ts-mls 1.0.1

package/dist/test/validation/proposalValidation.test.js

@@ -0,0 +1,233 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const clientState_1 = require("../../src/clientState");
+const createCommit_1 = require("../../src/createCommit");
+const pskIndex_1 = require("../../src/pskIndex");
+const ciphersuite_1 = require("../../src/crypto/ciphersuite");
+const keyPackage_1 = require("../../src/keyPackage");
+const lifetime_1 = require("../../src/lifetime");
+const defaultCapabilities_1 = require("../../src/defaultCapabilities");
+const mlsError_1 = require("../../src/mlsError");
+const requiredCapabilities_1 = require("../../src/requiredCapabilities");
+const externalSender_1 = require("../../src/externalSender");
+const constantTimeCompare_1 = require("../../src/util/constantTimeCompare");
+const customCredential_1 = require("../../src/customCredential");
+for (const cs of Object.keys(ciphersuite_1.ciphersuites)) {
+    test(`Proposal Validation ${cs}`, async () => {
+        await remove(cs);
+    });
+}
+async function remove(cipherSuite) {
+    const impl = await (0, ciphersuite_1.getCiphersuiteImpl)((0, ciphersuite_1.getCiphersuiteFromName)(cipherSuite));
+    const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
+    const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, (0, defaultCapabilities_1.defaultCapabilities)(), lifetime_1.defaultLifetime, [], impl);
+    const groupId = new TextEncoder().encode("group1");
+    let aliceGroup = await (0, clientState_1.createGroup)(groupId, alice.publicPackage, alice.privatePackage, [], impl);
+    const bobCredential = { credentialType: "basic", identity: new TextEncoder().encode("bob") };
+    const bob = await (0, keyPackage_1.generateKeyPackage)(bobCredential, (0, defaultCapabilities_1.defaultCapabilities)(), lifetime_1.defaultLifetime, [], impl);
+    const charlieCredential = { credentialType: "basic", identity: new TextEncoder().encode("charlie") };
+    const charlie = await (0, keyPackage_1.generateKeyPackage)(charlieCredential, (0, defaultCapabilities_1.defaultCapabilities)(), lifetime_1.defaultLifetime, [], impl);
+    const addBobProposal = {
+        proposalType: "add",
+        add: {
+            keyPackage: bob.publicPackage,
+        },
+    };
+    const addCharlieProposal = {
+        proposalType: "add",
+        add: {
+            keyPackage: charlie.publicPackage,
+        },
+    };
+    const addBobAndCharlieCommitResult = await (0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [addBobProposal, addCharlieProposal], impl);
+    aliceGroup = addBobAndCharlieCommitResult.newState;
+    let bobGroup = await (0, clientState_1.joinGroup)(addBobAndCharlieCommitResult.welcome, bob.publicPackage, bob.privatePackage, pskIndex_1.emptyPskIndex, impl, aliceGroup.ratchetTree);
+    expect(bobGroup.keySchedule.epochAuthenticator).toStrictEqual(aliceGroup.keySchedule.epochAuthenticator);
+    let charlieGroup = await (0, clientState_1.joinGroup)(addBobAndCharlieCommitResult.welcome, charlie.publicPackage, charlie.privatePackage, pskIndex_1.emptyPskIndex, impl, aliceGroup.ratchetTree);
+    expect(charlieGroup.keySchedule.epochAuthenticator).toStrictEqual(aliceGroup.keySchedule.epochAuthenticator);
+    const removeBobProposal = {
+        proposalType: "remove",
+        remove: {
+            removed: bobGroup.privatePath.leafIndex,
+        },
+    };
+    const removeBobProposal2 = {
+        proposalType: "remove",
+        remove: {
+            removed: bobGroup.privatePath.leafIndex,
+        },
+    };
+    // can't remove same leaf node twice
+    await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [removeBobProposal, removeBobProposal2], impl)).rejects.toThrow(mlsError_1.ValidationError);
+    // can't add someone already in the group
+    await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [addBobProposal], impl)).rejects.toThrow(mlsError_1.ValidationError);
+    const proposalInvalidRequiredCapabilities = {
+        proposalType: "group_context_extensions",
+        groupContextExtensions: {
+            extensions: [{ extensionType: "required_capabilities", extensionData: new Uint8Array([1, 2]) }],
+        },
+    };
+    //can't add groupContextExtensions with invalid requiredCapabilities
+    await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [proposalInvalidRequiredCapabilities], impl)).rejects.toThrow(mlsError_1.CodecError);
+    const proposalRequiredCapabilities = {
+        proposalType: "group_context_extensions",
+        groupContextExtensions: {
+            extensions: [
+                {
+                    extensionType: "required_capabilities",
+                    extensionData: (0, requiredCapabilities_1.encodeRequiredCapabilities)({ extensionTypes: [], proposalTypes: [99], credentialTypes: [] }),
+                },
+            ],
+        },
+    };
+    //can't add groupContextExtensions with requiredCapabilities that members don't support
+    await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [proposalRequiredCapabilities], impl)).rejects.toThrow(mlsError_1.ValidationError);
+    const dianaCredential = { credentialType: "basic", identity: new TextEncoder().encode("diana") };
+    const diana = await (0, keyPackage_1.generateKeyPackage)(dianaCredential, { ...(0, defaultCapabilities_1.defaultCapabilities)(), credentials: ["basic"] }, lifetime_1.defaultLifetime, [], impl);
+    const addDiana = {
+        proposalType: "add",
+        add: {
+            keyPackage: diana.publicPackage,
+        },
+    };
+    const proposalRequiredCapabilitiesX509 = {
+        proposalType: "group_context_extensions",
+        groupContextExtensions: {
+            extensions: [
+                {
+                    extensionType: "required_capabilities",
+                    extensionData: (0, requiredCapabilities_1.encodeRequiredCapabilities)({
+                        extensionTypes: [],
+                        proposalTypes: [],
+                        credentialTypes: ["x509"],
+                    }),
+                },
+            ],
+        },
+    };
+    //can't add groupContextExtensions with requiredCapabilities that newly added member doesn't support
+    await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [addDiana, proposalRequiredCapabilitiesX509], impl)).rejects.toThrow(mlsError_1.ValidationError);
+    const proposalInvalidExternalSenders = {
+        proposalType: "group_context_extensions",
+        groupContextExtensions: {
+            extensions: [{ extensionType: "external_senders", extensionData: new Uint8Array([1, 2]) }],
+        },
+    };
+    //can't add groupContextExtensions with invalid requiredCapabilities
+    await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [proposalInvalidExternalSenders], impl)).rejects.toThrow(mlsError_1.CodecError);
+    const badCredential = { credentialType: "basic", identity: new TextEncoder().encode("NOT GOOD") };
+    const proposalUnauthenticatedExternalSenders = {
+        proposalType: "group_context_extensions",
+        groupContextExtensions: {
+            extensions: [
+                {
+                    extensionType: "external_senders",
+                    extensionData: (0, externalSender_1.encodeExternalSender)({ credential: badCredential, signaturePublicKey: new Uint8Array() }),
+                },
+            ],
+        },
+    };
+    const authService = {
+        async validateCredential(c, _pk) {
+            if (c.credentialType === "basic" && (0, constantTimeCompare_1.constantTimeEqual)(c.identity, badCredential.identity))
+                return false;
+            return true;
+        },
+    };
+    //can't add groupContextExtensions with external senders that can't be auth'd
+    await expect((0, createCommit_1.createCommit)(withAuthService(aliceGroup, authService), pskIndex_1.emptyPskIndex, false, [proposalUnauthenticatedExternalSenders], impl)).rejects.toThrow(mlsError_1.ValidationError);
+    const edwardCredential = { credentialType: "basic", identity: new TextEncoder().encode("edward") };
+    const edward = await (0, keyPackage_1.generateKeyPackage)(edwardCredential, { ...(0, defaultCapabilities_1.defaultCapabilities)(), credentials: ["basic"] }, lifetime_1.defaultLifetime, [], impl);
+    const addEdward = {
+        proposalType: "add",
+        add: {
+            keyPackage: edward.publicPackage,
+        },
+    };
+    const authServiceEdward = {
+        async validateCredential(c, _pk) {
+            if (c.credentialType === "basic" && (0, constantTimeCompare_1.constantTimeEqual)(c.identity, edwardCredential.identity))
+                return false;
+            return true;
+        },
+    };
+    //can't add a member with invalid credentials
+    await expect((0, createCommit_1.createCommit)(withAuthService(aliceGroup, authServiceEdward), pskIndex_1.emptyPskIndex, false, [addEdward], impl)).rejects.toThrow(mlsError_1.ValidationError);
+    const frankCredential = (0, customCredential_1.createCustomCredential)(5, new Uint8Array([1, 2]));
+    const frank = await (0, keyPackage_1.generateKeyPackage)(frankCredential, (0, defaultCapabilities_1.defaultCapabilities)(), lifetime_1.defaultLifetime, [], impl);
+    const addFrank = {
+        proposalType: "add",
+        add: { keyPackage: frank.publicPackage },
+    };
+    //can't add leafNode with an unsupported credentialType
+    await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [addFrank], impl)).rejects.toThrow(mlsError_1.ValidationError);
+    const georgeCredential = { credentialType: "basic", identity: new TextEncoder().encode("george") };
+    const georgeExtension = { extensionType: 8545, extensionData: new Uint8Array() };
+    const george = await (0, keyPackage_1.generateKeyPackage)(georgeCredential, (0, defaultCapabilities_1.defaultCapabilities)(), lifetime_1.defaultLifetime, [georgeExtension], impl);
+    const addGeorge = {
+        proposalType: "add",
+        add: { keyPackage: george.publicPackage },
+    };
+    //can't add leafNode with an unsupported extension
+    await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [addGeorge], impl)).rejects.toThrow(mlsError_1.ValidationError);
+    const updateLeafNode = {
+        leafNodeSource: "update",
+        signaturePublicKey: alice.publicPackage.leafNode.signaturePublicKey,
+        hpkePublicKey: alice.publicPackage.leafNode.hpkePublicKey,
+        credential: alice.publicPackage.leafNode.credential,
+        capabilities: alice.publicPackage.leafNode.capabilities,
+        extensions: alice.publicPackage.leafNode.extensions,
+        signature: new Uint8Array(),
+    };
+    const updateProposal = {
+        proposalType: "update",
+        update: {
+            leafNode: updateLeafNode,
+        },
+    };
+    // commiter can't update themselves
+    await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [updateProposal], impl)).rejects.toThrow(mlsError_1.ValidationError);
+    const removeProposal = {
+        proposalType: "remove",
+        remove: {
+            removed: 0,
+        },
+    };
+    // committer can't remove themselves
+    await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [removeProposal], impl)).rejects.toThrow(mlsError_1.ValidationError);
+    const hannahCredential = { credentialType: "basic", identity: new TextEncoder().encode("bob") };
+    const hannah = await (0, keyPackage_1.generateKeyPackage)(hannahCredential, (0, defaultCapabilities_1.defaultCapabilities)(), lifetime_1.defaultLifetime, [], impl);
+    const addHannahProposal = {
+        proposalType: "add",
+        add: {
+            keyPackage: hannah.publicPackage,
+        },
+    };
+    // can't add the same  keypackage twice
+    await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [addHannahProposal, addHannahProposal], impl)).rejects.toThrow(mlsError_1.ValidationError);
+    const pskId = new Uint8Array([1, 2, 3, 4]);
+    const pskProposal = {
+        proposalType: "psk",
+        psk: {
+            preSharedKeyId: {
+                psktype: "external",
+                pskId,
+                pskNonce: new Uint8Array([5, 6, 7, 8]),
+            },
+        },
+    };
+    // can't reference the same psk in multiple proposals
+    await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [pskProposal, pskProposal], impl)).rejects.toThrow(mlsError_1.ValidationError);
+    const groupContextExtensionsProposal = {
+        proposalType: "group_context_extensions",
+        groupContextExtensions: {
+            extensions: [],
+        },
+    };
+    // can't use multiple group_context_extensions proposals
+    await expect((0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [groupContextExtensionsProposal, groupContextExtensionsProposal], impl)).rejects.toThrow(mlsError_1.ValidationError);
+}
+function withAuthService(state, authService) {
+    return { ...state, clientConfig: { ...state.clientConfig, authService: authService } };
+}
+//# sourceMappingURL=proposalValidation.test.js.map

package/dist/test/validation/proposalValidation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposalValidation.test.js","sourceRoot":"","sources":["../../../test/validation/proposalValidation.test.ts"],"names":[],"mappings":";;AAAA,uDAA2E;AAC3E,yDAAqD;AACrD,iDAAkD;AAElD,8DAAwH;AACxH,qDAAyD;AAEzD,iDAAoD;AACpD,uEAAmE;AACnE,iDAAgE;AAChE,yEAA2E;AAC3E,6DAA+D;AAE/D,4EAAsE;AACtE,iEAAmE;AAInE,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,0BAAY,CAAC,EAAE,CAAC;IAC3C,IAAI,CAAC,uBAAuB,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,MAAM,CAAC,EAAqB,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,WAA4B;IAChD,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAkB,EAAC,IAAA,oCAAsB,EAAC,WAAW,CAAC,CAAC,CAAA;IAE1E,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;IAC5G,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,IAAA,yCAAmB,GAAE,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAEzG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAElD,IAAI,UAAU,GAAG,MAAM,IAAA,yBAAW,EAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAEhG,MAAM,aAAa,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IACxG,MAAM,GAAG,GAAG,MAAM,IAAA,+BAAkB,EAAC,aAAa,EAAE,IAAA,yCAAmB,GAAE,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAErG,MAAM,iBAAiB,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAA;IAChH,MAAM,OAAO,GAAG,MAAM,IAAA,+BAAkB,EAAC,iBAAiB,EAAE,IAAA,yCAAmB,GAAE,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAE7G,MAAM,cAAc,GAAgB;QAClC,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE;YACH,UAAU,EAAE,GAAG,CAAC,aAAa;SAC9B;KACF,CAAA;IAED,MAAM,kBAAkB,GAAgB;QACtC,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE;YACH,UAAU,EAAE,OAAO,CAAC,aAAa;SAClC;KACF,CAAA;IAED,MAAM,4BAA4B,GAAG,MAAM,IAAA,2BAAY,EACrD,UAAU,EACV,wBAAa,EACb,KAAK,EACL,CAAC,cAAc,EAAE,kBAAkB,CAAC,EACpC,IAAI,CACL,CAAA;IAED,UAAU,GAAG,4BAA4B,CAAC,QAAQ,CAAA;IAElD,IAAI,QAAQ,GAAG,MAAM,IAAA,uBAAS,EAC5B,4BAA4B,CAAC,OAAQ,EACrC,GAAG,CAAC,aAAa,EACjB,GAAG,CAAC,cAAc,EAClB,wBAAa,EACb,IAAI,EACJ,UAAU,CAAC,WAAW,CACvB,CAAA;IAED,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAA;IAExG,IAAI,YAAY,GAAG,MAAM,IAAA,uBAAS,EAChC,4BAA4B,CAAC,OAAQ,EACrC,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,cAAc,EACtB,wBAAa,EACb,IAAI,EACJ,UAAU,CAAC,WAAW,CACvB,CAAA;IAED,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAA;IAE5G,MAAM,iBAAiB,GAAmB;QACxC,YAAY,EAAE,QAAQ;QACtB,MAAM,EAAE;YACN,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,SAAS;SACxC;KACF,CAAA;IAED,MAAM,kBAAkB,GAAmB;QACzC,YAAY,EAAE,QAAQ;QACtB,MAAM,EAAE;YACN,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,SAAS;SACxC;KACF,CAAA;IAED,oCAAoC;IACpC,MAAM,MAAM,CACV,IAAA,2BAAY,EAAC,UAAU,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,EAAE,IAAI,CAAC,CAC9F,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAA;IAElC,yCAAyC;IACzC,MAAM,MAAM,CAAC,IAAA,2BAAY,EAAC,UAAU,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAA;IAErH,MAAM,mCAAmC,GAAa;QACpD,YAAY,EAAE,0BAA0B;QACxC,sBAAsB,EAAE;YACtB,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,uBAAuB,EAAE,aAAa,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChG;KACF,CAAA;IAED,oEAAoE;IACpE,MAAM,MAAM,CACV,IAAA,2BAAY,EAAC,UAAU,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,mCAAmC,CAAC,EAAE,IAAI,CAAC,CAC5F,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAU,CAAC,CAAA;IAE7B,MAAM,4BAA4B,GAAa;QAC7C,YAAY,EAAE,0BAA0B;QACxC,sBAAsB,EAAE;YACtB,UAAU,EAAE;gBACV;oBACE,aAAa,EAAE,uBAAuB;oBACtC,aAAa,EAAE,IAAA,iDAA0B,EAAC,EAAE,cAAc,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;iBAC5G;aACF;SACF;KACF,CAAA;IAED,uFAAuF;IACvF,MAAM,MAAM,CAAC,IAAA,2BAAY,EAAC,UAAU,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,4BAA4B,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAChH,0BAAe,CAChB,CAAA;IAED,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;IAC5G,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EACpC,eAAe,EACf,EAAE,GAAG,IAAA,yCAAmB,GAAE,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,EACpD,0BAAe,EACf,EAAE,EACF,IAAI,CACL,CAAA;IAED,MAAM,QAAQ,GAAa;QACzB,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE;YACH,UAAU,EAAE,KAAK,CAAC,aAAa;SAChC;KACF,CAAA;IAED,MAAM,gCAAgC,GAAa;QACjD,YAAY,EAAE,0BAA0B;QACxC,sBAAsB,EAAE;YACtB,UAAU,EAAE;gBACV;oBACE,aAAa,EAAE,uBAAuB;oBACtC,aAAa,EAAE,IAAA,iDAA0B,EAAC;wBACxC,cAAc,EAAE,EAAE;wBAClB,aAAa,EAAE,EAAE;wBACjB,eAAe,EAAE,CAAC,MAAM,CAAC;qBAC1B,CAAC;iBACH;aACF;SACF;KACF,CAAA;IAED,oGAAoG;IACpG,MAAM,MAAM,CACV,IAAA,2BAAY,EAAC,UAAU,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,gCAAgC,CAAC,EAAE,IAAI,CAAC,CACnG,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAA;IAElC,MAAM,8BAA8B,GAAa;QAC/C,YAAY,EAAE,0BAA0B;QACxC,sBAAsB,EAAE;YACtB,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,kBAAkB,EAAE,aAAa,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3F;KACF,CAAA;IAED,oEAAoE;IACpE,MAAM,MAAM,CAAC,IAAA,2BAAY,EAAC,UAAU,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,8BAA8B,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAClH,qBAAU,CACX,CAAA;IAED,MAAM,aAAa,GAAG,EAAE,cAAc,EAAE,OAAgB,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAA;IAE1G,MAAM,sCAAsC,GAAa;QACvD,YAAY,EAAE,0BAA0B;QACxC,sBAAsB,EAAE;YACtB,UAAU,EAAE;gBACV;oBACE,aAAa,EAAE,kBAAkB;oBACjC,aAAa,EAAE,IAAA,qCAAoB,EAAC,EAAE,UAAU,EAAE,aAAa,EAAE,kBAAkB,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC;iBACzG;aACF;SACF;KACF,CAAA;IAED,MAAM,WAAW,GAA0B;QACzC,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,GAAG;YAC7B,IAAI,CAAC,CAAC,cAAc,KAAK,OAAO,IAAI,IAAA,uCAAiB,EAAC,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAA;YACvG,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;IAED,6EAA6E;IAC7E,MAAM,MAAM,CACV,IAAA,2BAAY,EACV,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,EACxC,wBAAa,EACb,KAAK,EACL,CAAC,sCAAsC,CAAC,EACxC,IAAI,CACL,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAA;IAElC,MAAM,gBAAgB,GAAG,EAAE,cAAc,EAAE,OAAgB,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAA;IAC3G,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAkB,EACrC,gBAAgB,EAChB,EAAE,GAAG,IAAA,yCAAmB,GAAE,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,EACpD,0BAAe,EACf,EAAE,EACF,IAAI,CACL,CAAA;IAED,MAAM,SAAS,GAAa;QAC1B,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE;YACH,UAAU,EAAE,MAAM,CAAC,aAAa;SACjC;KACF,CAAA;IAED,MAAM,iBAAiB,GAA0B;QAC/C,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,GAAG;YAC7B,IAAI,CAAC,CAAC,cAAc,KAAK,OAAO,IAAI,IAAA,uCAAiB,EAAC,CAAC,CAAC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAA;YAC1G,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;IAED,6CAA6C;IAC7C,MAAM,MAAM,CACV,IAAA,2BAAY,EAAC,eAAe,CAAC,UAAU,EAAE,iBAAiB,CAAC,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CACtG,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAA;IAElC,MAAM,eAAe,GAAe,IAAA,yCAAsB,EAAC,CAAC,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACrF,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,IAAA,yCAAmB,GAAE,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAEzG,MAAM,QAAQ,GAAa;QACzB,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,aAAa,EAAE;KACzC,CAAA;IAED,uDAAuD;IACvD,MAAM,MAAM,CAAC,IAAA,2BAAY,EAAC,UAAU,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAA;IAE/G,MAAM,gBAAgB,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAA;IAC9G,MAAM,eAAe,GAAc,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,UAAU,EAAE,EAAE,CAAA;IAC3F,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAkB,EACrC,gBAAgB,EAChB,IAAA,yCAAmB,GAAE,EACrB,0BAAe,EACf,CAAC,eAAe,CAAC,EACjB,IAAI,CACL,CAAA;IAED,MAAM,SAAS,GAAa;QAC1B,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,aAAa,EAAE;KAC1C,CAAA;IAED,kDAAkD;IAClD,MAAM,MAAM,CAAC,IAAA,2BAAY,EAAC,UAAU,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAA;IAEhH,MAAM,cAAc,GAAa;QAC/B,cAAc,EAAE,QAAQ;QACxB,kBAAkB,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,kBAAkB;QACnE,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,aAAa;QACzD,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU;QACnD,YAAY,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY;QACvD,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU;QACnD,SAAS,EAAE,IAAI,UAAU,EAAE;KAC5B,CAAA;IAED,MAAM,cAAc,GAAa;QAC/B,YAAY,EAAE,QAAQ;QACtB,MAAM,EAAE;YACN,QAAQ,EAAE,cAAc;SACzB;KACF,CAAA;IAED,mCAAmC;IACnC,MAAM,MAAM,CAAC,IAAA,2BAAY,EAAC,UAAU,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAA;IAErH,MAAM,cAAc,GAAmB;QACrC,YAAY,EAAE,QAAQ;QACtB,MAAM,EAAE;YACN,OAAO,EAAE,CAAC;SACX;KACF,CAAA;IAED,oCAAoC;IACpC,MAAM,MAAM,CAAC,IAAA,2BAAY,EAAC,UAAU,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAA;IAErH,MAAM,gBAAgB,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IAC3G,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAkB,EAAC,gBAAgB,EAAE,IAAA,yCAAmB,GAAE,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAE3G,MAAM,iBAAiB,GAAgB;QACrC,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE;YACH,UAAU,EAAE,MAAM,CAAC,aAAa;SACjC;KACF,CAAA;IAED,uCAAuC;IACvC,MAAM,MAAM,CACV,IAAA,2BAAY,EAAC,UAAU,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,EAAE,IAAI,CAAC,CAC7F,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAA;IAElC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC1C,MAAM,WAAW,GAAa;QAC5B,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE;YACH,cAAc,EAAE;gBACd,OAAO,EAAE,UAAU;gBACnB,KAAK;gBACL,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aACvC;SACF;KACF,CAAA;IAED,qDAAqD;IACrD,MAAM,MAAM,CAAC,IAAA,2BAAY,EAAC,UAAU,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC5G,0BAAe,CAChB,CAAA;IAED,MAAM,8BAA8B,GAAa;QAC/C,YAAY,EAAE,0BAA0B;QACxC,sBAAsB,EAAE;YACtB,UAAU,EAAE,EAAE;SACf;KACF,CAAA;IAED,wDAAwD;IACxD,MAAM,MAAM,CACV,IAAA,2BAAY,EACV,UAAU,EACV,wBAAa,EACb,KAAK,EACL,CAAC,8BAA8B,EAAE,8BAA8B,CAAC,EAChE,IAAI,CACL,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,KAAkB,EAAE,WAAkC;IAC7E,OAAO,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,KAAK,CAAC,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,CAAA;AACxF,CAAC"}

package/dist/test/validation/ratchetTreeValidation.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/validation/ratchetTreeValidation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ratchetTreeValidation.test.d.ts","sourceRoot":"","sources":["../../../test/validation/ratchetTreeValidation.test.ts"],"names":[],"mappings":""}

package/dist/test/validation/ratchetTreeValidation.test.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const clientState_1 = require("../../src/clientState");
+const keyPackage_1 = require("../../src/keyPackage");
+const ciphersuite_1 = require("../../src/crypto/ciphersuite");
+const lifetime_1 = require("../../src/lifetime");
+const mlsError_1 = require("../../src/mlsError");
+const lifetimeConfig_1 = require("../../src/lifetimeConfig");
+const authenticationService_1 = require("../../src/authenticationService");
+for (const cs of Object.keys(ciphersuite_1.ciphersuites)) {
+    test("should reject structurally unsound ratchet tree", async () => {
+        await testStructuralIntegrity(cs);
+    });
+}
+async function testStructuralIntegrity(cipherSuite) {
+    const impl = await (0, ciphersuite_1.getCiphersuiteImpl)((0, ciphersuite_1.getCiphersuiteFromName)(cipherSuite));
+    const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
+    const aliceCapabilities = {
+        extensions: [],
+        credentials: ["basic"],
+        proposals: [],
+        versions: ["mls10"],
+        ciphersuites: [cipherSuite],
+    };
+    const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, aliceCapabilities, lifetime_1.defaultLifetime, [], impl);
+    const validLeafNode = alice.publicPackage.leafNode;
+    // Make the first node a parent node, which is invalid for a leaf position
+    const invalidTree = [
+        {
+            nodeType: "parent",
+            parent: {
+                unmergedLeaves: [],
+                parentHash: new Uint8Array(),
+                hpkePublicKey: new Uint8Array(),
+            },
+        },
+        { nodeType: "leaf", leaf: validLeafNode },
+        { nodeType: "leaf", leaf: validLeafNode },
+    ];
+    const groupContext = {
+        version: "mls10",
+        cipherSuite: cipherSuite,
+        epoch: 0n,
+        treeHash: new Uint8Array(),
+        groupId: new Uint8Array(),
+        extensions: [],
+        confirmedTranscriptHash: new Uint8Array(),
+    };
+    const error = await (0, clientState_1.validateRatchetTree)(invalidTree, groupContext, lifetimeConfig_1.defaultLifetimeConfig, authenticationService_1.defaultAuthenticationService, new Uint8Array(), impl);
+    expect(error).toBeInstanceOf(mlsError_1.ValidationError);
+    expect(error?.message).toBe("Received Ratchet Tree is not structurally sound");
+}
+//# sourceMappingURL=ratchetTreeValidation.test.js.map

package/dist/test/validation/ratchetTreeValidation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ratchetTreeValidation.test.js","sourceRoot":"","sources":["../../../test/validation/ratchetTreeValidation.test.ts"],"names":[],"mappings":";;AAAA,uDAA2D;AAC3D,qDAAyD;AAGzD,8DAAwH;AACxH,iDAAoD;AACpD,iDAAoD;AAGpD,6DAAgE;AAChE,2EAA8E;AAE9E,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,0BAAY,CAAC,EAAE,CAAC;IAC3C,IAAI,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,uBAAuB,CAAC,EAAqB,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;AACJ,CAAC;AACD,KAAK,UAAU,uBAAuB,CAAC,WAA4B;IACjE,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAkB,EAAC,IAAA,oCAAsB,EAAC,WAAW,CAAC,CAAC,CAAA;IAC1E,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;IAC5G,MAAM,iBAAiB,GAAiB;QACtC,UAAU,EAAE,EAAE;QACd,WAAW,EAAE,CAAC,OAAO,CAAC;QACtB,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,CAAC,OAAO,CAAC;QACnB,YAAY,EAAE,CAAC,WAAW,CAAC;KAC5B,CAAA;IACD,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,iBAAiB,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAErG,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAA;IAClD,0EAA0E;IAC1E,MAAM,WAAW,GAAgB;QAC/B;YACE,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE;gBACN,cAAc,EAAE,EAAE;gBAClB,UAAU,EAAE,IAAI,UAAU,EAAE;gBAC5B,aAAa,EAAE,IAAI,UAAU,EAAE;aAChC;SACF;QACD,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE;QACzC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE;KAC1C,CAAA;IAED,MAAM,YAAY,GAAiB;QACjC,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,WAAW;QACxB,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,IAAI,UAAU,EAAE;QAC1B,OAAO,EAAE,IAAI,UAAU,EAAE;QACzB,UAAU,EAAE,EAAE;QACd,uBAAuB,EAAE,IAAI,UAAU,EAAE;KAC1C,CAAA;IAED,MAAM,KAAK,GAAG,MAAM,IAAA,iCAAmB,EACrC,WAAW,EACX,YAAY,EACZ,sCAAqB,EACrB,oDAA4B,EAC5B,IAAI,UAAU,EAAE,EAChB,IAAI,CACL,CAAA;IAED,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,0BAAe,CAAC,CAAA;IAC7C,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAA;AAChF,CAAC"}

package/dist/test/validation/resumptionValidation.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/validation/resumptionValidation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resumptionValidation.test.d.ts","sourceRoot":"","sources":["../../../test/validation/resumptionValidation.test.ts"],"names":[],"mappings":""}

package/dist/test/validation/resumptionValidation.test.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const clientState_1 = require("../../src/clientState");
+const createCommit_1 = require("../../src/createCommit");
+const pskIndex_1 = require("../../src/pskIndex");
+const resumption_1 = require("../../src/resumption");
+const ciphersuite_1 = require("../../src/crypto/ciphersuite");
+const keyPackage_1 = require("../../src/keyPackage");
+const lifetime_1 = require("../../src/lifetime");
+const defaultCapabilities_1 = require("../../src/defaultCapabilities");
+const processMessages_1 = require("../../src/processMessages");
+const IncomingMessageAction_1 = require("../../src/IncomingMessageAction");
+const mlsError_1 = require("../../src/mlsError");
+for (const cs of Object.keys(ciphersuite_1.ciphersuites)) {
+    test(`Reinit Validation ${cs}`, async () => {
+        await reinitValidation(cs);
+    });
+}
+async function reinitValidation(cipherSuite) {
+    const impl = await (0, ciphersuite_1.getCiphersuiteImpl)((0, ciphersuite_1.getCiphersuiteFromName)(cipherSuite));
+    const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
+    const alice = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, (0, defaultCapabilities_1.defaultCapabilities)(), lifetime_1.defaultLifetime, [], impl);
+    const groupId = new TextEncoder().encode("group1");
+    let aliceGroup = await (0, clientState_1.createGroup)(groupId, alice.publicPackage, alice.privatePackage, [], impl);
+    const bobCredential = { credentialType: "basic", identity: new TextEncoder().encode("bob") };
+    const bob = await (0, keyPackage_1.generateKeyPackage)(bobCredential, (0, defaultCapabilities_1.defaultCapabilities)(), lifetime_1.defaultLifetime, [], impl);
+    const addBobProposal = {
+        proposalType: "add",
+        add: {
+            keyPackage: bob.publicPackage,
+        },
+    };
+    const commitResult = await (0, createCommit_1.createCommit)(aliceGroup, pskIndex_1.emptyPskIndex, false, [addBobProposal], impl);
+    aliceGroup = commitResult.newState;
+    let bobGroup = await (0, clientState_1.joinGroup)(commitResult.welcome, bob.publicPackage, bob.privatePackage, pskIndex_1.emptyPskIndex, impl, aliceGroup.ratchetTree);
+    const bobCommitResult = await (0, createCommit_1.createCommit)(bobGroup, pskIndex_1.emptyPskIndex, false, [], impl);
+    bobGroup = bobCommitResult.newState;
+    if (bobCommitResult.commit.wireformat !== "mls_private_message")
+        throw new Error("Expected private message");
+    const processBobCommitResult = await (0, processMessages_1.processMessage)(bobCommitResult.commit, aliceGroup, pskIndex_1.emptyPskIndex, IncomingMessageAction_1.acceptAll, impl);
+    aliceGroup = processBobCommitResult.newState;
+    const bobNewKeyPackage = await (0, keyPackage_1.generateKeyPackage)(bobCredential, (0, defaultCapabilities_1.defaultCapabilities)(), lifetime_1.defaultLifetime, [], impl);
+    const aliceNewKeyPackage = await (0, keyPackage_1.generateKeyPackage)(aliceCredential, (0, defaultCapabilities_1.defaultCapabilities)(), lifetime_1.defaultLifetime, [], impl);
+    const newGroupId = new TextEncoder().encode("new-group1");
+    const reinitCommitResult = await (0, resumption_1.reinitGroup)(aliceGroup, newGroupId, "mls10", cipherSuite, [], impl);
+    aliceGroup = reinitCommitResult.newState;
+    if (reinitCommitResult.commit.wireformat !== "mls_private_message")
+        throw new Error("Expected private message");
+    const processReinitResult = await (0, processMessages_1.processMessage)(reinitCommitResult.commit, bobGroup, (0, clientState_1.makePskIndex)(bobGroup, {}), IncomingMessageAction_1.acceptAll, impl);
+    bobGroup = processReinitResult.newState;
+    expect(bobGroup.groupActiveState.kind).toBe("suspendedPendingReinit");
+    expect(aliceGroup.groupActiveState.kind).toBe("suspendedPendingReinit");
+    const resumeGroupResult = await (0, resumption_1.reinitCreateNewGroup)(aliceGroup, aliceNewKeyPackage.publicPackage, aliceNewKeyPackage.privatePackage, [bobNewKeyPackage.publicPackage], newGroupId, cipherSuite, []);
+    aliceGroup = resumeGroupResult.newState;
+    const reinit = bobGroup.groupActiveState.kind === "suspendedPendingReinit" ? bobGroup.groupActiveState.reinit : undefined;
+    const bobGroupIdChanged = {
+        ...bobGroup,
+        groupActiveState: {
+            kind: "suspendedPendingReinit",
+            reinit: { ...reinit, groupId: new TextEncoder().encode("group-bad") },
+        },
+    };
+    await expect((0, resumption_1.joinGroupFromReinit)(bobGroupIdChanged, resumeGroupResult.welcome, bobNewKeyPackage.publicPackage, bobNewKeyPackage.privatePackage, aliceGroup.ratchetTree)).rejects.toThrow(mlsError_1.ValidationError);
+    const bobVersionChanged = {
+        ...bobGroup,
+        groupActiveState: {
+            kind: "suspendedPendingReinit",
+            reinit: { ...reinit, version: "mls2" },
+        },
+    };
+    await expect((0, resumption_1.joinGroupFromReinit)(bobVersionChanged, resumeGroupResult.welcome, bobNewKeyPackage.publicPackage, bobNewKeyPackage.privatePackage, aliceGroup.ratchetTree)).rejects.toThrow(mlsError_1.ValidationError);
+    const bobExtensionsChanged = {
+        ...bobGroup,
+        groupActiveState: {
+            kind: "suspendedPendingReinit",
+            reinit: { ...reinit, extensions: [{ extensionType: 17, extensionData: new Uint8Array([1]) }] },
+        },
+    };
+    await expect((0, resumption_1.joinGroupFromReinit)(bobExtensionsChanged, resumeGroupResult.welcome, bobNewKeyPackage.publicPackage, bobNewKeyPackage.privatePackage, aliceGroup.ratchetTree)).rejects.toThrow(mlsError_1.ValidationError);
+}
+//# sourceMappingURL=resumptionValidation.test.js.map

package/dist/test/validation/resumptionValidation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resumptionValidation.test.js","sourceRoot":"","sources":["../../../test/validation/resumptionValidation.test.ts"],"names":[],"mappings":";;AAAA,uDAAyF;AACzF,yDAAqD;AACrD,iDAAkD;AAClD,qDAA6F;AAE7F,8DAAwH;AACxH,qDAAyD;AAEzD,iDAAoD;AACpD,uEAAmE;AACnE,+DAA0D;AAC1D,2EAA2D;AAG3D,iDAAoD;AAEpD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,0BAAY,CAAC,EAAE,CAAC;IAC3C,IAAI,CAAC,qBAAqB,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,gBAAgB,CAAC,EAAqB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,WAA4B;IAC1D,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAkB,EAAC,IAAA,oCAAsB,EAAC,WAAW,CAAC,CAAC,CAAA;IAE1E,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;IAC5G,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,IAAA,yCAAmB,GAAE,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAEzG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAElD,IAAI,UAAU,GAAG,MAAM,IAAA,yBAAW,EAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAEhG,MAAM,aAAa,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IACxG,MAAM,GAAG,GAAG,MAAM,IAAA,+BAAkB,EAAC,aAAa,EAAE,IAAA,yCAAmB,GAAE,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAErG,MAAM,cAAc,GAAgB;QAClC,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE;YACH,UAAU,EAAE,GAAG,CAAC,aAAa;SAC9B;KACF,CAAA;IAED,MAAM,YAAY,GAAG,MAAM,IAAA,2BAAY,EAAC,UAAU,EAAE,wBAAa,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAA;IAEjG,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAA;IAElC,IAAI,QAAQ,GAAG,MAAM,IAAA,uBAAS,EAC5B,YAAY,CAAC,OAAQ,EACrB,GAAG,CAAC,aAAa,EACjB,GAAG,CAAC,cAAc,EAClB,wBAAa,EACb,IAAI,EACJ,UAAU,CAAC,WAAW,CACvB,CAAA;IAED,MAAM,eAAe,GAAG,MAAM,IAAA,2BAAY,EAAC,QAAQ,EAAE,wBAAa,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAEpF,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAA;IAEnC,IAAI,eAAe,CAAC,MAAM,CAAC,UAAU,KAAK,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAE5G,MAAM,sBAAsB,GAAG,MAAM,IAAA,gCAAc,EACjD,eAAe,CAAC,MAAM,EACtB,UAAU,EACV,wBAAa,EACb,iCAAS,EACT,IAAI,CACL,CAAA;IAED,UAAU,GAAG,sBAAsB,CAAC,QAAQ,CAAA;IAE5C,MAAM,gBAAgB,GAAG,MAAM,IAAA,+BAAkB,EAAC,aAAa,EAAE,IAAA,yCAAmB,GAAE,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAElH,MAAM,kBAAkB,GAAG,MAAM,IAAA,+BAAkB,EAAC,eAAe,EAAE,IAAA,yCAAmB,GAAE,EAAE,0BAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAEtH,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IAEzD,MAAM,kBAAkB,GAAG,MAAM,IAAA,wBAAW,EAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAEpG,UAAU,GAAG,kBAAkB,CAAC,QAAQ,CAAA;IAExC,IAAI,kBAAkB,CAAC,MAAM,CAAC,UAAU,KAAK,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAE/G,MAAM,mBAAmB,GAAG,MAAM,IAAA,gCAAc,EAC9C,kBAAkB,CAAC,MAAM,EACzB,QAAQ,EACR,IAAA,0BAAY,EAAC,QAAQ,EAAE,EAAE,CAAC,EAC1B,iCAAS,EACT,IAAI,CACL,CAAA;IAED,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAA;IAEvC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;IACrE,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;IAEvE,MAAM,iBAAiB,GAAG,MAAM,IAAA,iCAAoB,EAClD,UAAU,EACV,kBAAkB,CAAC,aAAa,EAChC,kBAAkB,CAAC,cAAc,EACjC,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAChC,UAAU,EACV,WAAW,EACX,EAAE,CACH,CAAA;IAED,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAA;IAEvC,MAAM,MAAM,GACV,QAAQ,CAAC,gBAAgB,CAAC,IAAI,KAAK,wBAAwB,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAE5G,MAAM,iBAAiB,GAAgB;QACrC,GAAG,QAAQ;QACX,gBAAgB,EAAE;YAChB,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,EAAE,GAAG,MAAO,EAAE,OAAO,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE;SACvE;KACF,CAAA;IAED,MAAM,MAAM,CACV,IAAA,gCAAmB,EACjB,iBAAiB,EACjB,iBAAiB,CAAC,OAAQ,EAC1B,gBAAgB,CAAC,aAAa,EAC9B,gBAAgB,CAAC,cAAc,EAC/B,UAAU,CAAC,WAAW,CACvB,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAA;IAElC,MAAM,iBAAiB,GAAgB;QACrC,GAAG,QAAQ;QACX,gBAAgB,EAAE;YAChB,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,EAAE,GAAG,MAAO,EAAE,OAAO,EAAE,MAA6B,EAAE;SAC/D;KACF,CAAA;IAED,MAAM,MAAM,CACV,IAAA,gCAAmB,EACjB,iBAAiB,EACjB,iBAAiB,CAAC,OAAQ,EAC1B,gBAAgB,CAAC,aAAa,EAC9B,gBAAgB,CAAC,cAAc,EAC/B,UAAU,CAAC,WAAW,CACvB,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAA;IAElC,MAAM,oBAAoB,GAAgB;QACxC,GAAG,QAAQ;QACX,gBAAgB,EAAE;YAChB,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,EAAE,GAAG,MAAO,EAAE,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAChG;KACF,CAAA;IAED,MAAM,MAAM,CACV,IAAA,gCAAmB,EACjB,oBAAoB,EACpB,iBAAiB,CAAC,OAAQ,EAC1B,gBAAgB,CAAC,aAAa,EAC9B,gBAAgB,CAAC,cAAc,EAC/B,UAAU,CAAC,WAAW,CACvB,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAA;AACpC,CAAC"}

package/dist/test/validation/utilityValidation.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/validation/utilityValidation.test.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const byteArray_1 = require("../../src/util/byteArray");
+describe("Utility Validation Tests", () => {
+    describe("byteArray utilities", () => {
+        describe("bytesToBase64", () => {
+            it("should convert empty array to empty string", () => {
+                const result = (0, byteArray_1.bytesToBase64)(new Uint8Array());
+                expect(result).toBe("");
+            });
+            it("should convert simple bytes to base64", () => {
+                const bytes = new Uint8Array([1, 2, 3, 4]);
+                const result = (0, byteArray_1.bytesToBase64)(bytes);
+                expect(result).toBe("AQIDBA==");
+            });
+            it("should convert bytes with all zeros", () => {
+                const bytes = new Uint8Array([0, 0, 0, 0]);
+                const result = (0, byteArray_1.bytesToBase64)(bytes);
+                expect(result).toBe("AAAAAA==");
+            });
+            it("should convert bytes with high values", () => {
+                const bytes = new Uint8Array([255, 255, 255, 255]);
+                const result = (0, byteArray_1.bytesToBase64)(bytes);
+                expect(result).toBe("/////w==");
+            });
+            it("should handle single byte", () => {
+                const bytes = new Uint8Array([65]); // ASCII 'A'
+                const result = (0, byteArray_1.bytesToBase64)(bytes);
+                expect(result).toBe("QQ==");
+            });
+            it("should handle two bytes", () => {
+                const bytes = new Uint8Array([65, 66]); // ASCII 'AB'
+                const result = (0, byteArray_1.bytesToBase64)(bytes);
+                expect(result).toBe("QUI=");
+            });
+        });
+        describe("base64ToBytes", () => {
+            it("should convert empty string to empty array", () => {
+                const result = (0, byteArray_1.base64ToBytes)("");
+                expect(result).toEqual(new Uint8Array());
+            });
+            it("should convert base64 to bytes", () => {
+                const result = (0, byteArray_1.base64ToBytes)("AQIDBA==");
+                expect(result).toEqual(new Uint8Array([1, 2, 3, 4]));
+            });
+            it("should convert base64 with all zeros", () => {
+                const result = (0, byteArray_1.base64ToBytes)("AAAAAA==");
+                expect(result).toEqual(new Uint8Array([0, 0, 0, 0]));
+            });
+            it("should convert base64 with high values", () => {
+                const result = (0, byteArray_1.base64ToBytes)("/////w==");
+                expect(result).toEqual(new Uint8Array([255, 255, 255, 255]));
+            });
+            it("should handle single character", () => {
+                const result = (0, byteArray_1.base64ToBytes)("QQ==");
+                expect(result).toEqual(new Uint8Array([65]));
+            });
+            it("should handle two characters", () => {
+                const result = (0, byteArray_1.base64ToBytes)("QUI=");
+                expect(result).toEqual(new Uint8Array([65, 66]));
+            });
+            it("should roundtrip correctly", () => {
+                const original = new Uint8Array([1, 2, 3, 4, 5, 6, 7, 8, 9, 10]);
+                const base64 = (0, byteArray_1.bytesToBase64)(original);
+                const converted = (0, byteArray_1.base64ToBytes)(base64);
+                expect(converted).toEqual(original);
+            });
+        });
+    });
+});
+//# sourceMappingURL=utilityValidation.test.js.map

package/dist/test/validation/utilityValidation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utilityValidation.test.js","sourceRoot":"","sources":["../../../test/validation/utilityValidation.test.ts"],"names":[],"mappings":";;AAAA,wDAAuE;AAEvE,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;YAC7B,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;gBACpD,MAAM,MAAM,GAAG,IAAA,yBAAa,EAAC,IAAI,UAAU,EAAE,CAAC,CAAA;gBAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACzB,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;gBAC/C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,MAAM,MAAM,GAAG,IAAA,yBAAa,EAAC,KAAK,CAAC,CAAA;gBACnC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YACjC,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;gBAC7C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,MAAM,MAAM,GAAG,IAAA,yBAAa,EAAC,KAAK,CAAC,CAAA;gBACnC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YACjC,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;gBAC/C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;gBAClD,MAAM,MAAM,GAAG,IAAA,yBAAa,EAAC,KAAK,CAAC,CAAA;gBACnC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YACjC,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;gBACnC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,YAAY;gBAC/C,MAAM,MAAM,GAAG,IAAA,yBAAa,EAAC,KAAK,CAAC,CAAA;gBACnC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC7B,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;gBACjC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA,CAAC,aAAa;gBACpD,MAAM,MAAM,GAAG,IAAA,yBAAa,EAAC,KAAK,CAAC,CAAA;gBACnC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC7B,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;YAC7B,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;gBACpD,MAAM,MAAM,GAAG,IAAA,yBAAa,EAAC,EAAE,CAAC,CAAA;gBAChC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,UAAU,EAAE,CAAC,CAAA;YAC1C,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;gBACxC,MAAM,MAAM,GAAG,IAAA,yBAAa,EAAC,UAAU,CAAC,CAAA;gBACxC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YACtD,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;gBAC9C,MAAM,MAAM,GAAG,IAAA,yBAAa,EAAC,UAAU,CAAC,CAAA;gBACxC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YACtD,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;gBAChD,MAAM,MAAM,GAAG,IAAA,yBAAa,EAAC,UAAU,CAAC,CAAA;gBACxC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;YAC9D,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;gBACxC,MAAM,MAAM,GAAG,IAAA,yBAAa,EAAC,MAAM,CAAC,CAAA;gBACpC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAC9C,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;gBACtC,MAAM,MAAM,GAAG,IAAA,yBAAa,EAAC,MAAM,CAAC,CAAA;gBACpC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;YAClD,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;gBACpC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;gBAChE,MAAM,MAAM,GAAG,IAAA,yBAAa,EAAC,QAAQ,CAAC,CAAA;gBACtC,MAAM,SAAS,GAAG,IAAA,yBAAa,EAAC,MAAM,CAAC,CAAA;gBACvC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YACrC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AAEJ,CAAC,CAAC,CAAA"}