ts-mls 1.0.1

package/dist/src/externalProposal.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.proposeAddExternal = proposeAddExternal;
+exports.proposeExternal = proposeExternal;
+const extension_1 = require("./extension");
+const externalSender_1 = require("./externalSender");
+const messageProtectionPublic_1 = require("./messageProtectionPublic");
+const mlsError_1 = require("./mlsError");
+const constantTimeCompare_1 = require("./util/constantTimeCompare");
+async function proposeAddExternal(groupInfo, keyPackage, privateKeyPackage, cs, authenticatedData = new Uint8Array()) {
+    const allExtensionsSupported = (0, extension_1.extensionsSupportedByCapabilities)(groupInfo.groupContext.extensions, keyPackage.leafNode.capabilities);
+    if (!allExtensionsSupported)
+        throw new mlsError_1.UsageError("client does not support every extension in the GroupContext");
+    const proposal = {
+        proposalType: "add",
+        add: {
+            keyPackage,
+        },
+    };
+    const result = await (0, messageProtectionPublic_1.protectExternalProposalPublic)(privateKeyPackage.signaturePrivateKey, groupInfo.groupContext, authenticatedData, proposal, { senderType: "new_member_proposal" }, cs);
+    return {
+        wireformat: "mls_public_message",
+        version: groupInfo.groupContext.version,
+        publicMessage: result.publicMessage,
+    };
+}
+async function proposeExternal(groupInfo, proposal, signaturePublicKey, signaturePrivateKey, cs) {
+    const authenticatedData = new Uint8Array();
+    const externalSenderExtensionIndex = groupInfo.extensions.findIndex((ex) => {
+        if (ex.extensionType !== "external_senders")
+            return false;
+        const decoded = (0, externalSender_1.decodeExternalSender)(ex.extensionData, 0);
+        if (decoded === undefined)
+            throw new mlsError_1.ValidationError("Could not decode external_sender extension");
+        return (0, constantTimeCompare_1.constantTimeEqual)(decoded[0].signaturePublicKey, signaturePublicKey);
+    });
+    const result = await (0, messageProtectionPublic_1.protectExternalProposalPublic)(signaturePrivateKey, groupInfo.groupContext, authenticatedData, proposal, { senderType: "external", senderIndex: externalSenderExtensionIndex }, cs);
+    return {
+        wireformat: "mls_public_message",
+        version: groupInfo.groupContext.version,
+        publicMessage: result.publicMessage,
+    };
+}
+//# sourceMappingURL=externalProposal.js.map

package/dist/src/externalProposal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalProposal.js","sourceRoot":"","sources":["../../src/externalProposal.ts"],"names":[],"mappings":";;AAWA,gDAkCC;AAED,0CAgCC;AA9ED,2CAA0E;AAC1E,qDAAuD;AAIvD,uEAAyE;AACzE,yCAAwD;AAExD,oEAA8D;AAEvD,KAAK,UAAU,kBAAkB,CACtC,SAAoB,EACpB,UAAsB,EACtB,iBAAoC,EACpC,EAAmB,EACnB,oBAAgC,IAAI,UAAU,EAAE;IAEhD,MAAM,sBAAsB,GAAG,IAAA,6CAAiC,EAC9D,SAAS,CAAC,YAAY,CAAC,UAAU,EACjC,UAAU,CAAC,QAAQ,CAAC,YAAY,CACjC,CAAA;IACD,IAAI,CAAC,sBAAsB;QAAE,MAAM,IAAI,qBAAU,CAAC,6DAA6D,CAAC,CAAA;IAEhH,MAAM,QAAQ,GAAa;QACzB,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE;YACH,UAAU;SACX;KACF,CAAA;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,uDAA6B,EAChD,iBAAiB,CAAC,mBAAmB,EACrC,SAAS,CAAC,YAAY,EACtB,iBAAiB,EACjB,QAAQ,EACR,EAAE,UAAU,EAAE,qBAAqB,EAAE,EACrC,EAAE,CACH,CAAA;IAED,OAAO;QACL,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,SAAS,CAAC,YAAY,CAAC,OAAO;QACvC,aAAa,EAAE,MAAM,CAAC,aAAa;KACpC,CAAA;AACH,CAAC;AAEM,KAAK,UAAU,eAAe,CACnC,SAAoB,EACpB,QAAkB,EAClB,kBAA8B,EAC9B,mBAA+B,EAC/B,EAAmB;IAEnB,MAAM,iBAAiB,GAAe,IAAI,UAAU,EAAE,CAAA;IAEtD,MAAM,4BAA4B,GAAG,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAa,EAAW,EAAE;QAC7F,IAAI,EAAE,CAAC,aAAa,KAAK,kBAAkB;YAAE,OAAO,KAAK,CAAA;QACzD,MAAM,OAAO,GAAG,IAAA,qCAAoB,EAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAA;QAEzD,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,0BAAe,CAAC,4CAA4C,CAAC,CAAA;QAElG,OAAO,IAAA,uCAAiB,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAA;IAC7E,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,MAAM,IAAA,uDAA6B,EAChD,mBAAmB,EACnB,SAAS,CAAC,YAAY,EACtB,iBAAiB,EACjB,QAAQ,EACR,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,4BAA4B,EAAE,EACrE,EAAE,CACH,CAAA;IAED,OAAO;QACL,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,SAAS,CAAC,YAAY,CAAC,OAAO;QACvC,aAAa,EAAE,MAAM,CAAC,aAAa;KACpC,CAAA;AACH,CAAC"}

package/dist/src/externalSender.d.ts

@@ -0,0 +1,9 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { Credential } from "./credential";
+export type ExternalSender = {
+    signaturePublicKey: Uint8Array;
+    credential: Credential;
+};
+export declare const encodeExternalSender: Encoder<ExternalSender>;
+export declare const decodeExternalSender: Decoder<ExternalSender>;

package/dist/src/externalSender.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalSender.d.ts","sourceRoot":"","sources":["../../src/externalSender.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAqB,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAE/D,OAAO,EAAE,UAAU,EAAsC,MAAM,cAAc,CAAA;AAE7E,MAAM,MAAM,cAAc,GAAG;IAC3B,kBAAkB,EAAE,UAAU,CAAA;IAC9B,UAAU,EAAE,UAAU,CAAA;CACvB,CAAA;AAED,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,cAAc,CAGxD,CAAA;AAED,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,cAAc,CAGxD,CAAA"}

package/dist/src/externalSender.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeExternalSender = exports.encodeExternalSender = void 0;
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const variableLength_1 = require("./codec/variableLength");
+const credential_1 = require("./credential");
+exports.encodeExternalSender = (0, tlsEncoder_1.contramapEncoders)([variableLength_1.encodeVarLenData, credential_1.encodeCredential], (e) => [e.signaturePublicKey, e.credential]);
+exports.decodeExternalSender = (0, tlsDecoder_1.mapDecoders)([variableLength_1.decodeVarLenData, credential_1.decodeCredential], (signaturePublicKey, credential) => ({ signaturePublicKey, credential }));
+//# sourceMappingURL=externalSender.js.map

package/dist/src/externalSender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalSender.js","sourceRoot":"","sources":["../../src/externalSender.ts"],"names":[],"mappings":";;;AAAA,mDAAyD;AACzD,mDAA+D;AAC/D,2DAA2E;AAC3E,6CAA6E;AAOhE,QAAA,oBAAoB,GAA4B,IAAA,8BAAiB,EAC5E,CAAC,iCAAgB,EAAE,6BAAgB,CAAC,EACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,UAAU,CAAU,CACrD,CAAA;AAEY,QAAA,oBAAoB,GAA4B,IAAA,wBAAW,EACtE,CAAC,iCAAgB,EAAE,6BAAgB,CAAC,EACpC,CAAC,kBAAkB,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,CACzE,CAAA"}

package/dist/src/framedContent.d.ts

@@ -0,0 +1,113 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { Commit } from "./commit";
+import { ContentTypeName } from "./contentType";
+import { CiphersuiteImpl } from "./crypto/ciphersuite";
+import { Hash } from "./crypto/hash";
+import { Signature } from "./crypto/signature";
+import { GroupContext } from "./groupContext";
+import { WireformatName } from "./wireformat";
+import { Proposal } from "./proposal";
+import { ProtocolVersionName } from "./protocolVersion";
+import { Sender, SenderExternal, SenderMember, SenderNewMemberCommit, SenderNewMemberProposal } from "./sender";
+export type FramedContentInfo = FramedContentApplicationData | FramedContentProposalData | FramedContentCommitData;
+export type FramedContentApplicationData = {
+    contentType: "application";
+    applicationData: Uint8Array;
+};
+export type FramedContentProposalData = {
+    contentType: "proposal";
+    proposal: Proposal;
+};
+export type FramedContentCommitData = {
+    contentType: "commit";
+    commit: Commit;
+};
+export declare const encodeFramedContentApplicationData: Encoder<FramedContentApplicationData>;
+export declare const encodeFramedContentProposalData: Encoder<FramedContentProposalData>;
+export declare const encodeFramedContentCommitData: Encoder<FramedContentCommitData>;
+export declare const encodeFramedContentInfo: Encoder<FramedContentInfo>;
+export declare const decodeFramedContentApplicationData: Decoder<FramedContentApplicationData>;
+export declare const decodeFramedContentProposalData: Decoder<FramedContentProposalData>;
+export declare const decodeFramedContentCommitData: Decoder<FramedContentCommitData>;
+export declare const decodeFramedContentInfo: Decoder<FramedContentInfo>;
+export declare function toTbs(content: FramedContent, wireformat: WireformatName, context: GroupContext): FramedContentTBS;
+export type FramedContent = FramedContentData & FramedContentInfo;
+export type FramedContentData = {
+    groupId: Uint8Array;
+    epoch: bigint;
+    sender: Sender;
+    authenticatedData: Uint8Array;
+};
+export type FramedContentMember = FramedContent & {
+    sender: SenderMember;
+};
+export type FramedContentNewMemberCommit = FramedContent & {
+    sender: SenderNewMemberCommit;
+};
+export type FramedContentExternal = FramedContent & {
+    sender: SenderExternal;
+};
+export type FramedContentNewMemberProposal = FramedContent & {
+    sender: SenderNewMemberProposal;
+};
+export type FramedContentCommit = FramedContentData & FramedContentCommitData;
+export type FramedContentApplicationOrProposal = FramedContentData & (FramedContentApplicationData | FramedContentProposalData);
+export declare const encodeFramedContent: Encoder<FramedContent>;
+export declare const decodeFramedContent: Decoder<FramedContent>;
+type SenderInfo = SenderInfoMember | SenderInfoNewMemberCommit | SenderInfoExternal | SenderInfoNewMemberProposal;
+type SenderInfoMember = {
+    senderType: "member";
+    context: GroupContext;
+};
+type SenderInfoNewMemberCommit = {
+    senderType: "new_member_commit";
+    context: GroupContext;
+};
+type SenderInfoExternal = {
+    senderType: "external";
+};
+type SenderInfoNewMemberProposal = {
+    senderType: "new_member_proposal";
+};
+export declare const encodeSenderInfo: Encoder<SenderInfo>;
+export type FramedContentTBS = {
+    protocolVersion: ProtocolVersionName;
+    wireformat: WireformatName;
+    content: FramedContent;
+} & SenderInfo;
+export type FramedContentTBSCommit = FramedContentTBS & {
+    content: FramedContentCommit;
+};
+export type FramedContentTBSApplicationOrProposal = FramedContentTBS & {
+    content: FramedContentApplicationOrProposal;
+};
+export type FramedContentTBSExternal = FramedContentTBS & (SenderInfoExternal | SenderInfoNewMemberCommit | SenderInfoNewMemberProposal);
+export declare const encodeFramedContentTBS: Encoder<FramedContentTBS>;
+export type FramedContentAuthData = FramedContentAuthDataCommit | FramedContentAuthDataApplicationOrProposal;
+export type FramedContentAuthDataCommit = {
+    signature: Uint8Array;
+} & FramedContentAuthDataContentCommit;
+export type FramedContentAuthDataApplicationOrProposal = {
+    signature: Uint8Array;
+} & FramedContentAuthDataContentApplicationOrProposal;
+type FramedContentAuthDataContentCommit = {
+    contentType: "commit";
+    confirmationTag: Uint8Array;
+};
+type FramedContentAuthDataContentApplicationOrProposal = {
+    contentType: Exclude<ContentTypeName, "commit">;
+};
+export declare const encodeFramedContentAuthData: Encoder<FramedContentAuthData>;
+export declare const decodeFramedContentAuthDataCommit: Decoder<FramedContentAuthDataContentCommit>;
+export declare function decodeFramedContentAuthData(contentType: ContentTypeName): Decoder<FramedContentAuthData>;
+export declare function verifyFramedContentSignature(signKey: Uint8Array, wireformat: WireformatName, content: FramedContent, auth: FramedContentAuthData, context: GroupContext, s: Signature): Promise<boolean>;
+export declare function signFramedContentTBS(signKey: Uint8Array, tbs: FramedContentTBS, s: Signature): Promise<Uint8Array>;
+export declare function signFramedContentApplicationOrProposal(signKey: Uint8Array, tbs: FramedContentTBSApplicationOrProposal, cs: CiphersuiteImpl): Promise<FramedContentAuthDataApplicationOrProposal>;
+export declare function createConfirmationTag(confirmationKey: Uint8Array, confirmedTranscriptHash: Uint8Array, h: Hash): Promise<Uint8Array>;
+export declare function verifyConfirmationTag(confirmationKey: Uint8Array, tag: Uint8Array, confirmedTranscriptHash: Uint8Array, h: Hash): Promise<boolean>;
+export declare function createContentCommitSignature(groupContext: GroupContext, wireformat: WireformatName, c: Commit, sender: Sender, authenticatedData: Uint8Array, signKey: Uint8Array, s: Signature): Promise<{
+    framedContent: FramedContentCommit;
+    signature: Uint8Array;
+}>;
+export {};

package/dist/src/framedContent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"framedContent.d.ts","sourceRoot":"","sources":["../../src/framedContent.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAA2C,MAAM,oBAAoB,CAAA;AACrF,OAAO,EAAuC,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAEjF,OAAO,EAAE,MAAM,EAA8B,MAAM,UAAU,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAwC,MAAM,eAAe,CAAA;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAA;AACpC,OAAO,EAAE,SAAS,EAAkC,MAAM,oBAAoB,CAAA;AAC9E,OAAO,EAAsB,YAAY,EAAE,MAAM,gBAAgB,CAAA;AACjE,OAAO,EAAoB,cAAc,EAAE,MAAM,cAAc,CAAA;AAC/D,OAAO,EAAkC,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrE,OAAO,EAAyB,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC9E,OAAO,EAGL,MAAM,EACN,cAAc,EACd,YAAY,EACZ,qBAAqB,EACrB,uBAAuB,EACxB,MAAM,UAAU,CAAA;AAEjB,MAAM,MAAM,iBAAiB,GAAG,4BAA4B,GAAG,yBAAyB,GAAG,uBAAuB,CAAA;AAElH,MAAM,MAAM,4BAA4B,GAAG;IAAE,WAAW,EAAE,aAAa,CAAC;IAAC,eAAe,EAAE,UAAU,CAAA;CAAE,CAAA;AACtG,MAAM,MAAM,yBAAyB,GAAG;IAAE,WAAW,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAA;AACvF,MAAM,MAAM,uBAAuB,GAAG;IAAE,WAAW,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAE/E,eAAO,MAAM,kCAAkC,EAAE,OAAO,CAAC,4BAA4B,CAGpF,CAAA;AAED,eAAO,MAAM,+BAA+B,EAAE,OAAO,CAAC,yBAAyB,CAG9E,CAAA;AAED,eAAO,MAAM,6BAA6B,EAAE,OAAO,CAAC,uBAAuB,CAG1E,CAAA;AAED,eAAO,MAAM,uBAAuB,EAAE,OAAO,CAAC,iBAAiB,CAS9D,CAAA;AAED,eAAO,MAAM,kCAAkC,EAAE,OAAO,CAAC,4BAA4B,CAGpF,CAAA;AAED,eAAO,MAAM,+BAA+B,EAAE,OAAO,CAAC,yBAAyB,CAG9E,CAAA;AAED,eAAO,MAAM,6BAA6B,EAAE,OAAO,CAAC,uBAAuB,CAGxE,CAAA;AAEH,eAAO,MAAM,uBAAuB,EAAE,OAAO,CAAC,iBAAiB,CAY9D,CAAA;AAED,wBAAgB,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,GAAG,gBAAgB,CAEjH;AAED,MAAM,MAAM,aAAa,GAAG,iBAAiB,GAAG,iBAAiB,CAAA;AACjE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,UAAU,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,iBAAiB,EAAE,UAAU,CAAA;CAC9B,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,CAAA;AAC1E,MAAM,MAAM,4BAA4B,GAAG,aAAa,GAAG;IAAE,MAAM,EAAE,qBAAqB,CAAA;CAAE,CAAA;AAE5F,MAAM,MAAM,qBAAqB,GAAG,aAAa,GAAG;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE,CAAA;AAC9E,MAAM,MAAM,8BAA8B,GAAG,aAAa,GAAG;IAAE,MAAM,EAAE,uBAAuB,CAAA;CAAE,CAAA;AAEhG,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,GAAG,uBAAuB,CAAA;AAC7E,MAAM,MAAM,kCAAkC,GAAG,iBAAiB,GAChE,CAAC,4BAA4B,GAAG,yBAAyB,CAAC,CAAA;AAE5D,eAAO,MAAM,mBAAmB,EAAE,OAAO,CAAC,aAAa,CAGtD,CAAA;AAED,eAAO,MAAM,mBAAmB,EAAE,OAAO,CAAC,aAAa,CAStD,CAAA;AAED,KAAK,UAAU,GAAG,gBAAgB,GAAG,yBAAyB,GAAG,kBAAkB,GAAG,2BAA2B,CAAA;AACjH,KAAK,gBAAgB,GAAG;IAAE,UAAU,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,CAAA;AACvE,KAAK,yBAAyB,GAAG;IAAE,UAAU,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,CAAA;AAC3F,KAAK,kBAAkB,GAAG;IAAE,UAAU,EAAE,UAAU,CAAA;CAAE,CAAA;AACpD,KAAK,2BAA2B,GAAG;IAAE,UAAU,EAAE,qBAAqB,CAAA;CAAE,CAAA;AAExE,eAAO,MAAM,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAShD,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,eAAe,EAAE,mBAAmB,CAAA;IACpC,UAAU,EAAE,cAAc,CAAA;IAC1B,OAAO,EAAE,aAAa,CAAA;CACvB,GAAG,UAAU,CAAA;AAEd,MAAM,MAAM,sBAAsB,GAAG,gBAAgB,GAAG;IAAE,OAAO,EAAE,mBAAmB,CAAA;CAAE,CAAA;AACxF,MAAM,MAAM,qCAAqC,GAAG,gBAAgB,GAAG;IAAE,OAAO,EAAE,kCAAkC,CAAA;CAAE,CAAA;AACtH,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,GACrD,CAAC,kBAAkB,GAAG,yBAAyB,GAAG,2BAA2B,CAAC,CAAA;AAEhF,eAAO,MAAM,sBAAsB,EAAE,OAAO,CAAC,gBAAgB,CAG5D,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG,2BAA2B,GAAG,0CAA0C,CAAA;AAC5G,MAAM,MAAM,2BAA2B,GAAG;IAAE,SAAS,EAAE,UAAU,CAAA;CAAE,GAAG,kCAAkC,CAAA;AACxG,MAAM,MAAM,0CAA0C,GAAG;IACvD,SAAS,EAAE,UAAU,CAAA;CACtB,GAAG,iDAAiD,CAAA;AAIrD,KAAK,kCAAkC,GAAG;IAAE,WAAW,EAAE,QAAQ,CAAC;IAAC,eAAe,EAAE,UAAU,CAAA;CAAE,CAAA;AAChG,KAAK,iDAAiD,GAAG;IAAE,WAAW,EAAE,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAA;CAAE,CAAA;AAiB5G,eAAO,MAAM,2BAA2B,EAAE,OAAO,CAAC,qBAAqB,CAGtE,CAAA;AAED,eAAO,MAAM,iCAAiC,EAAE,OAAO,CAAC,kCAAkC,CAMzF,CAAA;AAED,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,eAAe,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAcxG;AAED,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,UAAU,EACnB,UAAU,EAAE,cAAc,EAC1B,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,qBAAqB,EAC3B,OAAO,EAAE,YAAY,EACrB,CAAC,EAAE,SAAS,GACX,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAElH;AAED,wBAAsB,sCAAsC,CAC1D,OAAO,EAAE,UAAU,EACnB,GAAG,EAAE,qCAAqC,EAC1C,EAAE,EAAE,eAAe,GAClB,OAAO,CAAC,0CAA0C,CAAC,CAMrD;AAED,wBAAgB,qBAAqB,CACnC,eAAe,EAAE,UAAU,EAC3B,uBAAuB,EAAE,UAAU,EACnC,CAAC,EAAE,IAAI,GACN,OAAO,CAAC,UAAU,CAAC,CAErB;AAED,wBAAgB,qBAAqB,CACnC,eAAe,EAAE,UAAU,EAC3B,GAAG,EAAE,UAAU,EACf,uBAAuB,EAAE,UAAU,EACnC,CAAC,EAAE,IAAI,GACN,OAAO,CAAC,OAAO,CAAC,CAElB;AACD,wBAAsB,4BAA4B,CAChD,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,cAAc,EAC1B,CAAC,EAAE,MAAM,EACT,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,UAAU,EAC7B,OAAO,EAAE,UAAU,EACnB,CAAC,EAAE,SAAS,GACX,OAAO,CAAC;IAAE,aAAa,EAAE,mBAAmB,CAAC;IAAC,SAAS,EAAE,UAAU,CAAA;CAAE,CAAC,CAkBxE"}

package/dist/src/framedContent.js

@@ -0,0 +1,144 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeFramedContentAuthDataCommit = exports.encodeFramedContentAuthData = exports.encodeFramedContentTBS = exports.encodeSenderInfo = exports.decodeFramedContent = exports.encodeFramedContent = exports.decodeFramedContentInfo = exports.decodeFramedContentCommitData = exports.decodeFramedContentProposalData = exports.decodeFramedContentApplicationData = exports.encodeFramedContentInfo = exports.encodeFramedContentCommitData = exports.encodeFramedContentProposalData = exports.encodeFramedContentApplicationData = void 0;
+exports.toTbs = toTbs;
+exports.decodeFramedContentAuthData = decodeFramedContentAuthData;
+exports.verifyFramedContentSignature = verifyFramedContentSignature;
+exports.signFramedContentTBS = signFramedContentTBS;
+exports.signFramedContentApplicationOrProposal = signFramedContentApplicationOrProposal;
+exports.createConfirmationTag = createConfirmationTag;
+exports.verifyConfirmationTag = verifyConfirmationTag;
+exports.createContentCommitSignature = createContentCommitSignature;
+const number_1 = require("./codec/number");
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const variableLength_1 = require("./codec/variableLength");
+const commit_1 = require("./commit");
+const contentType_1 = require("./contentType");
+const signature_1 = require("./crypto/signature");
+const groupContext_1 = require("./groupContext");
+const wireformat_1 = require("./wireformat");
+const proposal_1 = require("./proposal");
+const protocolVersion_1 = require("./protocolVersion");
+const sender_1 = require("./sender");
+exports.encodeFramedContentApplicationData = (0, tlsEncoder_1.contramapEncoders)([contentType_1.encodeContentType, variableLength_1.encodeVarLenData], (f) => [f.contentType, f.applicationData]);
+exports.encodeFramedContentProposalData = (0, tlsEncoder_1.contramapEncoders)([contentType_1.encodeContentType, proposal_1.encodeProposal], (f) => [f.contentType, f.proposal]);
+exports.encodeFramedContentCommitData = (0, tlsEncoder_1.contramapEncoders)([contentType_1.encodeContentType, commit_1.encodeCommit], (f) => [f.contentType, f.commit]);
+const encodeFramedContentInfo = (fc) => {
+    switch (fc.contentType) {
+        case "application":
+            return (0, exports.encodeFramedContentApplicationData)(fc);
+        case "proposal":
+            return (0, exports.encodeFramedContentProposalData)(fc);
+        case "commit":
+            return (0, exports.encodeFramedContentCommitData)(fc);
+    }
+};
+exports.encodeFramedContentInfo = encodeFramedContentInfo;
+exports.decodeFramedContentApplicationData = (0, tlsDecoder_1.mapDecoder)(variableLength_1.decodeVarLenData, (applicationData) => ({ contentType: "application", applicationData }));
+exports.decodeFramedContentProposalData = (0, tlsDecoder_1.mapDecoder)(proposal_1.decodeProposal, (proposal) => ({ contentType: "proposal", proposal }));
+exports.decodeFramedContentCommitData = (0, tlsDecoder_1.mapDecoder)(commit_1.decodeCommit, (commit) => ({
+    contentType: "commit",
+    commit,
+}));
+exports.decodeFramedContentInfo = (0, tlsDecoder_1.flatMapDecoder)(contentType_1.decodeContentType, (contentType) => {
+    switch (contentType) {
+        case "application":
+            return exports.decodeFramedContentApplicationData;
+        case "proposal":
+            return exports.decodeFramedContentProposalData;
+        case "commit":
+            return exports.decodeFramedContentCommitData;
+    }
+});
+function toTbs(content, wireformat, context) {
+    return { protocolVersion: context.version, wireformat, content, senderType: content.sender.senderType, context };
+}
+exports.encodeFramedContent = (0, tlsEncoder_1.contramapEncoders)([variableLength_1.encodeVarLenData, number_1.encodeUint64, sender_1.encodeSender, variableLength_1.encodeVarLenData, exports.encodeFramedContentInfo], (fc) => [fc.groupId, fc.epoch, fc.sender, fc.authenticatedData, fc]);
+exports.decodeFramedContent = (0, tlsDecoder_1.mapDecoders)([variableLength_1.decodeVarLenData, number_1.decodeUint64, sender_1.decodeSender, variableLength_1.decodeVarLenData, exports.decodeFramedContentInfo], (groupId, epoch, sender, authenticatedData, info) => ({
+    groupId,
+    epoch,
+    sender,
+    authenticatedData,
+    ...info,
+}));
+const encodeSenderInfo = (info) => {
+    switch (info.senderType) {
+        case "member":
+        case "new_member_commit":
+            return (0, groupContext_1.encodeGroupContext)(info.context);
+        case "external":
+        case "new_member_proposal":
+            return new Uint8Array();
+    }
+};
+exports.encodeSenderInfo = encodeSenderInfo;
+exports.encodeFramedContentTBS = (0, tlsEncoder_1.contramapEncoders)([protocolVersion_1.encodeProtocolVersion, wireformat_1.encodeWireformat, exports.encodeFramedContent, exports.encodeSenderInfo], (f) => [f.protocolVersion, f.wireformat, f.content, f]);
+const encodeFramedContentAuthDataContent = (authData) => {
+    switch (authData.contentType) {
+        case "commit":
+            return encodeFramedContentAuthDataCommit(authData);
+        case "application":
+        case "proposal":
+            return new Uint8Array();
+    }
+};
+const encodeFramedContentAuthDataCommit = (0, tlsEncoder_1.contramapEncoder)(variableLength_1.encodeVarLenData, (data) => data.confirmationTag);
+exports.encodeFramedContentAuthData = (0, tlsEncoder_1.contramapEncoders)([variableLength_1.encodeVarLenData, encodeFramedContentAuthDataContent], (d) => [d.signature, d]);
+exports.decodeFramedContentAuthDataCommit = (0, tlsDecoder_1.mapDecoder)(variableLength_1.decodeVarLenData, (confirmationTag) => ({
+    contentType: "commit",
+    confirmationTag,
+}));
+function decodeFramedContentAuthData(contentType) {
+    switch (contentType) {
+        case "commit":
+            return (0, tlsDecoder_1.mapDecoders)([variableLength_1.decodeVarLenData, exports.decodeFramedContentAuthDataCommit], (signature, commitData) => ({
+                signature,
+                ...commitData,
+            }));
+        case "application":
+        case "proposal":
+            return (0, tlsDecoder_1.mapDecoder)(variableLength_1.decodeVarLenData, (signature) => ({
+                signature,
+                contentType,
+            }));
+    }
+}
+async function verifyFramedContentSignature(signKey, wireformat, content, auth, context, s) {
+    return (0, signature_1.verifyWithLabel)(signKey, "FramedContentTBS", (0, exports.encodeFramedContentTBS)(toTbs(content, wireformat, context)), auth.signature, s);
+}
+function signFramedContentTBS(signKey, tbs, s) {
+    return (0, signature_1.signWithLabel)(signKey, "FramedContentTBS", (0, exports.encodeFramedContentTBS)(tbs), s);
+}
+async function signFramedContentApplicationOrProposal(signKey, tbs, cs) {
+    const signature = await signFramedContentTBS(signKey, tbs, cs.signature);
+    return {
+        contentType: tbs.content.contentType,
+        signature,
+    };
+}
+function createConfirmationTag(confirmationKey, confirmedTranscriptHash, h) {
+    return h.mac(confirmationKey, confirmedTranscriptHash);
+}
+function verifyConfirmationTag(confirmationKey, tag, confirmedTranscriptHash, h) {
+    return h.verifyMac(confirmationKey, tag, confirmedTranscriptHash);
+}
+async function createContentCommitSignature(groupContext, wireformat, c, sender, authenticatedData, signKey, s) {
+    const tbs = {
+        protocolVersion: groupContext.version,
+        wireformat,
+        content: {
+            contentType: "commit",
+            commit: c,
+            groupId: groupContext.groupId,
+            epoch: groupContext.epoch,
+            sender,
+            authenticatedData,
+        },
+        senderType: "member",
+        context: groupContext,
+    };
+    const signature = await signFramedContentTBS(signKey, tbs, s);
+    return { framedContent: tbs.content, signature };
+}
+//# sourceMappingURL=framedContent.js.map

package/dist/src/framedContent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"framedContent.js","sourceRoot":"","sources":["../../src/framedContent.ts"],"names":[],"mappings":";;;AAoFA,sBAEC;AA4GD,kEAcC;AAED,oEAeC;AAED,oDAEC;AAED,wFAUC;AAED,sDAMC;AAED,sDAOC;AACD,oEA0BC;AA7RD,2CAA2D;AAC3D,mDAAqF;AACrF,mDAAiF;AACjF,2DAA2E;AAC3E,qCAA6D;AAC7D,+CAAqF;AAGrF,kDAA8E;AAC9E,iDAAiE;AACjE,6CAA+D;AAC/D,yCAAqE;AACrE,uDAA8E;AAC9E,qCAQiB;AAQJ,QAAA,kCAAkC,GAA0C,IAAA,8BAAiB,EACxG,CAAC,+BAAiB,EAAE,iCAAgB,CAAC,EACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,eAAe,CAAU,CACnD,CAAA;AAEY,QAAA,+BAA+B,GAAuC,IAAA,8BAAiB,EAClG,CAAC,+BAAiB,EAAE,yBAAc,CAAC,EACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAU,CAC5C,CAAA;AAEY,QAAA,6BAA6B,GAAqC,IAAA,8BAAiB,EAC9F,CAAC,+BAAiB,EAAE,qBAAY,CAAC,EACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAU,CAC1C,CAAA;AAEM,MAAM,uBAAuB,GAA+B,CAAC,EAAE,EAAE,EAAE;IACxE,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC;QACvB,KAAK,aAAa;YAChB,OAAO,IAAA,0CAAkC,EAAC,EAAE,CAAC,CAAA;QAC/C,KAAK,UAAU;YACb,OAAO,IAAA,uCAA+B,EAAC,EAAE,CAAC,CAAA;QAC5C,KAAK,QAAQ;YACX,OAAO,IAAA,qCAA6B,EAAC,EAAE,CAAC,CAAA;IAC5C,CAAC;AACH,CAAC,CAAA;AATY,QAAA,uBAAuB,2BASnC;AAEY,QAAA,kCAAkC,GAA0C,IAAA,uBAAU,EACjG,iCAAgB,EAChB,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CACvE,CAAA;AAEY,QAAA,+BAA+B,GAAuC,IAAA,uBAAU,EAC3F,yBAAc,EACd,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CACtD,CAAA;AAEY,QAAA,6BAA6B,GAAqC,IAAA,uBAAU,EAAC,qBAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnH,WAAW,EAAE,QAAQ;IACrB,MAAM;CACP,CAAC,CAAC,CAAA;AAEU,QAAA,uBAAuB,GAA+B,IAAA,2BAAc,EAC/E,+BAAiB,EACjB,CAAC,WAAW,EAA8B,EAAE;IAC1C,QAAQ,WAAW,EAAE,CAAC;QACpB,KAAK,aAAa;YAChB,OAAO,0CAAkC,CAAA;QAC3C,KAAK,UAAU;YACb,OAAO,uCAA+B,CAAA;QACxC,KAAK,QAAQ;YACX,OAAO,qCAA6B,CAAA;IACxC,CAAC;AACH,CAAC,CACF,CAAA;AAED,SAAgB,KAAK,CAAC,OAAsB,EAAE,UAA0B,EAAE,OAAqB;IAC7F,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,CAAA;AAClH,CAAC;AAoBY,QAAA,mBAAmB,GAA2B,IAAA,8BAAiB,EAC1E,CAAC,iCAAgB,EAAE,qBAAY,EAAE,qBAAY,EAAE,iCAAgB,EAAE,+BAAuB,CAAC,EACzF,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAU,CAC7E,CAAA;AAEY,QAAA,mBAAmB,GAA2B,IAAA,wBAAW,EACpE,CAAC,iCAAgB,EAAE,qBAAY,EAAE,qBAAY,EAAE,iCAAgB,EAAE,+BAAuB,CAAC,EACzF,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACpD,OAAO;IACP,KAAK;IACL,MAAM;IACN,iBAAiB;IACjB,GAAG,IAAI;CACR,CAAC,CACH,CAAA;AAQM,MAAM,gBAAgB,GAAwB,CAAC,IAAI,EAAE,EAAE;IAC5D,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,QAAQ,CAAC;QACd,KAAK,mBAAmB;YACtB,OAAO,IAAA,iCAAkB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACzC,KAAK,UAAU,CAAC;QAChB,KAAK,qBAAqB;YACxB,OAAO,IAAI,UAAU,EAAE,CAAA;IAC3B,CAAC;AACH,CAAC,CAAA;AATY,QAAA,gBAAgB,oBAS5B;AAaY,QAAA,sBAAsB,GAA8B,IAAA,8BAAiB,EAChF,CAAC,uCAAqB,EAAE,6BAAgB,EAAE,2BAAmB,EAAE,wBAAgB,CAAC,EAChF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAU,CAChE,CAAA;AAaD,MAAM,kCAAkC,GAA0C,CAAC,QAAQ,EAAE,EAAE;IAC7F,QAAQ,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,iCAAiC,CAAC,QAAQ,CAAC,CAAA;QACpD,KAAK,aAAa,CAAC;QACnB,KAAK,UAAU;YACb,OAAO,IAAI,UAAU,EAAE,CAAA;IAC3B,CAAC;AACH,CAAC,CAAA;AAED,MAAM,iCAAiC,GAAgD,IAAA,6BAAgB,EACrG,iCAAgB,EAChB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAC/B,CAAA;AAEY,QAAA,2BAA2B,GAAmC,IAAA,8BAAiB,EAC1F,CAAC,iCAAgB,EAAE,kCAAkC,CAAC,EACtD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAU,CACjC,CAAA;AAEY,QAAA,iCAAiC,GAAgD,IAAA,uBAAU,EACtG,iCAAgB,EAChB,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACpB,WAAW,EAAE,QAAQ;IACrB,eAAe;CAChB,CAAC,CACH,CAAA;AAED,SAAgB,2BAA2B,CAAC,WAA4B;IACtE,QAAQ,WAAW,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,IAAA,wBAAW,EAAC,CAAC,iCAAgB,EAAE,yCAAiC,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;gBACpG,SAAS;gBACT,GAAG,UAAU;aACd,CAAC,CAAC,CAAA;QACL,KAAK,aAAa,CAAC;QACnB,KAAK,UAAU;YACb,OAAO,IAAA,uBAAU,EAAC,iCAAgB,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAClD,SAAS;gBACT,WAAW;aACZ,CAAC,CAAC,CAAA;IACP,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAChD,OAAmB,EACnB,UAA0B,EAC1B,OAAsB,EACtB,IAA2B,EAC3B,OAAqB,EACrB,CAAY;IAEZ,OAAO,IAAA,2BAAe,EACpB,OAAO,EACP,kBAAkB,EAClB,IAAA,8BAAsB,EAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,EAC3D,IAAI,CAAC,SAAS,EACd,CAAC,CACF,CAAA;AACH,CAAC;AAED,SAAgB,oBAAoB,CAAC,OAAmB,EAAE,GAAqB,EAAE,CAAY;IAC3F,OAAO,IAAA,yBAAa,EAAC,OAAO,EAAE,kBAAkB,EAAE,IAAA,8BAAsB,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;AACnF,CAAC;AAEM,KAAK,UAAU,sCAAsC,CAC1D,OAAmB,EACnB,GAA0C,EAC1C,EAAmB;IAEnB,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,CAAA;IACxE,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW;QACpC,SAAS;KACV,CAAA;AACH,CAAC;AAED,SAAgB,qBAAqB,CACnC,eAA2B,EAC3B,uBAAmC,EACnC,CAAO;IAEP,OAAO,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAA;AACxD,CAAC;AAED,SAAgB,qBAAqB,CACnC,eAA2B,EAC3B,GAAe,EACf,uBAAmC,EACnC,CAAO;IAEP,OAAO,CAAC,CAAC,SAAS,CAAC,eAAe,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAA;AACnE,CAAC;AACM,KAAK,UAAU,4BAA4B,CAChD,YAA0B,EAC1B,UAA0B,EAC1B,CAAS,EACT,MAAc,EACd,iBAA6B,EAC7B,OAAmB,EACnB,CAAY;IAEZ,MAAM,GAAG,GAA2B;QAClC,eAAe,EAAE,YAAY,CAAC,OAAO;QACrC,UAAU;QACV,OAAO,EAAE;YACP,WAAW,EAAE,QAAQ;YACrB,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,MAAM;YACN,iBAAiB;SAClB;QACD,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,YAAY;KACtB,CAAA;IAED,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;IAC7D,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,CAAA;AAClD,CAAC"}

package/dist/src/grease.d.ts

@@ -0,0 +1,16 @@
+import { Capabilities } from "./capabilities";
+import { CredentialTypeName } from "./credentialType";
+import { CiphersuiteName } from "./crypto/ciphersuite";
+import { Extension } from "./extension";
+export declare const greaseValues: number[];
+export type GreaseConfig = {
+    probabilityPerGreaseValue: number;
+};
+export declare const defaultGreaseConfig: {
+    probabilityPerGreaseValue: number;
+};
+export declare function grease(greaseConfig: GreaseConfig): number[];
+export declare function greaseCiphersuites(greaseConfig: GreaseConfig): CiphersuiteName[];
+export declare function greaseCredentials(greaseConfig: GreaseConfig): CredentialTypeName[];
+export declare function greaseExtensions(greaseConfig: GreaseConfig): Extension[];
+export declare function greaseCapabilities(config: GreaseConfig, capabilities: Capabilities): Capabilities;

package/dist/src/grease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grease.d.ts","sourceRoot":"","sources":["../../src/grease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAEvC,eAAO,MAAM,YAAY,UAGxB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,yBAAyB,EAAE,MAAM,CAAA;CAClC,CAAA;AAED,eAAO,MAAM,mBAAmB;;CAE/B,CAAA;AAED,wBAAgB,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,MAAM,EAAE,CAE3D;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,YAAY,GAAG,eAAe,EAAE,CAEhF;AAED,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,YAAY,GAAG,kBAAkB,EAAE,CAElF;AAED,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,YAAY,GAAG,SAAS,EAAE,CAExE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,GAAG,YAAY,CAQjG"}

package/dist/src/grease.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultGreaseConfig = exports.greaseValues = void 0;
+exports.grease = grease;
+exports.greaseCiphersuites = greaseCiphersuites;
+exports.greaseCredentials = greaseCredentials;
+exports.greaseExtensions = greaseExtensions;
+exports.greaseCapabilities = greaseCapabilities;
+exports.greaseValues = [
+    0x0a0a, 0x1a1a, 0x2a2a, 0x3a3a, 0x4a4a, 0x5a5a, 0x6a6a, 0x7a7a, 0x8a8a, 0x9a9a, 0xaaaa, 0xbaba, 0xcaca, 0xdada,
+    0xeaea,
+];
+exports.defaultGreaseConfig = {
+    probabilityPerGreaseValue: 0.1,
+};
+function grease(greaseConfig) {
+    return exports.greaseValues.filter(() => greaseConfig.probabilityPerGreaseValue > Math.random());
+}
+function greaseCiphersuites(greaseConfig) {
+    return grease(greaseConfig).map((n) => n.toString());
+}
+function greaseCredentials(greaseConfig) {
+    return grease(greaseConfig).map((n) => n.toString());
+}
+function greaseExtensions(greaseConfig) {
+    return grease(greaseConfig).map((n) => ({ extensionType: n, extensionData: new Uint8Array() }));
+}
+function greaseCapabilities(config, capabilities) {
+    return {
+        ciphersuites: [...capabilities.ciphersuites, ...greaseCiphersuites(config)],
+        credentials: [...capabilities.credentials, ...greaseCredentials(config)],
+        extensions: [...capabilities.extensions, ...grease(config)],
+        proposals: [...capabilities.proposals, ...grease(config)],
+        versions: capabilities.versions,
+    };
+}
+//# sourceMappingURL=grease.js.map

package/dist/src/grease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grease.js","sourceRoot":"","sources":["../../src/grease.ts"],"names":[],"mappings":";;;AAkBA,wBAEC;AAED,gDAEC;AAED,8CAEC;AAED,4CAEC;AAED,gDAQC;AArCY,QAAA,YAAY,GAAG;IAC1B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC9G,MAAM;CACP,CAAA;AAMY,QAAA,mBAAmB,GAAG;IACjC,yBAAyB,EAAE,GAAG;CAC/B,CAAA;AAED,SAAgB,MAAM,CAAC,YAA0B;IAC/C,OAAO,oBAAY,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,yBAAyB,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;AAC1F,CAAC;AAED,SAAgB,kBAAkB,CAAC,YAA0B;IAC3D,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAqB,CAAC,CAAA;AACzE,CAAC;AAED,SAAgB,iBAAiB,CAAC,YAA0B;IAC1D,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAwB,CAAC,CAAA;AAC5E,CAAC;AAED,SAAgB,gBAAgB,CAAC,YAA0B;IACzD,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC,CAAA;AACjG,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAAoB,EAAE,YAA0B;IACjF,OAAO;QACL,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,YAAY,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3E,WAAW,EAAE,CAAC,GAAG,YAAY,CAAC,WAAW,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACxE,UAAU,EAAE,CAAC,GAAG,YAAY,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,SAAS,EAAE,CAAC,GAAG,YAAY,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,QAAQ,EAAE,YAAY,CAAC,QAAQ;KAChC,CAAA;AACH,CAAC"}

package/dist/src/groupContext.d.ts

@@ -0,0 +1,19 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { CiphersuiteName } from "./crypto/ciphersuite";
+import { Kdf } from "./crypto/kdf";
+import { Extension } from "./extension";
+import { ProtocolVersionName } from "./protocolVersion";
+export type GroupContext = {
+    version: ProtocolVersionName;
+    cipherSuite: CiphersuiteName;
+    groupId: Uint8Array;
+    epoch: bigint;
+    treeHash: Uint8Array;
+    confirmedTranscriptHash: Uint8Array;
+    extensions: Extension[];
+};
+export declare const encodeGroupContext: Encoder<GroupContext>;
+export declare const decodeGroupContext: Decoder<GroupContext>;
+export declare function extractEpochSecret(context: GroupContext, joinerSecret: Uint8Array, kdf: Kdf, pskSecret?: Uint8Array): Promise<Uint8Array<ArrayBufferLike>>;
+export declare function extractJoinerSecret(context: GroupContext, previousInitSecret: Uint8Array, commitSecret: Uint8Array, kdf: Kdf): Promise<Uint8Array<ArrayBufferLike>>;

package/dist/src/groupContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"groupContext.d.ts","sourceRoot":"","sources":["../../src/groupContext.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAe,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAqB,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAE/D,OAAO,EAAE,eAAe,EAAwC,MAAM,sBAAsB,CAAA;AAE5F,OAAO,EAAmB,GAAG,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,EAAoC,SAAS,EAAE,MAAM,aAAa,CAAA;AAEzE,OAAO,EAAgD,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAErG,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,mBAAmB,CAAA;IAC5B,WAAW,EAAE,eAAe,CAAA;IAC5B,OAAO,EAAE,UAAU,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,UAAU,CAAA;IACpB,uBAAuB,EAAE,UAAU,CAAA;IACnC,UAAU,EAAE,SAAS,EAAE,CAAA;CACxB,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,YAAY,CAYpD,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,YAAY,CAmBpD,CAAA;AAED,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,YAAY,EACrB,YAAY,EAAE,UAAU,EACxB,GAAG,EAAE,GAAG,EACR,SAAS,CAAC,EAAE,UAAU,wCAMvB;AAED,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,YAAY,EACrB,kBAAkB,EAAE,UAAU,EAC9B,YAAY,EAAE,UAAU,EACxB,GAAG,EAAE,GAAG,wCAKT"}

package/dist/src/groupContext.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeGroupContext = exports.encodeGroupContext = void 0;
+exports.extractEpochSecret = extractEpochSecret;
+exports.extractJoinerSecret = extractJoinerSecret;
+const number_1 = require("./codec/number");
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const variableLength_1 = require("./codec/variableLength");
+const ciphersuite_1 = require("./crypto/ciphersuite");
+const kdf_1 = require("./crypto/kdf");
+const extension_1 = require("./extension");
+const protocolVersion_1 = require("./protocolVersion");
+exports.encodeGroupContext = (0, tlsEncoder_1.contramapEncoders)([
+    protocolVersion_1.encodeProtocolVersion,
+    ciphersuite_1.encodeCiphersuite,
+    variableLength_1.encodeVarLenData, // groupId
+    number_1.encodeUint64, // epoch
+    variableLength_1.encodeVarLenData, // treeHash
+    variableLength_1.encodeVarLenData, // confirmedTranscriptHash
+    (0, variableLength_1.encodeVarLenType)(extension_1.encodeExtension),
+], (gc) => [gc.version, gc.cipherSuite, gc.groupId, gc.epoch, gc.treeHash, gc.confirmedTranscriptHash, gc.extensions]);
+exports.decodeGroupContext = (0, tlsDecoder_1.mapDecoders)([
+    protocolVersion_1.decodeProtocolVersion,
+    ciphersuite_1.decodeCiphersuite,
+    variableLength_1.decodeVarLenData, // groupId
+    number_1.decodeUint64, // epoch
+    variableLength_1.decodeVarLenData, // treeHash
+    variableLength_1.decodeVarLenData, // confirmedTranscriptHash
+    (0, variableLength_1.decodeVarLenType)(extension_1.decodeExtension),
+], (version, cipherSuite, groupId, epoch, treeHash, confirmedTranscriptHash, extensions) => ({
+    version,
+    cipherSuite,
+    groupId,
+    epoch,
+    treeHash,
+    confirmedTranscriptHash,
+    extensions,
+}));
+async function extractEpochSecret(context, joinerSecret, kdf, pskSecret) {
+    const psk = pskSecret === undefined ? new Uint8Array(kdf.size) : pskSecret;
+    const extracted = await kdf.extract(joinerSecret, psk);
+    return (0, kdf_1.expandWithLabel)(extracted, "epoch", (0, exports.encodeGroupContext)(context), kdf.size, kdf);
+}
+async function extractJoinerSecret(context, previousInitSecret, commitSecret, kdf) {
+    const extracted = await kdf.extract(previousInitSecret, commitSecret);
+    return (0, kdf_1.expandWithLabel)(extracted, "joiner", (0, exports.encodeGroupContext)(context), kdf.size, kdf);
+}
+//# sourceMappingURL=groupContext.js.map

package/dist/src/groupContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"groupContext.js","sourceRoot":"","sources":["../../src/groupContext.ts"],"names":[],"mappings":";;;AAwDA,gDAUC;AAED,kDASC;AA7ED,2CAA2D;AAC3D,mDAAyD;AACzD,mDAA+D;AAC/D,2DAA+G;AAC/G,sDAA4F;AAE5F,sCAAmD;AACnD,2CAAyE;AAEzE,uDAAqG;AAYxF,QAAA,kBAAkB,GAA0B,IAAA,8BAAiB,EACxE;IACE,uCAAqB;IACrB,+BAAiB;IACjB,iCAAgB,EAAE,UAAU;IAC5B,qBAAY,EAAE,QAAQ;IACtB,iCAAgB,EAAE,WAAW;IAC7B,iCAAgB,EAAE,0BAA0B;IAC5C,IAAA,iCAAgB,EAAC,2BAAe,CAAC;CAClC,EACD,CAAC,EAAE,EAAE,EAAE,CACL,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,uBAAuB,EAAE,EAAE,CAAC,UAAU,CAAU,CACtH,CAAA;AAEY,QAAA,kBAAkB,GAA0B,IAAA,wBAAW,EAClE;IACE,uCAAqB;IACrB,+BAAiB;IACjB,iCAAgB,EAAE,UAAU;IAC5B,qBAAY,EAAE,QAAQ;IACtB,iCAAgB,EAAE,WAAW;IAC7B,iCAAgB,EAAE,0BAA0B;IAC5C,IAAA,iCAAgB,EAAC,2BAAe,CAAC;CAClC,EACD,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,uBAAuB,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACxF,OAAO;IACP,WAAW;IACX,OAAO;IACP,KAAK;IACL,QAAQ;IACR,uBAAuB;IACvB,UAAU;CACX,CAAC,CACH,CAAA;AAEM,KAAK,UAAU,kBAAkB,CACtC,OAAqB,EACrB,YAAwB,EACxB,GAAQ,EACR,SAAsB;IAEtB,MAAM,GAAG,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1E,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;IAEtD,OAAO,IAAA,qBAAe,EAAC,SAAS,EAAE,OAAO,EAAE,IAAA,0BAAkB,EAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;AACxF,CAAC;AAEM,KAAK,UAAU,mBAAmB,CACvC,OAAqB,EACrB,kBAA8B,EAC9B,YAAwB,EACxB,GAAQ;IAER,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAA;IAErE,OAAO,IAAA,qBAAe,EAAC,SAAS,EAAE,QAAQ,EAAE,IAAA,0BAAkB,EAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;AACzF,CAAC"}

package/dist/src/groupInfo.d.ts

@@ -0,0 +1,26 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { CiphersuiteImpl } from "./crypto/ciphersuite";
+import { Kdf } from "./crypto/kdf";
+import { Signature } from "./crypto/signature";
+import { Extension } from "./extension";
+import { GroupContext } from "./groupContext";
+import { RatchetTree } from "./ratchetTree";
+export type GroupInfoTBS = {
+    groupContext: GroupContext;
+    extensions: Extension[];
+    confirmationTag: Uint8Array;
+    signer: number;
+};
+export declare const encodeGroupInfoTBS: Encoder<GroupInfoTBS>;
+export declare const decodeGroupInfoTBS: Decoder<GroupInfoTBS>;
+export type GroupInfo = GroupInfoTBS & {
+    signature: Uint8Array;
+};
+export declare const encodeGroupInfo: Encoder<GroupInfo>;
+export declare const decodeGroupInfo: Decoder<GroupInfo>;
+export declare function ratchetTreeFromExtension(info: GroupInfo): RatchetTree | undefined;
+export declare function signGroupInfo(tbs: GroupInfoTBS, privateKey: Uint8Array, s: Signature): Promise<GroupInfo>;
+export declare function verifyGroupInfoSignature(gi: GroupInfo, publicKey: Uint8Array, s: Signature): Promise<boolean>;
+export declare function verifyGroupInfoConfirmationTag(gi: GroupInfo, joinerSecret: Uint8Array, pskSecret: Uint8Array, cs: CiphersuiteImpl): Promise<boolean>;
+export declare function extractWelcomeSecret(joinerSecret: Uint8Array, pskSecret: Uint8Array, kdf: Kdf): Promise<Uint8Array<ArrayBufferLike>>;

package/dist/src/groupInfo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"groupInfo.d.ts","sourceRoot":"","sources":["../../src/groupInfo.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAe,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAqB,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAgB,GAAG,EAAE,MAAM,cAAc,CAAA;AAChD,OAAO,EAAE,SAAS,EAAkC,MAAM,oBAAoB,CAAA;AAC9E,OAAO,EAAoC,SAAS,EAAE,MAAM,aAAa,CAAA;AACzE,OAAO,EAA8D,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAEzG,OAAO,EAAqB,WAAW,EAAE,MAAM,eAAe,CAAA;AAE9D,MAAM,MAAM,YAAY,GAAG;IACzB,YAAY,EAAE,YAAY,CAAA;IAC1B,UAAU,EAAE,SAAS,EAAE,CAAA;IACvB,eAAe,EAAE,UAAU,CAAA;IAC3B,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,YAAY,CAGpD,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,YAAY,CAQpD,CAAA;AAED,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG;IACrC,SAAS,EAAE,UAAU,CAAA;CACtB,CAAA;AAED,eAAO,MAAM,eAAe,EAAE,OAAO,CAAC,SAAS,CAG9C,CAAA;AAED,eAAO,MAAM,eAAe,EAAE,OAAO,CAAC,SAAS,CAM9C,CAAA;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAQjF;AAED,wBAAsB,aAAa,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAG/G;AAED,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAE7G;AAED,wBAAsB,8BAA8B,CAClD,EAAE,EAAE,SAAS,EACb,YAAY,EAAE,UAAU,EACxB,SAAS,EAAE,UAAU,EACrB,EAAE,EAAE,eAAe,GAClB,OAAO,CAAC,OAAO,CAAC,CAIlB;AAED,wBAAsB,oBAAoB,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,wCAEnG"}

package/dist/src/groupInfo.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeGroupInfo = exports.encodeGroupInfo = exports.decodeGroupInfoTBS = exports.encodeGroupInfoTBS = void 0;
+exports.ratchetTreeFromExtension = ratchetTreeFromExtension;
+exports.signGroupInfo = signGroupInfo;
+exports.verifyGroupInfoSignature = verifyGroupInfoSignature;
+exports.verifyGroupInfoConfirmationTag = verifyGroupInfoConfirmationTag;
+exports.extractWelcomeSecret = extractWelcomeSecret;
+const number_1 = require("./codec/number");
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const variableLength_1 = require("./codec/variableLength");
+const kdf_1 = require("./crypto/kdf");
+const signature_1 = require("./crypto/signature");
+const extension_1 = require("./extension");
+const groupContext_1 = require("./groupContext");
+const mlsError_1 = require("./mlsError");
+const ratchetTree_1 = require("./ratchetTree");
+exports.encodeGroupInfoTBS = (0, tlsEncoder_1.contramapEncoders)([groupContext_1.encodeGroupContext, (0, variableLength_1.encodeVarLenType)(extension_1.encodeExtension), variableLength_1.encodeVarLenData, number_1.encodeUint32], (g) => [g.groupContext, g.extensions, g.confirmationTag, g.signer]);
+exports.decodeGroupInfoTBS = (0, tlsDecoder_1.mapDecoders)([groupContext_1.decodeGroupContext, (0, variableLength_1.decodeVarLenType)(extension_1.decodeExtension), variableLength_1.decodeVarLenData, number_1.decodeUint32], (groupContext, extensions, confirmationTag, signer) => ({
+    groupContext,
+    extensions,
+    confirmationTag,
+    signer,
+}));
+exports.encodeGroupInfo = (0, tlsEncoder_1.contramapEncoders)([exports.encodeGroupInfoTBS, variableLength_1.encodeVarLenData], (g) => [g, g.signature]);
+exports.decodeGroupInfo = (0, tlsDecoder_1.mapDecoders)([exports.decodeGroupInfoTBS, variableLength_1.decodeVarLenData], (tbs, signature) => ({
+    ...tbs,
+    signature,
+}));
+function ratchetTreeFromExtension(info) {
+    const treeExtension = info.extensions.find((ex) => ex.extensionType === "ratchet_tree");
+    if (treeExtension !== undefined) {
+        const tree = (0, ratchetTree_1.decodeRatchetTree)(treeExtension.extensionData, 0);
+        if (tree === undefined)
+            throw new mlsError_1.CodecError("Could not decode RatchetTree");
+        return tree[0];
+    }
+}
+async function signGroupInfo(tbs, privateKey, s) {
+    const signature = await (0, signature_1.signWithLabel)(privateKey, "GroupInfoTBS", (0, exports.encodeGroupInfoTBS)(tbs), s);
+    return { ...tbs, signature };
+}
+function verifyGroupInfoSignature(gi, publicKey, s) {
+    return (0, signature_1.verifyWithLabel)(publicKey, "GroupInfoTBS", (0, exports.encodeGroupInfoTBS)(gi), gi.signature, s);
+}
+async function verifyGroupInfoConfirmationTag(gi, joinerSecret, pskSecret, cs) {
+    const epochSecret = await (0, groupContext_1.extractEpochSecret)(gi.groupContext, joinerSecret, cs.kdf, pskSecret);
+    const key = await (0, kdf_1.deriveSecret)(epochSecret, "confirm", cs.kdf);
+    return cs.hash.verifyMac(key, gi.confirmationTag, gi.groupContext.confirmedTranscriptHash);
+}
+async function extractWelcomeSecret(joinerSecret, pskSecret, kdf) {
+    return (0, kdf_1.deriveSecret)(await kdf.extract(joinerSecret, pskSecret), "welcome", kdf);
+}
+//# sourceMappingURL=groupInfo.js.map

package/dist/src/groupInfo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"groupInfo.js","sourceRoot":"","sources":["../../src/groupInfo.ts"],"names":[],"mappings":";;;AAmDA,4DAQC;AAED,sCAGC;AAED,4DAEC;AAED,wEASC;AAED,oDAEC;AAnFD,2CAA2D;AAC3D,mDAAyD;AACzD,mDAA+D;AAC/D,2DAA+G;AAE/G,sCAAgD;AAChD,kDAA8E;AAC9E,2CAAyE;AACzE,iDAAyG;AACzG,yCAAuC;AACvC,+CAA8D;AASjD,QAAA,kBAAkB,GAA0B,IAAA,8BAAiB,EACxE,CAAC,iCAAkB,EAAE,IAAA,iCAAgB,EAAC,2BAAe,CAAC,EAAE,iCAAgB,EAAE,qBAAY,CAAC,EACvF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAU,CAC5E,CAAA;AAEY,QAAA,kBAAkB,GAA0B,IAAA,wBAAW,EAClE,CAAC,iCAAkB,EAAE,IAAA,iCAAgB,EAAC,2BAAe,CAAC,EAAE,iCAAgB,EAAE,qBAAY,CAAC,EACvF,CAAC,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,YAAY;IACZ,UAAU;IACV,eAAe;IACf,MAAM;CACP,CAAC,CACH,CAAA;AAMY,QAAA,eAAe,GAAuB,IAAA,8BAAiB,EAClE,CAAC,0BAAkB,EAAE,iCAAgB,CAAC,EACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAU,CACjC,CAAA;AAEY,QAAA,eAAe,GAAuB,IAAA,wBAAW,EAC5D,CAAC,0BAAkB,EAAE,iCAAgB,CAAC,EACtC,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACnB,GAAG,GAAG;IACN,SAAS;CACV,CAAC,CACH,CAAA;AAED,SAAgB,wBAAwB,CAAC,IAAe;IACtD,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,KAAK,cAAc,CAAC,CAAA;IAEvF,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAA,+BAAiB,EAAC,aAAa,CAAC,aAAa,EAAE,CAAC,CAAC,CAAA;QAC9D,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,qBAAU,CAAC,8BAA8B,CAAC,CAAA;QAC5E,OAAO,IAAI,CAAC,CAAC,CAAC,CAAA;IAChB,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,aAAa,CAAC,GAAiB,EAAE,UAAsB,EAAE,CAAY;IACzF,MAAM,SAAS,GAAG,MAAM,IAAA,yBAAa,EAAC,UAAU,EAAE,cAAc,EAAE,IAAA,0BAAkB,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7F,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,CAAA;AAC9B,CAAC;AAED,SAAgB,wBAAwB,CAAC,EAAa,EAAE,SAAqB,EAAE,CAAY;IACzF,OAAO,IAAA,2BAAe,EAAC,SAAS,EAAE,cAAc,EAAE,IAAA,0BAAkB,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;AAC5F,CAAC;AAEM,KAAK,UAAU,8BAA8B,CAClD,EAAa,EACb,YAAwB,EACxB,SAAqB,EACrB,EAAmB;IAEnB,MAAM,WAAW,GAAG,MAAM,IAAA,iCAAkB,EAAC,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC9F,MAAM,GAAG,GAAG,MAAM,IAAA,kBAAY,EAAC,WAAW,EAAE,SAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;IAC9D,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,EAAE,EAAE,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAA;AAC5F,CAAC;AAEM,KAAK,UAAU,oBAAoB,CAAC,YAAwB,EAAE,SAAqB,EAAE,GAAQ;IAClG,OAAO,IAAA,kBAAY,EAAC,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;AACjF,CAAC"}

package/dist/src/groupSecrets.d.ts

@@ -0,0 +1,10 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { PreSharedKeyID } from "./presharedkey";
+export type GroupSecrets = {
+    joinerSecret: Uint8Array;
+    pathSecret: Uint8Array | undefined;
+    psks: PreSharedKeyID[];
+};
+export declare const encodeGroupSecrets: Encoder<GroupSecrets>;
+export declare const decodeGroupSecrets: Decoder<GroupSecrets>;

package/dist/src/groupSecrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"groupSecrets.d.ts","sourceRoot":"","sources":["../../src/groupSecrets.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAe,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAqB,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAE/D,OAAO,EAA4B,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAEzE,MAAM,MAAM,YAAY,GAAG;IACzB,YAAY,EAAE,UAAU,CAAA;IACxB,UAAU,EAAE,UAAU,GAAG,SAAS,CAAA;IAClC,IAAI,EAAE,cAAc,EAAE,CAAA;CACvB,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,YAAY,CAGpD,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,YAAY,CAGpD,CAAA"}