. package/dist/test/codec/proposalOrRef.test.d.ts.map +1 -0
  533. package/dist/test/codec/proposalOrRef.test.js +14 -0
  534. package/dist/test/codec/proposalOrRef.test.js.map +1 -0
  535. package/dist/test/codec/proposalOrRefType.test.d.ts +1 -0
  536. package/dist/test/codec/proposalOrRefType.test.d.ts.map +1 -0
  537. package/dist/test/codec/proposalOrRefType.test.js +14 -0
  538. package/dist/test/codec/proposalOrRefType.test.js.map +1 -0
  539. package/dist/test/codec/proposalType.test.d.ts +1 -0
  540. package/dist/test/codec/proposalType.test.d.ts.map +1 -0
  541. package/dist/test/codec/proposalType.test.js +14 -0
  542. package/dist/test/codec/proposalType.test.js.map +1 -0
  543. package/dist/test/codec/protocolVersion.test.d.ts +1 -0
  544. package/dist/test/codec/protocolVersion.test.d.ts.map +1 -0
  545. package/dist/test/codec/protocolVersion.test.js +11 -0
  546. package/dist/test/codec/protocolVersion.test.js.map +1 -0
  547. package/dist/test/codec/pskId.test.d.ts +1 -0
  548. package/dist/test/codec/pskId.test.d.ts.map +1 -0
  549. package/dist/test/codec/pskId.test.js +20 -0
  550. package/dist/test/codec/pskId.test.js.map +1 -0
  551. package/dist/test/codec/pskInfo.test.d.ts +1 -0
  552. package/dist/test/codec/pskInfo.test.d.ts.map +1 -0
  553. package/dist/test/codec/pskInfo.test.js +14 -0
  554. package/dist/test/codec/pskInfo.test.js.map +1 -0
  555. package/dist/test/codec/pskLabel.test.d.ts +1 -0
  556. package/dist/test/codec/pskLabel.test.d.ts.map +1 -0
  557. package/dist/test/codec/pskLabel.test.js +28 -0
  558. package/dist/test/codec/pskLabel.test.js.map +1 -0
  559. package/dist/test/codec/pskType.test.d.ts +1 -0
  560. package/dist/test/codec/pskType.test.d.ts.map +1 -0
  561. package/dist/test/codec/pskType.test.js +14 -0
  562. package/dist/test/codec/pskType.test.js.map +1 -0
  563. package/dist/test/codec/publicMessage.test.d.ts +1 -0
  564. package/dist/test/codec/publicMessage.test.d.ts.map +1 -0
  565. package/dist/test/codec/publicMessage.test.js +41 -0
  566. package/dist/test/codec/publicMessage.test.js.map +1 -0
  567. package/dist/test/codec/ratchetTree.test.d.ts +1 -0
  568. package/dist/test/codec/ratchetTree.test.d.ts.map +1 -0
  569. package/dist/test/codec/ratchetTree.test.js +85 -0
  570. package/dist/test/codec/ratchetTree.test.js.map +1 -0
  571. package/dist/test/codec/requiredCapabilities.test.d.ts +1 -0
  572. package/dist/test/codec/requiredCapabilities.test.d.ts.map +1 -0
  573. package/dist/test/codec/requiredCapabilities.test.js +32 -0
  574. package/dist/test/codec/requiredCapabilities.test.js.map +1 -0
  575. package/dist/test/codec/resumptionPSKUsage.test.d.ts +1 -0
  576. package/dist/test/codec/resumptionPSKUsage.test.d.ts.map +1 -0
  577. package/dist/test/codec/resumptionPSKUsage.test.js +17 -0
  578. package/dist/test/codec/resumptionPSKUsage.test.js.map +1 -0
  579. package/dist/test/codec/reuseGuard.test.d.ts +1 -0
  580. package/dist/test/codec/reuseGuard.test.d.ts.map +1 -0
  581. package/dist/test/codec/reuseGuard.test.js +11 -0
  582. package/dist/test/codec/reuseGuard.test.js.map +1 -0
  583. package/dist/test/codec/roundtrip.d.ts +3 -0
  584. package/dist/test/codec/roundtrip.d.ts.map +1 -0
  585. package/dist/test/codec/roundtrip.js +11 -0
  586. package/dist/test/codec/roundtrip.js.map +1 -0
  587. package/dist/test/codec/sender.test.d.ts +1 -0
  588. package/dist/test/codec/sender.test.d.ts.map +1 -0
  589. package/dist/test/codec/sender.test.js +20 -0
  590. package/dist/test/codec/sender.test.js.map +1 -0
  591. package/dist/test/codec/senderData.test.d.ts +1 -0
  592. package/dist/test/codec/senderData.test.d.ts.map +1 -0
  593. package/dist/test/codec/senderData.test.js +14 -0
  594. package/dist/test/codec/senderData.test.js.map +1 -0
  595. package/dist/test/codec/senderDataAAD.test.d.ts +1 -0
  596. package/dist/test/codec/senderDataAAD.test.d.ts.map +1 -0
  597. package/dist/test/codec/senderDataAAD.test.js +14 -0
  598. package/dist/test/codec/senderDataAAD.test.js.map +1 -0
  599. package/dist/test/codec/senderType.test.d.ts +1 -0
  600. package/dist/test/codec/senderType.test.d.ts.map +1 -0
  601. package/dist/test/codec/senderType.test.js +20 -0
  602. package/dist/test/codec/senderType.test.js.map +1 -0
  603. package/dist/test/codec/transcriptHash.test.d.ts +1 -0
  604. package/dist/test/codec/transcriptHash.test.d.ts.map +1 -0
  605. package/dist/test/codec/transcriptHash.test.js +40 -0
  606. package/dist/test/codec/transcriptHash.test.js.map +1 -0
  607. package/dist/test/codec/treeHash.test.d.ts +1 -0
  608. package/dist/test/codec/treeHash.test.d.ts.map +1 -0
  609. package/dist/test/codec/treeHash.test.js +19 -0
  610. package/dist/test/codec/treeHash.test.js.map +1 -0
  611. package/dist/test/codec/updatePath.test.d.ts +1 -0
  612. package/dist/test/codec/updatePath.test.d.ts.map +1 -0
  613. package/dist/test/codec/updatePath.test.js +83 -0
  614. package/dist/test/codec/updatePath.test.js.map +1 -0
  615. package/dist/test/codec/updatePathNode.test.d.ts +1 -0
  616. package/dist/test/codec/updatePathNode.test.d.ts.map +1 -0
  617. package/dist/test/codec/updatePathNode.test.js +25 -0
  618. package/dist/test/codec/updatePathNode.test.js.map +1 -0
  619. package/dist/test/codec/varLengthEncoding.test.d.ts +1 -0
  620. package/dist/test/codec/varLengthEncoding.test.d.ts.map +1 -0
  621. package/dist/test/codec/varLengthEncoding.test.js +92 -0
  622. package/dist/test/codec/varLengthEncoding.test.js.map +1 -0
  623. package/dist/test/codec/welcome.test.d.ts +1 -0
  624. package/dist/test/codec/welcome.test.d.ts.map +1 -0
  625. package/dist/test/codec/welcome.test.js +27 -0
  626. package/dist/test/codec/welcome.test.js.map +1 -0
  627. package/dist/test/codec/wireformat.test.d.ts +1 -0
  628. package/dist/test/codec/wireformat.test.d.ts.map +1 -0
  629. package/dist/test/codec/wireformat.test.js +23 -0
  630. package/dist/test/codec/wireformat.test.js.map +1 -0
  631. package/dist/test/crypto/aead.test.d.ts +1 -0
  632. package/dist/test/crypto/aead.test.d.ts.map +1 -0
  633. package/dist/test/crypto/aead.test.js +46 -0
  634. package/dist/test/crypto/aead.test.js.map +1 -0
  635. package/dist/test/crypto/hpke.test.d.ts +1 -0
  636. package/dist/test/crypto/hpke.test.d.ts.map +1 -0
  637. package/dist/test/crypto/hpke.test.js +60 -0
  638. package/dist/test/crypto/hpke.test.js.map +1 -0
  639. package/dist/test/crypto/keyMatch.d.ts +7 -0
  640. package/dist/test/crypto/keyMatch.d.ts.map +1 -0
  641. package/dist/test/crypto/keyMatch.js +27 -0
  642. package/dist/test/crypto/keyMatch.js.map +1 -0
  643. package/dist/test/extensionsEqual.test.d.ts +1 -0
  644. package/dist/test/extensionsEqual.test.d.ts.map +1 -0
  645. package/dist/test/extensionsEqual.test.js +53 -0
  646. package/dist/test/extensionsEqual.test.js.map +1 -0
  647. package/dist/test/groupinfo.test.d.ts +1 -0
  648. package/dist/test/groupinfo.test.d.ts.map +1 -0
  649. package/dist/test/groupinfo.test.js +42 -0
  650. package/dist/test/groupinfo.test.js.map +1 -0
  651. package/dist/test/scenario/common.d.ts +8 -0
  652. package/dist/test/scenario/common.d.ts.map +1 -0
  653. package/dist/test/scenario/common.js +47 -0
  654. package/dist/test/scenario/common.js.map +1 -0
  655. package/dist/test/scenario/customCredentials.test.d.ts +1 -0
  656. package/dist/test/scenario/customCredentials.test.js +3 -0
  657. package/dist/test/scenario/customCredentials.test.js.map +1 -0
  658. package/dist/test/scenario/customExtensions.test.d.ts +1 -0
  659. package/dist/test/scenario/customExtensions.test.d.ts.map +1 -0
  660. package/dist/test/scenario/customExtensions.test.js +58 -0
  661. package/dist/test/scenario/customExtensions.test.js.map +1 -0
  662. package/dist/test/scenario/customProposal.test.d.ts +1 -0
  663. package/dist/test/scenario/customProposal.test.d.ts.map +1 -0
  664. package/dist/test/scenario/customProposal.test.js +73 -0
  665. package/dist/test/scenario/customProposal.test.js.map +1 -0
  666. package/dist/test/scenario/epochOutOfOrder.test.d.ts +1 -0
  667. package/dist/test/scenario/epochOutOfOrder.test.d.ts.map +1 -0
  668. package/dist/test/scenario/epochOutOfOrder.test.js +164 -0
  669. package/dist/test/scenario/epochOutOfOrder.test.js.map +1 -0
  670. package/dist/test/scenario/externalAddProposal.test.d.ts +1 -0
  671. package/dist/test/scenario/externalAddProposal.test.d.ts.map +1 -0
  672. package/dist/test/scenario/externalAddProposal.test.js +71 -0
  673. package/dist/test/scenario/externalAddProposal.test.js.map +1 -0
  674. package/dist/test/scenario/externalJoin.test.d.ts +1 -0
  675. package/dist/test/scenario/externalJoin.test.d.ts.map +1 -0
  676. package/dist/test/scenario/externalJoin.test.js +53 -0
  677. package/dist/test/scenario/externalJoin.test.js.map +1 -0
  678. package/dist/test/scenario/externalJoinResync.test.d.ts +1 -0
  679. package/dist/test/scenario/externalJoinResync.test.d.ts.map +1 -0
  680. package/dist/test/scenario/externalJoinResync.test.js +61 -0
  681. package/dist/test/scenario/externalJoinResync.test.js.map +1 -0
  682. package/dist/test/scenario/externalProposal.test.d.ts +1 -0
  683. package/dist/test/scenario/externalProposal.test.d.ts.map +1 -0
  684. package/dist/test/scenario/externalProposal.test.js +71 -0
  685. package/dist/test/scenario/externalProposal.test.js.map +1 -0
  686. package/dist/test/scenario/externalPsk.test.d.ts +1 -0
  687. package/dist/test/scenario/externalPsk.test.d.ts.map +1 -0
  688. package/dist/test/scenario/externalPsk.test.js +75 -0
  689. package/dist/test/scenario/externalPsk.test.js.map +1 -0
  690. package/dist/test/scenario/externalPskJoin.test.d.ts +1 -0
  691. package/dist/test/scenario/externalPskJoin.test.d.ts.map +1 -0
  692. package/dist/test/scenario/externalPskJoin.test.js +53 -0
  693. package/dist/test/scenario/externalPskJoin.test.js.map +1 -0
  694. package/dist/test/scenario/generationOutOfOrder.test.d.ts +1 -0
  695. package/dist/test/scenario/generationOutOfOrder.test.d.ts.map +1 -0
  696. package/dist/test/scenario/generationOutOfOrder.test.js +113 -0
  697. package/dist/test/scenario/generationOutOfOrder.test.js.map +1 -0
  698. package/dist/test/scenario/grease.test.d.ts +1 -0
  699. package/dist/test/scenario/grease.test.d.ts.map +1 -0
  700. package/dist/test/scenario/grease.test.js +46 -0
  701. package/dist/test/scenario/grease.test.js.map +1 -0
  702. package/dist/test/scenario/largeGroupFullLifecycle.test.d.ts +1 -0
  703. package/dist/test/scenario/largeGroupFullLifecycle.test.d.ts.map +1 -0
  704. package/dist/test/scenario/largeGroupFullLifecycle.test.js +129 -0
  705. package/dist/test/scenario/largeGroupFullLifecycle.test.js.map +1 -0
  706. package/dist/test/scenario/leaveProposal.test.d.ts +1 -0
  707. package/dist/test/scenario/leaveProposal.test.d.ts.map +1 -0
  708. package/dist/test/scenario/leaveProposal.test.js +79 -0
  709. package/dist/test/scenario/leaveProposal.test.js.map +1 -0
  710. package/dist/test/scenario/multipleJoinsAtOnce.test.d.ts +1 -0
  711. package/dist/test/scenario/multipleJoinsAtOnce.test.d.ts.map +1 -0
  712. package/dist/test/scenario/multipleJoinsAtOnce.test.js +50 -0
  713. package/dist/test/scenario/multipleJoinsAtOnce.test.js.map +1 -0
  714. package/dist/test/scenario/oneToOneJoin.test.d.ts +1 -0
  715. package/dist/test/scenario/oneToOneJoin.test.d.ts.map +1 -0
  716. package/dist/test/scenario/oneToOneJoin.test.js +100 -0
  717. package/dist/test/scenario/oneToOneJoin.test.js.map +1 -0
  718. package/dist/test/scenario/processMessage.d.ts +1 -0
  719. package/dist/test/scenario/processMessage.js +3 -0
  720. package/dist/test/scenario/processMessage.js.map +1 -0
  721. package/dist/test/scenario/ratchetTreeExtension.test.d.ts +1 -0
  722. package/dist/test/scenario/ratchetTreeExtension.test.d.ts.map +1 -0
  723. package/dist/test/scenario/ratchetTreeExtension.test.js +50 -0
  724. package/dist/test/scenario/ratchetTreeExtension.test.js.map +1 -0
  725. package/dist/test/scenario/reinit.test.d.ts +1 -0
  726. package/dist/test/scenario/reinit.test.d.ts.map +1 -0
  727. package/dist/test/scenario/reinit.test.js +59 -0
  728. package/dist/test/scenario/reinit.test.js.map +1 -0
  729. package/dist/test/scenario/rejectIncomingMessage.test.d.ts +1 -0
  730. package/dist/test/scenario/rejectIncomingMessage.test.d.ts.map +1 -0
  731. package/dist/test/scenario/rejectIncomingMessage.test.js +69 -0
  732. package/dist/test/scenario/rejectIncomingMessage.test.js.map +1 -0
  733. package/dist/test/scenario/remove.test.d.ts +1 -0
  734. package/dist/test/scenario/remove.test.d.ts.map +1 -0
  735. package/dist/test/scenario/remove.test.js +70 -0
  736. package/dist/test/scenario/remove.test.js.map +1 -0
  737. package/dist/test/scenario/requiredCapabilites.test.d.ts +1 -0
  738. package/dist/test/scenario/requiredCapabilites.test.d.ts.map +1 -0
  739. package/dist/test/scenario/requiredCapabilites.test.js +67 -0
  740. package/dist/test/scenario/requiredCapabilites.test.js.map +1 -0
  741. package/dist/test/scenario/resumption.test.d.ts +1 -0
  742. package/dist/test/scenario/resumption.test.d.ts.map +1 -0
  743. package/dist/test/scenario/resumption.test.js +45 -0
  744. package/dist/test/scenario/resumption.test.js.map +1 -0
  745. package/dist/test/scenario/threePartyJoin.test.d.ts +1 -0
  746. package/dist/test/scenario/threePartyJoin.test.d.ts.map +1 -0
  747. package/dist/test/scenario/threePartyJoin.test.js +58 -0
  748. package/dist/test/scenario/threePartyJoin.test.js.map +1 -0
  749. package/dist/test/scenario/update.test.d.ts +1 -0
  750. package/dist/test/scenario/update.test.d.ts.map +1 -0
  751. package/dist/test/scenario/update.test.js +52 -0
  752. package/dist/test/scenario/update.test.js.map +1 -0
  753. package/dist/test/test-vectors/cryptoBasics.test.d.ts +1 -0
  754. package/dist/test/test-vectors/cryptoBasics.test.d.ts.map +1 -0
  755. package/dist/test/test-vectors/cryptoBasics.test.js +65 -0
  756. package/dist/test/test-vectors/cryptoBasics.test.js.map +1 -0
  757. package/dist/test/test-vectors/deserialization.test.d.ts +1 -0
  758. package/dist/test/test-vectors/deserialization.test.d.ts.map +1 -0
  759. package/dist/test/test-vectors/deserialization.test.js +18 -0
  760. package/dist/test/test-vectors/deserialization.test.js.map +1 -0
  761. package/dist/test/test-vectors/keySchedule.test.d.ts +1 -0
  762. package/dist/test/test-vectors/keySchedule.test.d.ts.map +1 -0
  763. package/dist/test/test-vectors/keySchedule.test.js +53 -0
  764. package/dist/test/test-vectors/keySchedule.test.js.map +1 -0
  765. package/dist/test/test-vectors/messageProtection.test.d.ts +1 -0
  766. package/dist/test/test-vectors/messageProtection.test.d.ts.map +1 -0
  767. package/dist/test/test-vectors/messageProtection.test.js +220 -0
  768. package/dist/test/test-vectors/messageProtection.test.js.map +1 -0
  769. package/dist/test/test-vectors/messages.test.d.ts +1 -0
  770. package/dist/test/test-vectors/messages.test.d.ts.map +1 -0
  771. package/dist/test/test-vectors/messages.test.js +141 -0
  772. package/dist/test/test-vectors/messages.test.js.map +1 -0
  773. package/dist/test/test-vectors/passiveClientScenarios.test.d.ts +1 -0
  774. package/dist/test/test-vectors/passiveClientScenarios.test.d.ts.map +1 -0
  775. package/dist/test/test-vectors/passiveClientScenarios.test.js +91 -0
  776. package/dist/test/test-vectors/passiveClientScenarios.test.js.map +1 -0
  777. package/dist/test/test-vectors/pskSecret.test.d.ts +1 -0
  778. package/dist/test/test-vectors/pskSecret.test.d.ts.map +1 -0
  779. package/dist/test/test-vectors/pskSecret.test.js +23 -0
  780. package/dist/test/test-vectors/pskSecret.test.js.map +1 -0
  781. package/dist/test/test-vectors/secretTree.test.d.ts +1 -0
  782. package/dist/test/test-vectors/secretTree.test.d.ts.map +1 -0
  783. package/dist/test/test-vectors/secretTree.test.js +53 -0
  784. package/dist/test/test-vectors/secretTree.test.js.map +1 -0
  785. package/dist/test/test-vectors/transcriptHashes.test.d.ts +1 -0
  786. package/dist/test/test-vectors/transcriptHashes.test.d.ts.map +1 -0
  787. package/dist/test/test-vectors/transcriptHashes.test.js +31 -0
  788. package/dist/test/test-vectors/transcriptHashes.test.js.map +1 -0
  789. package/dist/test/test-vectors/treeOperations.test.d.ts +1 -0
  790. package/dist/test/test-vectors/treeOperations.test.d.ts.map +1 -0
  791. package/dist/test/test-vectors/treeOperations.test.js +50 -0
  792. package/dist/test/test-vectors/treeOperations.test.js.map +1 -0
  793. package/dist/test/test-vectors/treeValidation.test.d.ts +1 -0
  794. package/dist/test/test-vectors/treeValidation.test.d.ts.map +1 -0
  795. package/dist/test/test-vectors/treeValidation.test.js +41 -0
  796. package/dist/test/test-vectors/treeValidation.test.js.map +1 -0
  797. package/dist/test/test-vectors/treekem.test.d.ts +1 -0
  798. package/dist/test/test-vectors/treekem.test.d.ts.map +1 -0
  799. package/dist/test/test-vectors/treekem.test.js +105 -0
  800. package/dist/test/test-vectors/treekem.test.js.map +1 -0
  801. package/dist/test/test-vectors/treemath.test.d.ts +1 -0
  802. package/dist/test/test-vectors/treemath.test.d.ts.map +1 -0
  803. package/dist/test/test-vectors/treemath.test.js +60 -0
  804. package/dist/test/test-vectors/treemath.test.js.map +1 -0
  805. package/dist/test/test-vectors/welcome.test.d.ts +1 -0
  806. package/dist/test/test-vectors/welcome.test.d.ts.map +1 -0
  807. package/dist/test/test-vectors/welcome.test.js +45 -0
  808. package/dist/test/test-vectors/welcome.test.js.map +1 -0
  809. package/dist/test/validation/byteArrayValidation.test.d.ts +1 -0
  810. package/dist/test/validation/byteArrayValidation.test.js +76 -0
  811. package/dist/test/validation/byteArrayValidation.test.js.map +1 -0
  812. package/dist/test/validation/clientStateComprehensiveValidation.test.d.ts +1 -0
  813. package/dist/test/validation/clientStateComprehensiveValidation.test.js +280 -0
  814. package/dist/test/validation/clientStateComprehensiveValidation.test.js.map +1 -0
  815. package/dist/test/validation/clientStateExtendedValidation.test.d.ts +1 -0
  816. package/dist/test/validation/clientStateExtendedValidation.test.js +376 -0
  817. package/dist/test/validation/clientStateExtendedValidation.test.js.map +1 -0
  818. package/dist/test/validation/clientStateValidation.test.d.ts +1 -0
  819. package/dist/test/validation/clientStateValidation.test.js +190 -0
  820. package/dist/test/validation/clientStateValidation.test.js.map +1 -0
  821. package/dist/test/validation/errorHandlingValidation.test.d.ts +1 -0
  822. package/dist/test/validation/errorHandlingValidation.test.js +92 -0
  823. package/dist/test/validation/errorHandlingValidation.test.js.map +1 -0
  824. package/dist/test/validation/extensionValidation.test.d.ts +1 -0
  825. package/dist/test/validation/extensionValidation.test.js +120 -0
  826. package/dist/test/validation/extensionValidation.test.js.map +1 -0
  827. package/dist/test/validation/greaseValidation.test.d.ts +1 -0
  828. package/dist/test/validation/greaseValidation.test.js +136 -0
  829. package/dist/test/validation/greaseValidation.test.js.map +1 -0
  830. package/dist/test/validation/index.test.d.ts +5 -0
  831. package/dist/test/validation/index.test.js +19 -0
  832. package/dist/test/validation/index.test.js.map +1 -0
  833. package/dist/test/validation/mlsErrorValidation.test.d.ts +1 -0
  834. package/dist/test/validation/mlsErrorValidation.test.js +92 -0
  835. package/dist/test/validation/mlsErrorValidation.test.js.map +1 -0
  836. package/dist/test/validation/proposalValidation.test.d.ts +1 -0
  837. package/dist/test/validation/proposalValidation.test.d.ts.map +1 -0
  838. package/dist/test/validation/proposalValidation.test.js +233 -0
  839. package/dist/test/validation/proposalValidation.test.js.map +1 -0
  840. package/dist/test/validation/ratchetTreeValidation.test.d.ts +1 -0
  841. package/dist/test/validation/ratchetTreeValidation.test.d.ts.map +1 -0
  842. package/dist/test/validation/ratchetTreeValidation.test.js +53 -0
  843. package/dist/test/validation/ratchetTreeValidation.test.js.map +1 -0
  844. package/dist/test/validation/resumptionValidation.test.d.ts +1 -0
  845. package/dist/test/validation/resumptionValidation.test.d.ts.map +1 -0
  846. package/dist/test/validation/resumptionValidation.test.js +81 -0
  847. package/dist/test/validation/resumptionValidation.test.js.map +1 -0
  848. package/dist/test/validation/utilityValidation.test.d.ts +1 -0
  849. package/dist/test/validation/utilityValidation.test.js +71 -0
  850. package/dist/test/validation/utilityValidation.test.js.map +1 -0
  851. package/dist/test_vectors/crypto-basics.json +303 -0
  852. package/dist/test_vectors/deserialization.json +58 -0
  853. package/dist/test_vectors/key-schedule.json +926 -0
  854. package/dist/test_vectors/message-protection.json +142 -0
  855. package/dist/test_vectors/messages.json +5702 -0
  856. package/dist/test_vectors/passive-client-handling-commit.json +2683 -0
  857. package/dist/test_vectors/passive-client-random.json +2657 -0
  858. package/dist/test_vectors/passive-client-welcome.json +814 -0
  859. package/dist/test_vectors/psk_secret.json +2382 -0
  860. package/dist/test_vectors/secret-tree.json +4846 -0
  861. package/dist/test_vectors/transcript-hashes.json +58 -0
  862. package/dist/test_vectors/tree-math.json +8156 -0
  863. package/dist/test_vectors/tree-operations.json +47 -0
  864. package/dist/test_vectors/tree-validation.json +6204 -0
  865. package/dist/test_vectors/treekem.json +14859 -0
  866. package/dist/test_vectors/welcome.json +51 -0
  867. package/dist/ts-mls.d.ts +781 -0
  868. package/dist/tsdoc-metadata.json +11 -0
  869. package/dist/util/addToMap.d.ts +1 -0
  870. package/dist/util/addToMap.js +9 -0
  871. package/dist/util/addToMap.js.map +1 -0
  872. package/dist/util/array.d.ts +1 -0
  873. package/dist/util/array.js +7 -0
  874. package/dist/util/array.js.map +1 -0
  875. package/dist/util/byteArray.d.ts +3 -0
  876. package/dist/util/byteArray.js +32 -0
  877. package/dist/util/byteArray.js.map +1 -0
  878. package/dist/util/constantTimeCompare.d.ts +1 -0
  879. package/dist/util/constantTimeCompare.js +13 -0
  880. package/dist/util/constantTimeCompare.js.map +1 -0
  881. package/dist/util/enumHelpers.d.ts +4 -0
  882. package/dist/util/enumHelpers.js +34 -0
  883. package/dist/util/enumHelpers.js.map +1 -0
  884. package/dist/util/repeat.d.ts +1 -0
  885. package/dist/util/repeat.js +11 -0
  886. package/dist/util/repeat.js.map +1 -0
  887. package/package.json +108 -0
@@ -0,0 +1,376 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ const clientState_1 = require("../../src/clientState");
4
+ const keyPackage_1 = require("../../src/keyPackage");
5
+ const ciphersuite_1 = require("../../src/crypto/ciphersuite");
6
+ const lifetime_1 = require("../../src/lifetime");
7
+ const mlsError_1 = require("../../src/mlsError");
8
+ const lifetimeConfig_1 = require("../../src/lifetimeConfig");
9
+ const globals_1 = require("@jest/globals");
10
+ for (const cs of Object.keys(ciphersuite_1.ciphersuites)) {
11
+ const cipherSuite = cs;
12
+ (0, globals_1.describe)(`ClientState Extended Validation Tests - ${cipherSuite}`, () => {
13
+ let impl;
14
+ let mockAuthService;
15
+ let mockLifetimeConfig;
16
+ beforeEach(async () => {
17
+ impl = await (0, ciphersuite_1.getCiphersuiteImpl)((0, ciphersuite_1.getCiphersuiteFromName)(cipherSuite));
18
+ mockAuthService = {
19
+ validateCredential: jest.fn().mockResolvedValue(true),
20
+ };
21
+ mockLifetimeConfig = {
22
+ maximumTotalLifetime: 2628000n,
23
+ validateLifetimeOnReceive: true,
24
+ };
25
+ });
26
+ (0, globals_1.describe)("checkCanSendApplicationMessages", () => {
27
+ (0, globals_1.it)("should throw when there are unapplied proposals", async () => {
28
+ const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
29
+ const aliceCapabilities = {
30
+ extensions: [],
31
+ credentials: ["basic"],
32
+ proposals: [],
33
+ versions: ["mls10"],
34
+ ciphersuites: [cipherSuite],
35
+ };
36
+ const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, aliceCapabilities, lifetime_1.defaultLifetime, [], impl);
37
+ const groupId = new TextEncoder().encode("group1");
38
+ const aliceGroup = await (0, clientState_1.createGroup)(groupId, alice.publicPackage, alice.privatePackage, [], impl);
39
+ // Add an unapplied proposal
40
+ const stateWithProposal = {
41
+ ...aliceGroup,
42
+ unappliedProposals: { "some-ref": { proposal: {}, senderLeafIndex: 0 } },
43
+ };
44
+ (0, globals_1.expect)(() => (0, clientState_1.checkCanSendApplicationMessages)(stateWithProposal)).toThrow(mlsError_1.UsageError);
45
+ (0, globals_1.expect)(() => (0, clientState_1.checkCanSendApplicationMessages)(stateWithProposal)).toThrow("Cannot send application message with unapplied proposals");
46
+ });
47
+ (0, globals_1.it)("should throw when group is suspended pending reinit", async () => {
48
+ const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
49
+ const aliceCapabilities = {
50
+ extensions: [],
51
+ credentials: ["basic"],
52
+ proposals: [],
53
+ versions: ["mls10"],
54
+ ciphersuites: [cipherSuite],
55
+ };
56
+ const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, aliceCapabilities, lifetime_1.defaultLifetime, [], impl);
57
+ const groupId = new TextEncoder().encode("group1");
58
+ const aliceGroup = await (0, clientState_1.createGroup)(groupId, alice.publicPackage, alice.privatePackage, [], impl);
59
+ const suspendedState = {
60
+ ...aliceGroup,
61
+ groupActiveState: {
62
+ kind: "suspendedPendingReinit",
63
+ reinit: {
64
+ groupId: new Uint8Array(),
65
+ version: "mls10",
66
+ cipherSuite,
67
+ extensions: [],
68
+ },
69
+ },
70
+ };
71
+ (0, globals_1.expect)(() => (0, clientState_1.checkCanSendApplicationMessages)(suspendedState)).toThrow(mlsError_1.UsageError);
72
+ (0, globals_1.expect)(() => (0, clientState_1.checkCanSendApplicationMessages)(suspendedState)).toThrow("Cannot send messages while Group is suspended pending reinit");
73
+ });
74
+ (0, globals_1.it)("should throw when removed from group", async () => {
75
+ const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
76
+ const aliceCapabilities = {
77
+ extensions: [],
78
+ credentials: ["basic"],
79
+ proposals: [],
80
+ versions: ["mls10"],
81
+ ciphersuites: [cipherSuite],
82
+ };
83
+ const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, aliceCapabilities, lifetime_1.defaultLifetime, [], impl);
84
+ const groupId = new TextEncoder().encode("group1");
85
+ const aliceGroup = await (0, clientState_1.createGroup)(groupId, alice.publicPackage, alice.privatePackage, [], impl);
86
+ const removedState = {
87
+ ...aliceGroup,
88
+ groupActiveState: { kind: "removedFromGroup" },
89
+ };
90
+ (0, globals_1.expect)(() => (0, clientState_1.checkCanSendApplicationMessages)(removedState)).toThrow(mlsError_1.UsageError);
91
+ (0, globals_1.expect)(() => (0, clientState_1.checkCanSendApplicationMessages)(removedState)).toThrow("Cannot send messages after being removed from group");
92
+ });
93
+ });
94
+ (0, globals_1.describe)("checkCanSendHandshakeMessages", () => {
95
+ (0, globals_1.it)("should throw when group is suspended pending reinit", async () => {
96
+ const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
97
+ const aliceCapabilities = {
98
+ extensions: [],
99
+ credentials: ["basic"],
100
+ proposals: [],
101
+ versions: ["mls10"],
102
+ ciphersuites: [cipherSuite],
103
+ };
104
+ const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, aliceCapabilities, lifetime_1.defaultLifetime, [], impl);
105
+ const groupId = new TextEncoder().encode("group1");
106
+ const aliceGroup = await (0, clientState_1.createGroup)(groupId, alice.publicPackage, alice.privatePackage, [], impl);
107
+ const suspendedState = {
108
+ ...aliceGroup,
109
+ groupActiveState: {
110
+ kind: "suspendedPendingReinit",
111
+ reinit: {
112
+ groupId: new Uint8Array(),
113
+ version: "mls10",
114
+ cipherSuite,
115
+ extensions: [],
116
+ },
117
+ },
118
+ };
119
+ (0, globals_1.expect)(() => (0, clientState_1.checkCanSendHandshakeMessages)(suspendedState)).toThrow(mlsError_1.UsageError);
120
+ (0, globals_1.expect)(() => (0, clientState_1.checkCanSendHandshakeMessages)(suspendedState)).toThrow("Cannot send messages while Group is suspended pending reinit");
121
+ });
122
+ (0, globals_1.it)("should throw when removed from group", async () => {
123
+ const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
124
+ const aliceCapabilities = {
125
+ extensions: [],
126
+ credentials: ["basic"],
127
+ proposals: [],
128
+ versions: ["mls10"],
129
+ ciphersuites: [cipherSuite],
130
+ };
131
+ const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, aliceCapabilities, lifetime_1.defaultLifetime, [], impl);
132
+ const groupId = new TextEncoder().encode("group1");
133
+ const aliceGroup = await (0, clientState_1.createGroup)(groupId, alice.publicPackage, alice.privatePackage, [], impl);
134
+ const removedState = {
135
+ ...aliceGroup,
136
+ groupActiveState: { kind: "removedFromGroup" },
137
+ };
138
+ (0, globals_1.expect)(() => (0, clientState_1.checkCanSendHandshakeMessages)(removedState)).toThrow(mlsError_1.UsageError);
139
+ (0, globals_1.expect)(() => (0, clientState_1.checkCanSendHandshakeMessages)(removedState)).toThrow("Cannot send messages after being removed from group");
140
+ });
141
+ });
142
+ (0, globals_1.describe)("addHistoricalReceiverData", () => {
143
+ (0, globals_1.it)("should add current epoch data to historical receiver data", async () => {
144
+ const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
145
+ const aliceCapabilities = {
146
+ extensions: [],
147
+ credentials: ["basic"],
148
+ proposals: [],
149
+ versions: ["mls10"],
150
+ ciphersuites: [cipherSuite],
151
+ };
152
+ const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, aliceCapabilities, lifetime_1.defaultLifetime, [], impl);
153
+ const groupId = new TextEncoder().encode("group1");
154
+ const aliceGroup = await (0, clientState_1.createGroup)(groupId, alice.publicPackage, alice.privatePackage, [], impl);
155
+ const result = (0, clientState_1.addHistoricalReceiverData)(aliceGroup);
156
+ (0, globals_1.expect)(result.has(aliceGroup.groupContext.epoch)).toBe(true);
157
+ const epochData = result.get(aliceGroup.groupContext.epoch);
158
+ (0, globals_1.expect)(epochData).toBeDefined();
159
+ (0, globals_1.expect)(epochData?.groupContext).toEqual(aliceGroup.groupContext);
160
+ (0, globals_1.expect)(epochData?.secretTree).toEqual(aliceGroup.secretTree);
161
+ (0, globals_1.expect)(epochData?.ratchetTree).toEqual(aliceGroup.ratchetTree);
162
+ });
163
+ (0, globals_1.it)("should remove old data when exceeding retention limit", async () => {
164
+ const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
165
+ const aliceCapabilities = {
166
+ extensions: [],
167
+ credentials: ["basic"],
168
+ proposals: [],
169
+ versions: ["mls10"],
170
+ ciphersuites: [cipherSuite],
171
+ };
172
+ const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, aliceCapabilities, lifetime_1.defaultLifetime, [], impl);
173
+ const groupId = new TextEncoder().encode("group1");
174
+ const aliceGroup = await (0, clientState_1.createGroup)(groupId, alice.publicPackage, alice.privatePackage, [], impl);
175
+ // Create a state with existing historical data
176
+ const stateWithHistory = {
177
+ ...aliceGroup,
178
+ historicalReceiverData: new Map([
179
+ [0n, {}],
180
+ [1n, {}],
181
+ [2n, {}],
182
+ [3n, {}],
183
+ [4n, {}],
184
+ ]),
185
+ };
186
+ const result = (0, clientState_1.addHistoricalReceiverData)(stateWithHistory);
187
+ // Should only retain the most recent epochs based on retention config
188
+ (0, globals_1.expect)(result.size).toBeLessThanOrEqual(stateWithHistory.clientConfig.keyRetentionConfig.retainKeysForEpochs);
189
+ });
190
+ });
191
+ (0, globals_1.describe)("validateRatchetTree extended", () => {
192
+ const groupContext = {
193
+ version: "mls10",
194
+ cipherSuite: cipherSuite,
195
+ epoch: 0n,
196
+ treeHash: new Uint8Array(),
197
+ groupId: new Uint8Array(),
198
+ extensions: [],
199
+ confirmedTranscriptHash: new Uint8Array(),
200
+ };
201
+ (0, globals_1.it)("should reject tree with duplicate HPKE keys", async () => {
202
+ const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
203
+ const aliceCapabilities = {
204
+ extensions: [],
205
+ credentials: ["basic"],
206
+ proposals: [],
207
+ versions: ["mls10"],
208
+ ciphersuites: [cipherSuite],
209
+ };
210
+ const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, aliceCapabilities, lifetime_1.defaultLifetime, [], impl);
211
+ const validLeafNode = alice.publicPackage.leafNode;
212
+ // Create tree with duplicate HPKE keys
213
+ const invalidTree = [
214
+ { nodeType: "leaf", leaf: validLeafNode },
215
+ { nodeType: "leaf", leaf: validLeafNode }, // Same HPKE key
216
+ ];
217
+ const error = await (0, clientState_1.validateRatchetTree)(invalidTree, groupContext, mockLifetimeConfig, mockAuthService, new Uint8Array(), impl);
218
+ (0, globals_1.expect)(error).toBeInstanceOf(mlsError_1.ValidationError);
219
+ (0, globals_1.expect)(error?.message).toBe("Received Ratchet Tree is not structurally sound");
220
+ });
221
+ (0, globals_1.it)("should return ValidationError for structurally unsound ratchet tree", async () => {
222
+ // Parent node at a leaf index (index 0)
223
+ const tree = [
224
+ {
225
+ nodeType: "parent",
226
+ parent: { hpkePublicKey: new Uint8Array([1]), parentHash: new Uint8Array(), unmergedLeaves: [] },
227
+ },
228
+ ];
229
+ const err = await (0, clientState_1.validateRatchetTree)(tree, groupContext, lifetimeConfig_1.defaultLifetimeConfig, mockAuthService, new Uint8Array([1, 2, 3]), impl);
230
+ (0, globals_1.expect)(err).toBeInstanceOf(mlsError_1.ValidationError);
231
+ (0, globals_1.expect)(err.message).toMatch(/structurally sound/);
232
+ });
233
+ (0, globals_1.it)("should return ValidationError for invalid unmerged leaves", async () => {
234
+ // Build a valid tree: [leaf, parent, leaf]
235
+ const leafNode1 = {
236
+ credential: { credentialType: "basic", identity: new Uint8Array([1]) },
237
+ signaturePublicKey: new Uint8Array([1]),
238
+ hpkePublicKey: new Uint8Array([1]),
239
+ capabilities: {
240
+ extensions: [],
241
+ credentials: ["basic"],
242
+ proposals: [],
243
+ versions: ["mls10"],
244
+ ciphersuites: [cipherSuite],
245
+ },
246
+ extensions: [],
247
+ leafNodeSource: "commit",
248
+ lifetime: { notBefore: 0n, notAfter: 9999999999n },
249
+ parentHash: new Uint8Array(),
250
+ signature: new Uint8Array(),
251
+ };
252
+ const leafNode2 = {
253
+ credential: { credentialType: "basic", identity: new Uint8Array([2]) },
254
+ signaturePublicKey: new Uint8Array([2]),
255
+ hpkePublicKey: new Uint8Array([2]),
256
+ capabilities: {
257
+ extensions: [],
258
+ credentials: ["basic"],
259
+ proposals: [],
260
+ versions: ["mls10"],
261
+ ciphersuites: [cipherSuite],
262
+ },
263
+ extensions: [],
264
+ leafNodeSource: "commit",
265
+ lifetime: { notBefore: 0n, notAfter: 9999999999n },
266
+ parentHash: new Uint8Array(),
267
+ signature: new Uint8Array(),
268
+ };
269
+ // Tree: [leaf, parent, leaf]
270
+ // Parent at index 1, children at 0 and 2
271
+ // unmergedLeaves references a non-descendant (index 0, which is not a descendant of 1)
272
+ const tree = [
273
+ { nodeType: "leaf", leaf: leafNode1 },
274
+ {
275
+ nodeType: "parent",
276
+ parent: { hpkePublicKey: new Uint8Array([3]), parentHash: new Uint8Array(), unmergedLeaves: [0] },
277
+ },
278
+ { nodeType: "leaf", leaf: leafNode2 },
279
+ ];
280
+ // Compute the correct tree hash for this tree
281
+ const { treeHashRoot } = require("../../src/treeHash");
282
+ const realTreeHash = await treeHashRoot(tree, impl.hash);
283
+ const err = await (0, clientState_1.validateRatchetTree)(tree, groupContext, lifetimeConfig_1.defaultLifetimeConfig, mockAuthService, realTreeHash, impl);
284
+ (0, globals_1.expect)(err).toBeInstanceOf(mlsError_1.ValidationError);
285
+ (0, globals_1.expect)(err.message).toMatch(/unmerged leaf/i);
286
+ });
287
+ });
288
+ });
289
+ }
290
+ const mockAuthService = {
291
+ validateCredential: async () => true,
292
+ };
293
+ (0, globals_1.describe)("validateRatchetTree edge cases", () => {
294
+ const cipherSuite = "MLS_256_MLKEM1024_AES256GCM_SHA512_MLDSA87";
295
+ let impl;
296
+ let groupContext;
297
+ beforeAll(async () => {
298
+ impl = await (0, ciphersuite_1.getCiphersuiteImpl)((0, ciphersuite_1.getCiphersuiteFromName)(cipherSuite));
299
+ groupContext = {
300
+ version: "mls10",
301
+ cipherSuite,
302
+ epoch: 0n,
303
+ treeHash: new Uint8Array([1, 2, 3]),
304
+ groupId: new Uint8Array([1]),
305
+ extensions: [],
306
+ confirmedTranscriptHash: new Uint8Array(),
307
+ };
308
+ });
309
+ (0, globals_1.it)("should return ValidationError for structurally unsound ratchet tree", async () => {
310
+ // Parent node at a leaf index (index 0)
311
+ const tree = [
312
+ {
313
+ nodeType: "parent",
314
+ parent: { hpkePublicKey: new Uint8Array([1]), parentHash: new Uint8Array(), unmergedLeaves: [] },
315
+ },
316
+ ];
317
+ const err = await (0, clientState_1.validateRatchetTree)(tree, groupContext, lifetimeConfig_1.defaultLifetimeConfig, mockAuthService, new Uint8Array([1, 2, 3]), impl);
318
+ (0, globals_1.expect)(err).toBeInstanceOf(mlsError_1.ValidationError);
319
+ (0, globals_1.expect)(err.message).toMatch(/structurally sound/);
320
+ });
321
+ (0, globals_1.it)("should return ValidationError for invalid unmerged leaves", async () => {
322
+ // Build a valid tree: [leaf, parent, leaf]
323
+ const leafNode1 = {
324
+ credential: { credentialType: "basic", identity: new Uint8Array([1]) },
325
+ signaturePublicKey: new Uint8Array([1]),
326
+ hpkePublicKey: new Uint8Array([1]),
327
+ capabilities: {
328
+ extensions: [],
329
+ credentials: ["basic"],
330
+ proposals: [],
331
+ versions: ["mls10"],
332
+ ciphersuites: [cipherSuite],
333
+ },
334
+ extensions: [],
335
+ leafNodeSource: "commit",
336
+ lifetime: { notBefore: 0n, notAfter: 9999999999n },
337
+ parentHash: new Uint8Array(),
338
+ signature: new Uint8Array(),
339
+ };
340
+ const leafNode2 = {
341
+ credential: { credentialType: "basic", identity: new Uint8Array([2]) },
342
+ signaturePublicKey: new Uint8Array([2]),
343
+ hpkePublicKey: new Uint8Array([2]),
344
+ capabilities: {
345
+ extensions: [],
346
+ credentials: ["basic"],
347
+ proposals: [],
348
+ versions: ["mls10"],
349
+ ciphersuites: [cipherSuite],
350
+ },
351
+ extensions: [],
352
+ leafNodeSource: "commit",
353
+ lifetime: { notBefore: 0n, notAfter: 9999999999n },
354
+ parentHash: new Uint8Array(),
355
+ signature: new Uint8Array(),
356
+ };
357
+ // Tree: [leaf, parent, leaf]
358
+ // Parent at index 1, children at 0 and 2
359
+ // unmergedLeaves references a non-descendant (index 0, which is not a descendant of 1)
360
+ const tree = [
361
+ { nodeType: "leaf", leaf: leafNode1 },
362
+ {
363
+ nodeType: "parent",
364
+ parent: { hpkePublicKey: new Uint8Array([3]), parentHash: new Uint8Array(), unmergedLeaves: [0] },
365
+ },
366
+ { nodeType: "leaf", leaf: leafNode2 },
367
+ ];
368
+ // Compute the correct tree hash for this tree
369
+ const { treeHashRoot } = require("../../src/treeHash");
370
+ const realTreeHash = await treeHashRoot(tree, impl.hash);
371
+ const err = await (0, clientState_1.validateRatchetTree)(tree, groupContext, lifetimeConfig_1.defaultLifetimeConfig, mockAuthService, realTreeHash, impl);
372
+ (0, globals_1.expect)(err).toBeInstanceOf(mlsError_1.ValidationError);
373
+ (0, globals_1.expect)(err.message).toMatch(/unmerged leaf/i);
374
+ });
375
+ });
376
+ //# sourceMappingURL=clientStateExtendedValidation.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"clientStateExtendedValidation.test.js","sourceRoot":"","sources":["../../../test/validation/clientStateExtendedValidation.test.ts"],"names":[],"mappings":";;AAAA,uDAM8B;AAC9B,qDAAyD;AAGzD,8DAAwH;AACxH,iDAAoD;AACpD,iDAAgE;AAGhE,6DAAgF;AAEhF,2CAAoD;AAEpD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,0BAAY,CAAC,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG,EAAqB,CAAA;IAEzC,IAAA,kBAAQ,EAAC,2CAA2C,WAAW,EAAE,EAAE,GAAG,EAAE;QACtE,IAAI,IAAS,CAAA;QACb,IAAI,eAAsC,CAAA;QAC1C,IAAI,kBAAkC,CAAA;QAEtC,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,IAAI,GAAG,MAAM,IAAA,gCAAkB,EAAC,IAAA,oCAAsB,EAAC,WAAW,CAAC,CAAC,CAAA;YAEpE,eAAe,GAAG;gBAChB,kBAAkB,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;aACtD,CAAA;YAED,kBAAkB,GAAG;gBACnB,oBAAoB,EAAE,QAAQ;gBAC9B,yBAAyB,EAAE,IAAI;aAChC,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,IAAA,kBAAQ,EAAC,iCAAiC,EAAE,GAAG,EAAE;YAC/C,IAAA,YAAE,EAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;gBAC/D,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5G,MAAM,iBAAiB,GAAiB;oBACtC,UAAU,EAAE,EAAE;oBACd,WAAW,EAAE,CAAC,OAAO,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,YAAY,EAAE,CAAC,WAAW,CAAC;iBAC5B,CAAA;gBACD,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,iBAAiB,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAErG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAClD,MAAM,UAAU,GAAG,MAAM,IAAA,yBAAW,EAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAElG,4BAA4B;gBAC5B,MAAM,iBAAiB,GAAG;oBACxB,GAAG,UAAU;oBACb,kBAAkB,EAAE,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAS,EAAE,eAAe,EAAE,CAAC,EAAE,EAAE;iBAChF,CAAA;gBAED,IAAA,gBAAM,EAAC,GAAG,EAAE,CAAC,IAAA,6CAA+B,EAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAU,CAAC,CAAA;gBACpF,IAAA,gBAAM,EAAC,GAAG,EAAE,CAAC,IAAA,6CAA+B,EAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CACtE,0DAA0D,CAC3D,CAAA;YACH,CAAC,CAAC,CAAA;YAEF,IAAA,YAAE,EAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;gBACnE,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5G,MAAM,iBAAiB,GAAiB;oBACtC,UAAU,EAAE,EAAE;oBACd,WAAW,EAAE,CAAC,OAAO,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,YAAY,EAAE,CAAC,WAAW,CAAC;iBAC5B,CAAA;gBACD,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,iBAAiB,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAErG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAClD,MAAM,UAAU,GAAG,MAAM,IAAA,yBAAW,EAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAElG,MAAM,cAAc,GAAG;oBACrB,GAAG,UAAU;oBACb,gBAAgB,EAAE;wBAChB,IAAI,EAAE,wBAAiC;wBACvC,MAAM,EAAE;4BACN,OAAO,EAAE,IAAI,UAAU,EAAE;4BACzB,OAAO,EAAE,OAAgB;4BACzB,WAAW;4BACX,UAAU,EAAE,EAAE;yBACf;qBACF;iBACF,CAAA;gBAED,IAAA,gBAAM,EAAC,GAAG,EAAE,CAAC,IAAA,6CAA+B,EAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAU,CAAC,CAAA;gBACjF,IAAA,gBAAM,EAAC,GAAG,EAAE,CAAC,IAAA,6CAA+B,EAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CACnE,8DAA8D,CAC/D,CAAA;YACH,CAAC,CAAC,CAAA;YAEF,IAAA,YAAE,EAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;gBACpD,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5G,MAAM,iBAAiB,GAAiB;oBACtC,UAAU,EAAE,EAAE;oBACd,WAAW,EAAE,CAAC,OAAO,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,YAAY,EAAE,CAAC,WAAW,CAAC;iBAC5B,CAAA;gBACD,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,iBAAiB,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAErG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAClD,MAAM,UAAU,GAAG,MAAM,IAAA,yBAAW,EAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAElG,MAAM,YAAY,GAAG;oBACnB,GAAG,UAAU;oBACb,gBAAgB,EAAE,EAAE,IAAI,EAAE,kBAA2B,EAAE;iBACxD,CAAA;gBAED,IAAA,gBAAM,EAAC,GAAG,EAAE,CAAC,IAAA,6CAA+B,EAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAU,CAAC,CAAA;gBAC/E,IAAA,gBAAM,EAAC,GAAG,EAAE,CAAC,IAAA,6CAA+B,EAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CACjE,qDAAqD,CACtD,CAAA;YACH,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,IAAA,kBAAQ,EAAC,+BAA+B,EAAE,GAAG,EAAE;YAC7C,IAAA,YAAE,EAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;gBACnE,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5G,MAAM,iBAAiB,GAAiB;oBACtC,UAAU,EAAE,EAAE;oBACd,WAAW,EAAE,CAAC,OAAO,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,YAAY,EAAE,CAAC,WAAW,CAAC;iBAC5B,CAAA;gBACD,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,iBAAiB,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAErG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAClD,MAAM,UAAU,GAAG,MAAM,IAAA,yBAAW,EAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAElG,MAAM,cAAc,GAAG;oBACrB,GAAG,UAAU;oBACb,gBAAgB,EAAE;wBAChB,IAAI,EAAE,wBAAiC;wBACvC,MAAM,EAAE;4BACN,OAAO,EAAE,IAAI,UAAU,EAAE;4BACzB,OAAO,EAAE,OAAgB;4BACzB,WAAW;4BACX,UAAU,EAAE,EAAE;yBACf;qBACF;iBACF,CAAA;gBAED,IAAA,gBAAM,EAAC,GAAG,EAAE,CAAC,IAAA,2CAA6B,EAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAU,CAAC,CAAA;gBAC/E,IAAA,gBAAM,EAAC,GAAG,EAAE,CAAC,IAAA,2CAA6B,EAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CACjE,8DAA8D,CAC/D,CAAA;YACH,CAAC,CAAC,CAAA;YAEF,IAAA,YAAE,EAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;gBACpD,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5G,MAAM,iBAAiB,GAAiB;oBACtC,UAAU,EAAE,EAAE;oBACd,WAAW,EAAE,CAAC,OAAO,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,YAAY,EAAE,CAAC,WAAW,CAAC;iBAC5B,CAAA;gBACD,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,iBAAiB,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAErG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAClD,MAAM,UAAU,GAAG,MAAM,IAAA,yBAAW,EAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAElG,MAAM,YAAY,GAAG;oBACnB,GAAG,UAAU;oBACb,gBAAgB,EAAE,EAAE,IAAI,EAAE,kBAA2B,EAAE;iBACxD,CAAA;gBAED,IAAA,gBAAM,EAAC,GAAG,EAAE,CAAC,IAAA,2CAA6B,EAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAU,CAAC,CAAA;gBAC7E,IAAA,gBAAM,EAAC,GAAG,EAAE,CAAC,IAAA,2CAA6B,EAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAC/D,qDAAqD,CACtD,CAAA;YACH,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,IAAA,kBAAQ,EAAC,2BAA2B,EAAE,GAAG,EAAE;YACzC,IAAA,YAAE,EAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;gBACzE,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5G,MAAM,iBAAiB,GAAiB;oBACtC,UAAU,EAAE,EAAE;oBACd,WAAW,EAAE,CAAC,OAAO,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,YAAY,EAAE,CAAC,WAAW,CAAC;iBAC5B,CAAA;gBACD,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,iBAAiB,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAErG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAClD,MAAM,UAAU,GAAG,MAAM,IAAA,yBAAW,EAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAElG,MAAM,MAAM,GAAG,IAAA,uCAAyB,EAAC,UAAU,CAAC,CAAA;gBAEpD,IAAA,gBAAM,EAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;gBAC3D,IAAA,gBAAM,EAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAA;gBAC/B,IAAA,gBAAM,EAAC,SAAS,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAA;gBAChE,IAAA,gBAAM,EAAC,SAAS,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;gBAC5D,IAAA,gBAAM,EAAC,SAAS,EAAE,WAAW,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;YAChE,CAAC,CAAC,CAAA;YAEF,IAAA,YAAE,EAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;gBACrE,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5G,MAAM,iBAAiB,GAAiB;oBACtC,UAAU,EAAE,EAAE;oBACd,WAAW,EAAE,CAAC,OAAO,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,YAAY,EAAE,CAAC,WAAW,CAAC;iBAC5B,CAAA;gBACD,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,iBAAiB,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAErG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAClD,MAAM,UAAU,GAAG,MAAM,IAAA,yBAAW,EAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAElG,+CAA+C;gBAC/C,MAAM,gBAAgB,GAAG;oBACvB,GAAG,UAAU;oBACb,sBAAsB,EAAE,IAAI,GAAG,CAAC;wBAC9B,CAAC,EAAE,EAAE,EAAS,CAAC;wBACf,CAAC,EAAE,EAAE,EAAS,CAAC;wBACf,CAAC,EAAE,EAAE,EAAS,CAAC;wBACf,CAAC,EAAE,EAAE,EAAS,CAAC;wBACf,CAAC,EAAE,EAAE,EAAS,CAAC;qBAChB,CAAC;iBACH,CAAA;gBAED,MAAM,MAAM,GAAG,IAAA,uCAAyB,EAAC,gBAAgB,CAAC,CAAA;gBAE1D,sEAAsE;gBACtE,IAAA,gBAAM,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,YAAY,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;YAC/G,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,IAAA,kBAAQ,EAAC,8BAA8B,EAAE,GAAG,EAAE;YAC5C,MAAM,YAAY,GAAiB;gBACjC,OAAO,EAAE,OAAO;gBAChB,WAAW,EAAE,WAAW;gBACxB,KAAK,EAAE,EAAE;gBACT,QAAQ,EAAE,IAAI,UAAU,EAAE;gBAC1B,OAAO,EAAE,IAAI,UAAU,EAAE;gBACzB,UAAU,EAAE,EAAE;gBACd,uBAAuB,EAAE,IAAI,UAAU,EAAE;aAC1C,CAAA;YACD,IAAA,YAAE,EAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;gBAC3D,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5G,MAAM,iBAAiB,GAAiB;oBACtC,UAAU,EAAE,EAAE;oBACd,WAAW,EAAE,CAAC,OAAO,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,YAAY,EAAE,CAAC,WAAW,CAAC;iBAC5B,CAAA;gBACD,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,iBAAiB,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAErG,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAA;gBAClD,uCAAuC;gBACvC,MAAM,WAAW,GAAgB;oBAC/B,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE;oBACzC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,gBAAgB;iBAC5D,CAAA;gBAED,MAAM,KAAK,GAAG,MAAM,IAAA,iCAAmB,EACrC,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,IAAI,UAAU,EAAE,EAChB,IAAI,CACL,CAAA;gBAED,IAAA,gBAAM,EAAC,KAAK,CAAC,CAAC,cAAc,CAAC,0BAAe,CAAC,CAAA;gBAC7C,IAAA,gBAAM,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAA;YAChF,CAAC,CAAC,CAAA;YAEF,IAAA,YAAE,EAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;gBACnF,wCAAwC;gBACxC,MAAM,IAAI,GAAG;oBACX;wBACE,QAAQ,EAAE,QAAiB;wBAC3B,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,UAAU,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;qBACjG;iBACF,CAAA;gBACD,MAAM,GAAG,GAAG,MAAM,IAAA,iCAAmB,EACnC,IAAI,EACJ,YAAY,EACZ,sCAAqB,EACrB,eAAe,EACf,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EACzB,IAAI,CACL,CAAA;gBACD,IAAA,gBAAM,EAAC,GAAG,CAAC,CAAC,cAAc,CAAC,0BAAe,CAAC,CAAA;gBAC3C,IAAA,gBAAM,EAAE,GAAuB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;YACxE,CAAC,CAAC,CAAA;YAEF,IAAA,YAAE,EAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;gBACzE,2CAA2C;gBAC3C,MAAM,SAAS,GAAG;oBAChB,UAAU,EAAE,EAAE,cAAc,EAAE,OAAgB,EAAE,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;oBAC/E,kBAAkB,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;oBACvC,aAAa,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;oBAClC,YAAY,EAAE;wBACZ,UAAU,EAAE,EAAE;wBACd,WAAW,EAAE,CAAC,OAAgB,CAAC;wBAC/B,SAAS,EAAE,EAAE;wBACb,QAAQ,EAAE,CAAC,OAAgB,CAAC;wBAC5B,YAAY,EAAE,CAAC,WAAW,CAAC;qBAC5B;oBACD,UAAU,EAAE,EAAE;oBACd,cAAc,EAAE,QAAiB;oBACjC,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE;oBAClD,UAAU,EAAE,IAAI,UAAU,EAAE;oBAC5B,SAAS,EAAE,IAAI,UAAU,EAAE;iBAC5B,CAAA;gBACD,MAAM,SAAS,GAAG;oBAChB,UAAU,EAAE,EAAE,cAAc,EAAE,OAAgB,EAAE,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;oBAC/E,kBAAkB,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;oBACvC,aAAa,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;oBAClC,YAAY,EAAE;wBACZ,UAAU,EAAE,EAAE;wBACd,WAAW,EAAE,CAAC,OAAgB,CAAC;wBAC/B,SAAS,EAAE,EAAE;wBACb,QAAQ,EAAE,CAAC,OAAgB,CAAC;wBAC5B,YAAY,EAAE,CAAC,WAAW,CAAC;qBAC5B;oBACD,UAAU,EAAE,EAAE;oBACd,cAAc,EAAE,QAAiB;oBACjC,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE;oBAClD,UAAU,EAAE,IAAI,UAAU,EAAE;oBAC5B,SAAS,EAAE,IAAI,UAAU,EAAE;iBAC5B,CAAA;gBACD,6BAA6B;gBAC7B,yCAAyC;gBACzC,uFAAuF;gBACvF,MAAM,IAAI,GAAG;oBACX,EAAE,QAAQ,EAAE,MAAe,EAAE,IAAI,EAAE,SAAS,EAAE;oBAC9C;wBACE,QAAQ,EAAE,QAAiB;wBAC3B,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,UAAU,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE;qBAClG;oBACD,EAAE,QAAQ,EAAE,MAAe,EAAE,IAAI,EAAE,SAAS,EAAE;iBAC/C,CAAA;gBACD,8CAA8C;gBAC9C,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;gBACtD,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;gBACxD,MAAM,GAAG,GAAG,MAAM,IAAA,iCAAmB,EACnC,IAAI,EACJ,YAAY,EACZ,sCAAqB,EACrB,eAAe,EACf,YAAY,EACZ,IAAI,CACL,CAAA;gBACD,IAAA,gBAAM,EAAC,GAAG,CAAC,CAAC,cAAc,CAAC,0BAAe,CAAC,CAAA;gBAC3C,IAAA,gBAAM,EAAE,GAAuB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;YACpE,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,eAAe,GAA0B;IAC7C,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;CACrC,CAAA;AAED,IAAA,kBAAQ,EAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,MAAM,WAAW,GAAoB,4CAA4C,CAAA;IACjF,IAAI,IAAS,CAAA;IACb,IAAI,YAA0B,CAAA;IAE9B,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,IAAI,GAAG,MAAM,IAAA,gCAAkB,EAAC,IAAA,oCAAsB,EAAC,WAAW,CAAC,CAAC,CAAA;QACpE,YAAY,GAAG;YACb,OAAO,EAAE,OAAO;YAChB,WAAW;YACX,KAAK,EAAE,EAAE;YACT,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACnC,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5B,UAAU,EAAE,EAAE;YACd,uBAAuB,EAAE,IAAI,UAAU,EAAE;SAC1C,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAA,YAAE,EAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,wCAAwC;QACxC,MAAM,IAAI,GAAG;YACX;gBACE,QAAQ,EAAE,QAAiB;gBAC3B,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,UAAU,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;aACjG;SACF,CAAA;QACD,MAAM,GAAG,GAAG,MAAM,IAAA,iCAAmB,EACnC,IAAI,EACJ,YAAY,EACZ,sCAAqB,EACrB,eAAe,EACf,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EACzB,IAAI,CACL,CAAA;QACD,IAAA,gBAAM,EAAC,GAAG,CAAC,CAAC,cAAc,CAAC,0BAAe,CAAC,CAAA;QAC3C,IAAA,gBAAM,EAAE,GAAuB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;IAEF,IAAA,YAAE,EAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,2CAA2C;QAC3C,MAAM,SAAS,GAAG;YAChB,UAAU,EAAE,EAAE,cAAc,EAAE,OAAgB,EAAE,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/E,kBAAkB,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,aAAa,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,YAAY,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,WAAW,EAAE,CAAC,OAAgB,CAAC;gBAC/B,SAAS,EAAE,EAAE;gBACb,QAAQ,EAAE,CAAC,OAAgB,CAAC;gBAC5B,YAAY,EAAE,CAAC,WAAW,CAAC;aAC5B;YACD,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,QAAiB;YACjC,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE;YAClD,UAAU,EAAE,IAAI,UAAU,EAAE;YAC5B,SAAS,EAAE,IAAI,UAAU,EAAE;SAC5B,CAAA;QACD,MAAM,SAAS,GAAG;YAChB,UAAU,EAAE,EAAE,cAAc,EAAE,OAAgB,EAAE,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/E,kBAAkB,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,aAAa,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,YAAY,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,WAAW,EAAE,CAAC,OAAgB,CAAC;gBAC/B,SAAS,EAAE,EAAE;gBACb,QAAQ,EAAE,CAAC,OAAgB,CAAC;gBAC5B,YAAY,EAAE,CAAC,WAAW,CAAC;aAC5B;YACD,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,QAAiB;YACjC,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE;YAClD,UAAU,EAAE,IAAI,UAAU,EAAE;YAC5B,SAAS,EAAE,IAAI,UAAU,EAAE;SAC5B,CAAA;QACD,6BAA6B;QAC7B,yCAAyC;QACzC,uFAAuF;QACvF,MAAM,IAAI,GAAG;YACX,EAAE,QAAQ,EAAE,MAAe,EAAE,IAAI,EAAE,SAAS,EAAE;YAC9C;gBACE,QAAQ,EAAE,QAAiB;gBAC3B,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,UAAU,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE;aAClG;YACD,EAAE,QAAQ,EAAE,MAAe,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/C,CAAA;QACD,8CAA8C;QAC9C,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;QACtD,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QACxD,MAAM,GAAG,GAAG,MAAM,IAAA,iCAAmB,EACnC,IAAI,EACJ,YAAY,EACZ,sCAAqB,EACrB,eAAe,EACf,YAAY,EACZ,IAAI,CACL,CAAA;QACD,IAAA,gBAAM,EAAC,GAAG,CAAC,CAAC,cAAc,CAAC,0BAAe,CAAC,CAAA;QAC3C,IAAA,gBAAM,EAAE,GAAuB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
@@ -0,0 +1,190 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ const clientState_1 = require("../../src/clientState");
4
+ const createCommit_1 = require("../../src/createCommit");
5
+ const keyPackage_1 = require("../../src/keyPackage");
6
+ const ciphersuite_1 = require("../../src/crypto/ciphersuite");
7
+ const lifetime_1 = require("../../src/lifetime");
8
+ const mlsError_1 = require("../../src/mlsError");
9
+ const lifetimeConfig_1 = require("../../src/lifetimeConfig");
10
+ const authenticationService_1 = require("../../src/authenticationService");
11
+ const pskIndex_1 = require("../../src/pskIndex");
12
+ const clientConfig_1 = require("../../src/clientConfig");
13
+ for (const cs of Object.keys(ciphersuite_1.ciphersuites)) {
14
+ const cipherSuite = cs;
15
+ describe(`ClientState Validation Tests - ${cipherSuite}`, async () => {
16
+ const impl = await (0, ciphersuite_1.getCiphersuiteImpl)((0, ciphersuite_1.getCiphersuiteFromName)(cipherSuite));
17
+ describe("Proposal Validation through createCommit", () => {
18
+ it("should reject commit with update proposal by committer", async () => {
19
+ const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
20
+ const aliceCapabilities = {
21
+ extensions: [],
22
+ credentials: ["basic"],
23
+ proposals: [],
24
+ versions: ["mls10"],
25
+ ciphersuites: [cipherSuite],
26
+ };
27
+ const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, aliceCapabilities, lifetime_1.defaultLifetime, [], impl);
28
+ const groupId = new TextEncoder().encode("group1");
29
+ const aliceGroup = await (0, clientState_1.createGroup)(groupId, alice.publicPackage, alice.privatePackage, [], impl);
30
+ // Create a proper update leaf node
31
+ const updateLeafNode = {
32
+ leafNodeSource: "update",
33
+ signaturePublicKey: alice.publicPackage.leafNode.signaturePublicKey,
34
+ hpkePublicKey: alice.publicPackage.leafNode.hpkePublicKey,
35
+ credential: alice.publicPackage.leafNode.credential,
36
+ capabilities: alice.publicPackage.leafNode.capabilities,
37
+ extensions: alice.publicPackage.leafNode.extensions,
38
+ signature: new Uint8Array(),
39
+ };
40
+ const updateProposal = {
41
+ proposalType: "update",
42
+ update: {
43
+ leafNode: updateLeafNode,
44
+ },
45
+ };
46
+ // This should fail because the committer (alice) is trying to update themselves
47
+ await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [updateProposal], impl)).rejects.toThrow(mlsError_1.ValidationError);
48
+ });
49
+ it("should reject commit with remove proposal removing committer", async () => {
50
+ const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
51
+ const aliceCapabilities = {
52
+ extensions: [],
53
+ credentials: ["basic"],
54
+ proposals: [],
55
+ versions: ["mls10"],
56
+ ciphersuites: [cipherSuite],
57
+ };
58
+ const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, aliceCapabilities, lifetime_1.defaultLifetime, [], impl);
59
+ const groupId = new TextEncoder().encode("group1");
60
+ const aliceGroup = await (0, clientState_1.createGroup)(groupId, alice.publicPackage, alice.privatePackage, [], impl);
61
+ const removeProposal = {
62
+ proposalType: "remove",
63
+ remove: {
64
+ removed: 0, // removing committer
65
+ },
66
+ };
67
+ // This should fail because the committer is trying to remove themselves
68
+ await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [removeProposal], impl)).rejects.toThrow(mlsError_1.ValidationError);
69
+ });
70
+ it("should reject commit with multiple add proposals containing same keypackage", async () => {
71
+ const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
72
+ const aliceCapabilities = {
73
+ extensions: [],
74
+ credentials: ["basic"],
75
+ proposals: [],
76
+ versions: ["mls10"],
77
+ ciphersuites: [cipherSuite],
78
+ };
79
+ const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, aliceCapabilities, lifetime_1.defaultLifetime, [], impl);
80
+ const groupId = new TextEncoder().encode("group1");
81
+ const bobCredential = { credentialType: "basic", identity: new TextEncoder().encode("bob") };
82
+ const bob = await (0, keyPackage_1.generateKeyPackage)(bobCredential, aliceCapabilities, lifetime_1.defaultLifetime, [], impl);
83
+ const addProposal = {
84
+ proposalType: "add",
85
+ add: {
86
+ keyPackage: bob.publicPackage,
87
+ },
88
+ };
89
+ // Create a group with custom config that treats different keypackages as the same
90
+ const customConfig = {
91
+ ...clientConfig_1.defaultClientConfig,
92
+ keyPackageEqualityConfig: {
93
+ compareKeyPackages: jest.fn().mockReturnValue(true), // Treat all keypackages as equal
94
+ compareKeyPackageToLeafNode: jest.fn().mockReturnValue(false),
95
+ },
96
+ };
97
+ const aliceGroupWithCustomConfig = await (0, clientState_1.createGroup)(groupId, alice.publicPackage, alice.privatePackage, [], impl, customConfig);
98
+ // This should fail because we're adding the "same" keypackage twice
99
+ await expect((0, createCommit_1.createCommit)(aliceGroupWithCustomConfig, pskIndex_1.emptyPskIndex, false, [addProposal, addProposal], impl)).rejects.toThrow(mlsError_1.ValidationError);
100
+ });
101
+ it("should reject commit with multiple PSK proposals with same PSK ID", async () => {
102
+ const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
103
+ const aliceCapabilities = {
104
+ extensions: [],
105
+ credentials: ["basic"],
106
+ proposals: [],
107
+ versions: ["mls10"],
108
+ ciphersuites: [cipherSuite],
109
+ };
110
+ const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, aliceCapabilities, lifetime_1.defaultLifetime, [], impl);
111
+ const groupId = new TextEncoder().encode("group1");
112
+ const aliceGroup = await (0, clientState_1.createGroup)(groupId, alice.publicPackage, alice.privatePackage, [], impl);
113
+ const pskId = new Uint8Array([1, 2, 3, 4]);
114
+ const pskProposal = {
115
+ proposalType: "psk",
116
+ psk: {
117
+ preSharedKeyId: {
118
+ psktype: "external",
119
+ pskId,
120
+ pskNonce: new Uint8Array([5, 6, 7, 8]),
121
+ },
122
+ },
123
+ };
124
+ // This should fail because we're adding the same PSK twice
125
+ await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [pskProposal, pskProposal], impl)).rejects.toThrow(mlsError_1.ValidationError);
126
+ });
127
+ it("should reject commit with multiple GroupContextExtensions proposals", async () => {
128
+ const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
129
+ const aliceCapabilities = {
130
+ extensions: [],
131
+ credentials: ["basic"],
132
+ proposals: [],
133
+ versions: ["mls10"],
134
+ ciphersuites: [cipherSuite],
135
+ };
136
+ const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, aliceCapabilities, lifetime_1.defaultLifetime, [], impl);
137
+ const groupId = new TextEncoder().encode("group1");
138
+ const aliceGroup = await (0, clientState_1.createGroup)(groupId, alice.publicPackage, alice.privatePackage, [], impl);
139
+ const groupContextExtensionsProposal = {
140
+ proposalType: "group_context_extensions",
141
+ groupContextExtensions: {
142
+ extensions: [],
143
+ },
144
+ };
145
+ // This should fail because we're adding multiple GroupContextExtensions proposals
146
+ await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [groupContextExtensionsProposal, groupContextExtensionsProposal], impl)).rejects.toThrow(mlsError_1.ValidationError);
147
+ });
148
+ });
149
+ describe("validateRatchetTree", () => {
150
+ it("should reject structurally unsound ratchet tree", async () => {
151
+ const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
152
+ const aliceCapabilities = {
153
+ extensions: [],
154
+ credentials: ["basic"],
155
+ proposals: [],
156
+ versions: ["mls10"],
157
+ ciphersuites: [cipherSuite],
158
+ };
159
+ const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, aliceCapabilities, lifetime_1.defaultLifetime, [], impl);
160
+ const validLeafNode = alice.publicPackage.leafNode;
161
+ // Make the first node a parent node, which is invalid for a leaf position
162
+ const invalidTree = [
163
+ {
164
+ nodeType: "parent",
165
+ parent: {
166
+ unmergedLeaves: [],
167
+ parentHash: new Uint8Array(),
168
+ hpkePublicKey: new Uint8Array(),
169
+ },
170
+ },
171
+ { nodeType: "leaf", leaf: validLeafNode },
172
+ { nodeType: "leaf", leaf: validLeafNode },
173
+ ];
174
+ const groupContext = {
175
+ version: "mls10",
176
+ cipherSuite: cipherSuite,
177
+ epoch: 0n,
178
+ treeHash: new Uint8Array(),
179
+ groupId: new Uint8Array(),
180
+ extensions: [],
181
+ confirmedTranscriptHash: new Uint8Array(),
182
+ };
183
+ const error = await (0, clientState_1.validateRatchetTree)(invalidTree, groupContext, lifetimeConfig_1.defaultLifetimeConfig, authenticationService_1.defaultAuthenticationService, new Uint8Array(), impl);
184
+ expect(error).toBeInstanceOf(mlsError_1.ValidationError);
185
+ expect(error?.message).toBe("Received Ratchet Tree is not structurally sound");
186
+ });
187
+ });
188
+ });
189
+ }
190
+ //# sourceMappingURL=clientStateValidation.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"clientStateValidation.test.js","sourceRoot":"","sources":["../../../test/validation/clientStateValidation.test.ts"],"names":[],"mappings":";;AAAA,uDAAwE;AACxE,yDAAqD;AACrD,qDAAyD;AAGzD,8DAAwH;AACxH,iDAAoD;AAQpD,iDAAoD;AAIpD,6DAAgF;AAChF,2EAAqG;AACrG,iDAAkD;AAClD,yDAA4D;AAE5D,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,0BAAY,CAAC,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG,EAAqB,CAAA;IAEzC,QAAQ,CAAC,kCAAkC,WAAW,EAAE,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAkB,EAAC,IAAA,oCAAsB,EAAC,WAAW,CAAC,CAAC,CAAA;QAE1E,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;YACxD,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;gBACtE,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5G,MAAM,iBAAiB,GAAiB;oBACtC,UAAU,EAAE,EAAE;oBACd,WAAW,EAAE,CAAC,OAAO,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,YAAY,EAAE,CAAC,WAAW,CAAC;iBAC5B,CAAA;gBACD,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,iBAAiB,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAErG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAClD,MAAM,UAAU,GAAG,MAAM,IAAA,yBAAW,EAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAElG,mCAAmC;gBACnC,MAAM,cAAc,GAAmB;oBACrC,cAAc,EAAE,QAAQ;oBACxB,kBAAkB,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,kBAAkB;oBACnE,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,aAAa;oBACzD,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU;oBACnD,YAAY,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY;oBACvD,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU;oBACnD,SAAS,EAAE,IAAI,UAAU,EAAE;iBAC5B,CAAA;gBAED,MAAM,cAAc,GAAmB;oBACrC,YAAY,EAAE,QAAQ;oBACtB,MAAM,EAAE;wBACN,QAAQ,EAAE,cAAc;qBACzB;iBACF,CAAA;gBAED,gFAAgF;gBAChF,MAAM,MAAM,CAAC,IAAA,2BAAY,EAAC,UAAU,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAClG,0BAAe,CAChB,CAAA;YACH,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;gBAC5E,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5G,MAAM,iBAAiB,GAAiB;oBACtC,UAAU,EAAE,EAAE;oBACd,WAAW,EAAE,CAAC,OAAO,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,YAAY,EAAE,CAAC,WAAW,CAAC;iBAC5B,CAAA;gBACD,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,iBAAiB,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAErG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAClD,MAAM,UAAU,GAAG,MAAM,IAAA,yBAAW,EAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAElG,MAAM,cAAc,GAAmB;oBACrC,YAAY,EAAE,QAAQ;oBACtB,MAAM,EAAE;wBACN,OAAO,EAAE,CAAC,EAAE,qBAAqB;qBAClC;iBACF,CAAA;gBAED,wEAAwE;gBACxE,MAAM,MAAM,CAAC,IAAA,2BAAY,EAAC,UAAU,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAClG,0BAAe,CAChB,CAAA;YACH,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;gBAC3F,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5G,MAAM,iBAAiB,GAAiB;oBACtC,UAAU,EAAE,EAAE;oBACd,WAAW,EAAE,CAAC,OAAO,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,YAAY,EAAE,CAAC,WAAW,CAAC;iBAC5B,CAAA;gBACD,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,iBAAiB,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAErG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAElD,MAAM,aAAa,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;gBACxG,MAAM,GAAG,GAAG,MAAM,IAAA,+BAAkB,EAAC,aAAa,EAAE,iBAAiB,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAEjG,MAAM,WAAW,GAAgB;oBAC/B,YAAY,EAAE,KAAK;oBACnB,GAAG,EAAE;wBACH,UAAU,EAAE,GAAG,CAAC,aAAa;qBAC9B;iBACF,CAAA;gBAED,kFAAkF;gBAClF,MAAM,YAAY,GAAG;oBACnB,GAAG,kCAAmB;oBACtB,wBAAwB,EAAE;wBACxB,kBAAkB,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,iCAAiC;wBACtF,2BAA2B,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC;qBAC9D;iBACF,CAAA;gBAED,MAAM,0BAA0B,GAAG,MAAM,IAAA,yBAAW,EAClD,OAAO,EACP,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,cAAc,EACpB,EAAE,EACF,IAAI,EACJ,YAAY,CACb,CAAA;gBAED,oEAAoE;gBACpE,MAAM,MAAM,CACV,IAAA,2BAAY,EAAC,0BAA0B,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CACjG,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAA;YACpC,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;gBACjF,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5G,MAAM,iBAAiB,GAAiB;oBACtC,UAAU,EAAE,EAAE;oBACd,WAAW,EAAE,CAAC,OAAO,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,YAAY,EAAE,CAAC,WAAW,CAAC;iBAC5B,CAAA;gBACD,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,iBAAiB,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAErG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAClD,MAAM,UAAU,GAAG,MAAM,IAAA,yBAAW,EAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAElG,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,MAAM,WAAW,GAAgB;oBAC/B,YAAY,EAAE,KAAK;oBACnB,GAAG,EAAE;wBACH,cAAc,EAAE;4BACd,OAAO,EAAE,UAAU;4BACnB,KAAK;4BACL,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;yBACvC;qBACF;iBACF,CAAA;gBAED,2DAA2D;gBAC3D,MAAM,MAAM,CAAC,IAAA,2BAAY,EAAC,UAAU,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC5G,0BAAe,CAChB,CAAA;YACH,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;gBACnF,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5G,MAAM,iBAAiB,GAAiB;oBACtC,UAAU,EAAE,EAAE;oBACd,WAAW,EAAE,CAAC,OAAO,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,YAAY,EAAE,CAAC,WAAW,CAAC;iBAC5B,CAAA;gBACD,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,iBAAiB,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAErG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAClD,MAAM,UAAU,GAAG,MAAM,IAAA,yBAAW,EAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAElG,MAAM,8BAA8B,GAAmC;oBACrE,YAAY,EAAE,0BAA0B;oBACxC,sBAAsB,EAAE;wBACtB,UAAU,EAAE,EAAE;qBACf;iBACF,CAAA;gBAED,kFAAkF;gBAClF,MAAM,MAAM,CACV,IAAA,2BAAY,EACV,UAAU,EACV,wBAAa,EACb,KAAK,EACL,CAAC,8BAA8B,EAAE,8BAA8B,CAAC,EAChE,IAAI,CACL,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAA;YACpC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;YACnC,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;gBAC/D,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5G,MAAM,iBAAiB,GAAiB;oBACtC,UAAU,EAAE,EAAE;oBACd,WAAW,EAAE,CAAC,OAAO,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,YAAY,EAAE,CAAC,WAAW,CAAC;iBAC5B,CAAA;gBACD,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,iBAAiB,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;gBAErG,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAA;gBAClD,0EAA0E;gBAC1E,MAAM,WAAW,GAAgB;oBAC/B;wBACE,QAAQ,EAAE,QAAQ;wBAClB,MAAM,EAAE;4BACN,cAAc,EAAE,EAAE;4BAClB,UAAU,EAAE,IAAI,UAAU,EAAE;4BAC5B,aAAa,EAAE,IAAI,UAAU,EAAE;yBAChC;qBACF;oBACD,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE;oBACzC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE;iBAC1C,CAAA;gBAED,MAAM,YAAY,GAAiB;oBACjC,OAAO,EAAE,OAAO;oBAChB,WAAW,EAAE,WAAW;oBACxB,KAAK,EAAE,EAAE;oBACT,QAAQ,EAAE,IAAI,UAAU,EAAE;oBAC1B,OAAO,EAAE,IAAI,UAAU,EAAE;oBACzB,UAAU,EAAE,EAAE;oBACd,uBAAuB,EAAE,IAAI,UAAU,EAAE;iBAC1C,CAAA;gBAED,MAAM,KAAK,GAAG,MAAM,IAAA,iCAAmB,EACrC,WAAW,EACX,YAAY,EACZ,sCAAqB,EACrB,oDAA4B,EAC5B,IAAI,UAAU,EAAE,EAChB,IAAI,CACL,CAAA;gBAED,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,0BAAe,CAAC,CAAA;gBAC7C,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAA;YAChF,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}