ts-mls 1.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (583) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +196 -0
  3. package/dist/src/IncomingMessageAction.d.ts +10 -0
  4. package/dist/src/IncomingMessageAction.js +2 -0
  5. package/dist/src/IncomingMessageAction.js.map +1 -0
  6. package/dist/src/authenticatedContent.d.ts +32 -0
  7. package/dist/src/authenticatedContent.js +26 -0
  8. package/dist/src/authenticatedContent.js.map +1 -0
  9. package/dist/src/authenticationService.d.ts +7 -0
  10. package/dist/src/authenticationService.js +6 -0
  11. package/dist/src/authenticationService.js.map +1 -0
  12. package/dist/src/capabilities.d.ts +14 -0
  13. package/dist/src/capabilities.js +28 -0
  14. package/dist/src/capabilities.js.map +1 -0
  15. package/dist/src/clientConfig.d.ts +21 -0
  16. package/dist/src/clientConfig.js +13 -0
  17. package/dist/src/clientConfig.js.map +1 -0
  18. package/dist/src/clientState.d.ts +122 -0
  19. package/dist/src/clientState.js +547 -0
  20. package/dist/src/clientState.js.map +1 -0
  21. package/dist/src/codec/number.d.ts +10 -0
  22. package/dist/src/codec/number.js +56 -0
  23. package/dist/src/codec/number.js.map +1 -0
  24. package/dist/src/codec/optional.d.ts +4 -0
  25. package/dist/src/codec/optional.js +20 -0
  26. package/dist/src/codec/optional.js.map +1 -0
  27. package/dist/src/codec/tlsDecoder.d.ts +14 -0
  28. package/dist/src/codec/tlsDecoder.js +78 -0
  29. package/dist/src/codec/tlsDecoder.js.map +1 -0
  30. package/dist/src/codec/tlsEncoder.d.ts +9 -0
  31. package/dist/src/codec/tlsEncoder.js +23 -0
  32. package/dist/src/codec/tlsEncoder.js.map +1 -0
  33. package/dist/src/codec/variableLength.d.ts +11 -0
  34. package/dist/src/codec/variableLength.js +95 -0
  35. package/dist/src/codec/variableLength.js.map +1 -0
  36. package/dist/src/commit.d.ts +10 -0
  37. package/dist/src/commit.js +9 -0
  38. package/dist/src/commit.js.map +1 -0
  39. package/dist/src/contentType.d.ts +12 -0
  40. package/dist/src/contentType.js +12 -0
  41. package/dist/src/contentType.js.map +1 -0
  42. package/dist/src/createCommit.d.ts +32 -0
  43. package/dist/src/createCommit.js +250 -0
  44. package/dist/src/createCommit.js.map +1 -0
  45. package/dist/src/createMessage.d.ts +24 -0
  46. package/dist/src/createMessage.js +32 -0
  47. package/dist/src/createMessage.js.map +1 -0
  48. package/dist/src/credential.d.ts +21 -0
  49. package/dist/src/credential.js +31 -0
  50. package/dist/src/credential.js.map +1 -0
  51. package/dist/src/credentialType.d.ts +11 -0
  52. package/dist/src/credentialType.js +11 -0
  53. package/dist/src/credentialType.js.map +1 -0
  54. package/dist/src/crypto/aead.d.ts +8 -0
  55. package/dist/src/crypto/aead.js +69 -0
  56. package/dist/src/crypto/aead.js.map +1 -0
  57. package/dist/src/crypto/ciphersuite.d.ts +51 -0
  58. package/dist/src/crypto/ciphersuite.js +245 -0
  59. package/dist/src/crypto/ciphersuite.js.map +1 -0
  60. package/dist/src/crypto/hash.d.ts +8 -0
  61. package/dist/src/crypto/hash.js +32 -0
  62. package/dist/src/crypto/hash.js.map +1 -0
  63. package/dist/src/crypto/hpke.d.ts +51 -0
  64. package/dist/src/crypto/hpke.js +109 -0
  65. package/dist/src/crypto/hpke.js.map +1 -0
  66. package/dist/src/crypto/kdf.d.ts +12 -0
  67. package/dist/src/crypto/kdf.js +42 -0
  68. package/dist/src/crypto/kdf.js.map +1 -0
  69. package/dist/src/crypto/kem.d.ts +3 -0
  70. package/dist/src/crypto/kem.js +49 -0
  71. package/dist/src/crypto/kem.js.map +1 -0
  72. package/dist/src/crypto/rng.d.ts +4 -0
  73. package/dist/src/crypto/rng.js +6 -0
  74. package/dist/src/crypto/rng.js.map +1 -0
  75. package/dist/src/crypto/signature.d.ts +12 -0
  76. package/dist/src/crypto/signature.js +127 -0
  77. package/dist/src/crypto/signature.js.map +1 -0
  78. package/dist/src/customCredential.d.ts +2 -0
  79. package/dist/src/customCredential.js +11 -0
  80. package/dist/src/customCredential.js.map +1 -0
  81. package/dist/src/defaultCapabilities.d.ts +2 -0
  82. package/dist/src/defaultCapabilities.js +12 -0
  83. package/dist/src/defaultCapabilities.js.map +1 -0
  84. package/dist/src/defaultExtensionType.d.ts +13 -0
  85. package/dist/src/defaultExtensionType.js +14 -0
  86. package/dist/src/defaultExtensionType.js.map +1 -0
  87. package/dist/src/defaultProposalType.d.ts +15 -0
  88. package/dist/src/defaultProposalType.js +16 -0
  89. package/dist/src/defaultProposalType.js.map +1 -0
  90. package/dist/src/extension.d.ts +18 -0
  91. package/dist/src/extension.js +30 -0
  92. package/dist/src/extension.js.map +1 -0
  93. package/dist/src/externalProposal.d.ts +7 -0
  94. package/dist/src/externalProposal.js +40 -0
  95. package/dist/src/externalProposal.js.map +1 -0
  96. package/dist/src/externalSender.d.ts +9 -0
  97. package/dist/src/externalSender.js +7 -0
  98. package/dist/src/externalSender.js.map +1 -0
  99. package/dist/src/framedContent.d.ts +113 -0
  100. package/dist/src/framedContent.js +131 -0
  101. package/dist/src/framedContent.js.map +1 -0
  102. package/dist/src/grease.d.ts +16 -0
  103. package/dist/src/grease.js +29 -0
  104. package/dist/src/grease.js.map +1 -0
  105. package/dist/src/groupContext.d.ts +19 -0
  106. package/dist/src/groupContext.js +44 -0
  107. package/dist/src/groupContext.js.map +1 -0
  108. package/dist/src/groupInfo.d.ts +26 -0
  109. package/dist/src/groupInfo.js +47 -0
  110. package/dist/src/groupInfo.js.map +1 -0
  111. package/dist/src/groupSecrets.d.ts +10 -0
  112. package/dist/src/groupSecrets.js +8 -0
  113. package/dist/src/groupSecrets.js.map +1 -0
  114. package/dist/src/hpkeCiphertext.d.ts +8 -0
  115. package/dist/src/hpkeCiphertext.js +6 -0
  116. package/dist/src/hpkeCiphertext.js.map +1 -0
  117. package/dist/src/index.d.ts +32 -0
  118. package/dist/src/index.js +24 -0
  119. package/dist/src/index.js.map +1 -0
  120. package/dist/src/keyPackage.d.ts +38 -0
  121. package/dist/src/keyPackage.js +72 -0
  122. package/dist/src/keyPackage.js.map +1 -0
  123. package/dist/src/keyPackageEqualityConfig.d.ts +7 -0
  124. package/dist/src/keyPackageEqualityConfig.js +10 -0
  125. package/dist/src/keyPackageEqualityConfig.js.map +1 -0
  126. package/dist/src/keyRetentionConfig.d.ts +6 -0
  127. package/dist/src/keyRetentionConfig.js +6 -0
  128. package/dist/src/keyRetentionConfig.js.map +1 -0
  129. package/dist/src/keySchedule.d.ts +24 -0
  130. package/dist/src/keySchedule.js +43 -0
  131. package/dist/src/keySchedule.js.map +1 -0
  132. package/dist/src/leafNode.d.ts +78 -0
  133. package/dist/src/leafNode.js +87 -0
  134. package/dist/src/leafNode.js.map +1 -0
  135. package/dist/src/leafNodeSource.d.ts +12 -0
  136. package/dist/src/leafNodeSource.js +12 -0
  137. package/dist/src/leafNodeSource.js.map +1 -0
  138. package/dist/src/lifetime.d.ts +9 -0
  139. package/dist/src/lifetime.js +13 -0
  140. package/dist/src/lifetime.js.map +1 -0
  141. package/dist/src/lifetimeConfig.d.ts +5 -0
  142. package/dist/src/lifetimeConfig.js +5 -0
  143. package/dist/src/lifetimeConfig.js.map +1 -0
  144. package/dist/src/message.d.ts +42 -0
  145. package/dist/src/message.js +45 -0
  146. package/dist/src/message.js.map +1 -0
  147. package/dist/src/messageProtection.d.ts +36 -0
  148. package/dist/src/messageProtection.js +128 -0
  149. package/dist/src/messageProtection.js.map +1 -0
  150. package/dist/src/messageProtectionPublic.d.ts +17 -0
  151. package/dist/src/messageProtectionPublic.js +99 -0
  152. package/dist/src/messageProtectionPublic.js.map +1 -0
  153. package/dist/src/mlsError.d.ts +24 -0
  154. package/dist/src/mlsError.js +49 -0
  155. package/dist/src/mlsError.js.map +1 -0
  156. package/dist/src/nodeType.d.ts +11 -0
  157. package/dist/src/nodeType.js +11 -0
  158. package/dist/src/nodeType.js.map +1 -0
  159. package/dist/src/paddingConfig.d.ts +9 -0
  160. package/dist/src/paddingConfig.js +8 -0
  161. package/dist/src/paddingConfig.js.map +1 -0
  162. package/dist/src/parentHash.d.ts +16 -0
  163. package/dist/src/parentHash.js +103 -0
  164. package/dist/src/parentHash.js.map +1 -0
  165. package/dist/src/parentNode.d.ts +9 -0
  166. package/dist/src/parentNode.js +11 -0
  167. package/dist/src/parentNode.js.map +1 -0
  168. package/dist/src/pathSecrets.d.ts +10 -0
  169. package/dist/src/pathSecrets.js +31 -0
  170. package/dist/src/pathSecrets.js.map +1 -0
  171. package/dist/src/presharedkey.d.ts +51 -0
  172. package/dist/src/presharedkey.js +59 -0
  173. package/dist/src/presharedkey.js.map +1 -0
  174. package/dist/src/privateKeyPath.d.ts +12 -0
  175. package/dist/src/privateKeyPath.js +21 -0
  176. package/dist/src/privateKeyPath.js.map +1 -0
  177. package/dist/src/privateMessage.d.ts +41 -0
  178. package/dist/src/privateMessage.js +114 -0
  179. package/dist/src/privateMessage.js.map +1 -0
  180. package/dist/src/processMessages.d.ts +26 -0
  181. package/dist/src/processMessages.js +196 -0
  182. package/dist/src/processMessages.js.map +1 -0
  183. package/dist/src/proposal.d.ts +97 -0
  184. package/dist/src/proposal.js +91 -0
  185. package/dist/src/proposal.js.map +1 -0
  186. package/dist/src/proposalOrRefType.d.ts +25 -0
  187. package/dist/src/proposalOrRefType.js +31 -0
  188. package/dist/src/proposalOrRefType.js.map +1 -0
  189. package/dist/src/protocolVersion.d.ts +9 -0
  190. package/dist/src/protocolVersion.js +10 -0
  191. package/dist/src/protocolVersion.js.map +1 -0
  192. package/dist/src/pskIndex.d.ts +7 -0
  193. package/dist/src/pskIndex.js +18 -0
  194. package/dist/src/pskIndex.js.map +1 -0
  195. package/dist/src/publicMessage.d.ts +29 -0
  196. package/dist/src/publicMessage.js +71 -0
  197. package/dist/src/publicMessage.js.map +1 -0
  198. package/dist/src/ratchetTree.d.ts +46 -0
  199. package/dist/src/ratchetTree.js +254 -0
  200. package/dist/src/ratchetTree.js.map +1 -0
  201. package/dist/src/requiredCapabilities.d.ts +10 -0
  202. package/dist/src/requiredCapabilities.js +8 -0
  203. package/dist/src/requiredCapabilities.js.map +1 -0
  204. package/dist/src/resumption.d.ts +18 -0
  205. package/dist/src/resumption.js +74 -0
  206. package/dist/src/resumption.js.map +1 -0
  207. package/dist/src/secretTree.d.ts +29 -0
  208. package/dist/src/secretTree.js +137 -0
  209. package/dist/src/secretTree.js.map +1 -0
  210. package/dist/src/sender.d.ts +56 -0
  211. package/dist/src/sender.js +81 -0
  212. package/dist/src/sender.js.map +1 -0
  213. package/dist/src/transcriptHash.d.ts +14 -0
  214. package/dist/src/transcriptHash.js +23 -0
  215. package/dist/src/transcriptHash.js.map +1 -0
  216. package/dist/src/treeHash.d.ts +27 -0
  217. package/dist/src/treeHash.js +70 -0
  218. package/dist/src/treeHash.js.map +1 -0
  219. package/dist/src/treemath.d.ts +14 -0
  220. package/dist/src/treemath.js +87 -0
  221. package/dist/src/treemath.js.map +1 -0
  222. package/dist/src/unappliedProposals.d.ts +7 -0
  223. package/dist/src/unappliedProposals.js +9 -0
  224. package/dist/src/unappliedProposals.js.map +1 -0
  225. package/dist/src/updatePath.d.ts +34 -0
  226. package/dist/src/updatePath.js +163 -0
  227. package/dist/src/updatePath.js.map +1 -0
  228. package/dist/src/util/addToMap.d.ts +1 -0
  229. package/dist/src/util/addToMap.js +6 -0
  230. package/dist/src/util/addToMap.js.map +1 -0
  231. package/dist/src/util/array.d.ts +2 -0
  232. package/dist/src/util/array.js +9 -0
  233. package/dist/src/util/array.js.map +1 -0
  234. package/dist/src/util/byteArray.d.ts +3 -0
  235. package/dist/src/util/byteArray.js +27 -0
  236. package/dist/src/util/byteArray.js.map +1 -0
  237. package/dist/src/util/constantTimeCompare.d.ts +1 -0
  238. package/dist/src/util/constantTimeCompare.js +10 -0
  239. package/dist/src/util/constantTimeCompare.js.map +1 -0
  240. package/dist/src/util/enumHelpers.d.ts +4 -0
  241. package/dist/src/util/enumHelpers.js +28 -0
  242. package/dist/src/util/enumHelpers.js.map +1 -0
  243. package/dist/src/util/repeat.d.ts +1 -0
  244. package/dist/src/util/repeat.js +8 -0
  245. package/dist/src/util/repeat.js.map +1 -0
  246. package/dist/src/welcome.d.ts +29 -0
  247. package/dist/src/welcome.js +46 -0
  248. package/dist/src/welcome.js.map +1 -0
  249. package/dist/src/wireformat.d.ts +13 -0
  250. package/dist/src/wireformat.js +14 -0
  251. package/dist/src/wireformat.js.map +1 -0
  252. package/dist/test/base64.test.d.ts +1 -0
  253. package/dist/test/base64.test.js +87 -0
  254. package/dist/test/base64.test.js.map +1 -0
  255. package/dist/test/codec/authenticatedContent.test.d.ts +1 -0
  256. package/dist/test/codec/authenticatedContent.test.js +38 -0
  257. package/dist/test/codec/authenticatedContent.test.js.map +1 -0
  258. package/dist/test/codec/capabilities.test.d.ts +1 -0
  259. package/dist/test/codec/capabilities.test.js +26 -0
  260. package/dist/test/codec/capabilities.test.js.map +1 -0
  261. package/dist/test/codec/commit.test.d.ts +1 -0
  262. package/dist/test/codec/commit.test.js +15 -0
  263. package/dist/test/codec/commit.test.js.map +1 -0
  264. package/dist/test/codec/composite.test.d.ts +1 -0
  265. package/dist/test/codec/composite.test.js +61 -0
  266. package/dist/test/codec/composite.test.js.map +1 -0
  267. package/dist/test/codec/contentType.test.d.ts +1 -0
  268. package/dist/test/codec/contentType.test.js +12 -0
  269. package/dist/test/codec/contentType.test.js.map +1 -0
  270. package/dist/test/codec/credential.test.d.ts +1 -0
  271. package/dist/test/codec/credential.test.js +17 -0
  272. package/dist/test/codec/credential.test.js.map +1 -0
  273. package/dist/test/codec/credentialType.test.d.ts +1 -0
  274. package/dist/test/codec/credentialType.test.js +12 -0
  275. package/dist/test/codec/credentialType.test.js.map +1 -0
  276. package/dist/test/codec/encryptedGroupSecrets.test.d.ts +1 -0
  277. package/dist/test/codec/encryptedGroupSecrets.test.js +18 -0
  278. package/dist/test/codec/encryptedGroupSecrets.test.js.map +1 -0
  279. package/dist/test/codec/extension.test.d.ts +1 -0
  280. package/dist/test/codec/extension.test.js +20 -0
  281. package/dist/test/codec/extension.test.js.map +1 -0
  282. package/dist/test/codec/extensionType.test.d.ts +1 -0
  283. package/dist/test/codec/extensionType.test.js +12 -0
  284. package/dist/test/codec/extensionType.test.js.map +1 -0
  285. package/dist/test/codec/externalSender.test.d.ts +1 -0
  286. package/dist/test/codec/externalSender.test.js +20 -0
  287. package/dist/test/codec/externalSender.test.js.map +1 -0
  288. package/dist/test/codec/framedContent.test.d.ts +1 -0
  289. package/dist/test/codec/framedContent.test.js +26 -0
  290. package/dist/test/codec/framedContent.test.js.map +1 -0
  291. package/dist/test/codec/groupContext.test.d.ts +1 -0
  292. package/dist/test/codec/groupContext.test.js +30 -0
  293. package/dist/test/codec/groupContext.test.js.map +1 -0
  294. package/dist/test/codec/groupInfo.test.d.ts +1 -0
  295. package/dist/test/codec/groupInfo.test.js +45 -0
  296. package/dist/test/codec/groupInfo.test.js.map +1 -0
  297. package/dist/test/codec/groupSecrets.test.d.ts +1 -0
  298. package/dist/test/codec/groupSecrets.test.js +16 -0
  299. package/dist/test/codec/groupSecrets.test.js.map +1 -0
  300. package/dist/test/codec/hpkeCiphertext.test.d.ts +1 -0
  301. package/dist/test/codec/hpkeCiphertext.test.js +13 -0
  302. package/dist/test/codec/hpkeCiphertext.test.js.map +1 -0
  303. package/dist/test/codec/keyPackage.test.d.ts +1 -0
  304. package/dist/test/codec/keyPackage.test.js +58 -0
  305. package/dist/test/codec/keyPackage.test.js.map +1 -0
  306. package/dist/test/codec/keyPackageTBS.test.d.ts +1 -0
  307. package/dist/test/codec/keyPackageTBS.test.js +59 -0
  308. package/dist/test/codec/keyPackageTBS.test.js.map +1 -0
  309. package/dist/test/codec/leafNode.test.d.ts +1 -0
  310. package/dist/test/codec/leafNode.test.js +43 -0
  311. package/dist/test/codec/leafNode.test.js.map +1 -0
  312. package/dist/test/codec/leafNodeData.test.d.ts +1 -0
  313. package/dist/test/codec/leafNodeData.test.js +36 -0
  314. package/dist/test/codec/leafNodeData.test.js.map +1 -0
  315. package/dist/test/codec/leafNodeSource.test.d.ts +1 -0
  316. package/dist/test/codec/leafNodeSource.test.js +15 -0
  317. package/dist/test/codec/leafNodeSource.test.js.map +1 -0
  318. package/dist/test/codec/lifetime.test.d.ts +1 -0
  319. package/dist/test/codec/lifetime.test.js +12 -0
  320. package/dist/test/codec/lifetime.test.js.map +1 -0
  321. package/dist/test/codec/message.test.d.ts +1 -0
  322. package/dist/test/codec/message.test.js +100 -0
  323. package/dist/test/codec/message.test.js.map +1 -0
  324. package/dist/test/codec/nodeType.test.d.ts +1 -0
  325. package/dist/test/codec/nodeType.test.js +12 -0
  326. package/dist/test/codec/nodeType.test.js.map +1 -0
  327. package/dist/test/codec/number.test.d.ts +1 -0
  328. package/dist/test/codec/number.test.js +74 -0
  329. package/dist/test/codec/number.test.js.map +1 -0
  330. package/dist/test/codec/optional.test.d.ts +1 -0
  331. package/dist/test/codec/optional.test.js +42 -0
  332. package/dist/test/codec/optional.test.js.map +1 -0
  333. package/dist/test/codec/padding.test.d.ts +1 -0
  334. package/dist/test/codec/padding.test.js +40 -0
  335. package/dist/test/codec/padding.test.js.map +1 -0
  336. package/dist/test/codec/parentHash.test.d.ts +1 -0
  337. package/dist/test/codec/parentHash.test.js +13 -0
  338. package/dist/test/codec/parentHash.test.js.map +1 -0
  339. package/dist/test/codec/parentNode.test.d.ts +1 -0
  340. package/dist/test/codec/parentNode.test.js +22 -0
  341. package/dist/test/codec/parentNode.test.js.map +1 -0
  342. package/dist/test/codec/presharedkey.test.d.ts +1 -0
  343. package/dist/test/codec/presharedkey.test.js +35 -0
  344. package/dist/test/codec/presharedkey.test.js.map +1 -0
  345. package/dist/test/codec/privateContentAAD.test.d.ts +1 -0
  346. package/dist/test/codec/privateContentAAD.test.js +30 -0
  347. package/dist/test/codec/privateContentAAD.test.js.map +1 -0
  348. package/dist/test/codec/privateMessage.test.d.ts +1 -0
  349. package/dist/test/codec/privateMessage.test.js +36 -0
  350. package/dist/test/codec/privateMessage.test.js.map +1 -0
  351. package/dist/test/codec/proposal.test.d.ts +1 -0
  352. package/dist/test/codec/proposal.test.js +44 -0
  353. package/dist/test/codec/proposal.test.js.map +1 -0
  354. package/dist/test/codec/proposalOrRef.test.d.ts +1 -0
  355. package/dist/test/codec/proposalOrRef.test.js +12 -0
  356. package/dist/test/codec/proposalOrRef.test.js.map +1 -0
  357. package/dist/test/codec/proposalOrRefType.test.d.ts +1 -0
  358. package/dist/test/codec/proposalOrRefType.test.js +12 -0
  359. package/dist/test/codec/proposalOrRefType.test.js.map +1 -0
  360. package/dist/test/codec/proposalType.test.d.ts +1 -0
  361. package/dist/test/codec/proposalType.test.js +12 -0
  362. package/dist/test/codec/proposalType.test.js.map +1 -0
  363. package/dist/test/codec/protocolVersion.test.d.ts +1 -0
  364. package/dist/test/codec/protocolVersion.test.js +9 -0
  365. package/dist/test/codec/protocolVersion.test.js.map +1 -0
  366. package/dist/test/codec/pskId.test.d.ts +1 -0
  367. package/dist/test/codec/pskId.test.js +18 -0
  368. package/dist/test/codec/pskId.test.js.map +1 -0
  369. package/dist/test/codec/pskInfo.test.d.ts +1 -0
  370. package/dist/test/codec/pskInfo.test.js +12 -0
  371. package/dist/test/codec/pskInfo.test.js.map +1 -0
  372. package/dist/test/codec/pskLabel.test.d.ts +1 -0
  373. package/dist/test/codec/pskLabel.test.js +26 -0
  374. package/dist/test/codec/pskLabel.test.js.map +1 -0
  375. package/dist/test/codec/pskType.test.d.ts +1 -0
  376. package/dist/test/codec/pskType.test.js +12 -0
  377. package/dist/test/codec/pskType.test.js.map +1 -0
  378. package/dist/test/codec/publicMessage.test.d.ts +1 -0
  379. package/dist/test/codec/publicMessage.test.js +39 -0
  380. package/dist/test/codec/publicMessage.test.js.map +1 -0
  381. package/dist/test/codec/ratchetTree.test.d.ts +1 -0
  382. package/dist/test/codec/ratchetTree.test.js +83 -0
  383. package/dist/test/codec/ratchetTree.test.js.map +1 -0
  384. package/dist/test/codec/requiredCapabilities.test.d.ts +1 -0
  385. package/dist/test/codec/requiredCapabilities.test.js +30 -0
  386. package/dist/test/codec/requiredCapabilities.test.js.map +1 -0
  387. package/dist/test/codec/resumptionPSKUsage.test.d.ts +1 -0
  388. package/dist/test/codec/resumptionPSKUsage.test.js +15 -0
  389. package/dist/test/codec/resumptionPSKUsage.test.js.map +1 -0
  390. package/dist/test/codec/reuseGuard.test.d.ts +1 -0
  391. package/dist/test/codec/reuseGuard.test.js +9 -0
  392. package/dist/test/codec/reuseGuard.test.js.map +1 -0
  393. package/dist/test/codec/roundtrip.d.ts +3 -0
  394. package/dist/test/codec/roundtrip.js +8 -0
  395. package/dist/test/codec/roundtrip.js.map +1 -0
  396. package/dist/test/codec/sender.test.d.ts +1 -0
  397. package/dist/test/codec/sender.test.js +18 -0
  398. package/dist/test/codec/sender.test.js.map +1 -0
  399. package/dist/test/codec/senderData.test.d.ts +1 -0
  400. package/dist/test/codec/senderData.test.js +12 -0
  401. package/dist/test/codec/senderData.test.js.map +1 -0
  402. package/dist/test/codec/senderDataAAD.test.d.ts +1 -0
  403. package/dist/test/codec/senderDataAAD.test.js +12 -0
  404. package/dist/test/codec/senderDataAAD.test.js.map +1 -0
  405. package/dist/test/codec/senderType.test.d.ts +1 -0
  406. package/dist/test/codec/senderType.test.js +18 -0
  407. package/dist/test/codec/senderType.test.js.map +1 -0
  408. package/dist/test/codec/transcriptHash.test.d.ts +1 -0
  409. package/dist/test/codec/transcriptHash.test.js +38 -0
  410. package/dist/test/codec/transcriptHash.test.js.map +1 -0
  411. package/dist/test/codec/treeHash.test.d.ts +1 -0
  412. package/dist/test/codec/treeHash.test.js +17 -0
  413. package/dist/test/codec/treeHash.test.js.map +1 -0
  414. package/dist/test/codec/updatePath.test.d.ts +1 -0
  415. package/dist/test/codec/updatePath.test.js +81 -0
  416. package/dist/test/codec/updatePath.test.js.map +1 -0
  417. package/dist/test/codec/updatePathNode.test.d.ts +1 -0
  418. package/dist/test/codec/updatePathNode.test.js +23 -0
  419. package/dist/test/codec/updatePathNode.test.js.map +1 -0
  420. package/dist/test/codec/varLengthEncoding.test.d.ts +1 -0
  421. package/dist/test/codec/varLengthEncoding.test.js +90 -0
  422. package/dist/test/codec/varLengthEncoding.test.js.map +1 -0
  423. package/dist/test/codec/welcome.test.d.ts +1 -0
  424. package/dist/test/codec/welcome.test.js +25 -0
  425. package/dist/test/codec/welcome.test.js.map +1 -0
  426. package/dist/test/codec/wireformat.test.d.ts +1 -0
  427. package/dist/test/codec/wireformat.test.js +21 -0
  428. package/dist/test/codec/wireformat.test.js.map +1 -0
  429. package/dist/test/crypto/aead.test.d.ts +1 -0
  430. package/dist/test/crypto/aead.test.js +44 -0
  431. package/dist/test/crypto/aead.test.js.map +1 -0
  432. package/dist/test/crypto/hpke.test.d.ts +1 -0
  433. package/dist/test/crypto/hpke.test.js +58 -0
  434. package/dist/test/crypto/hpke.test.js.map +1 -0
  435. package/dist/test/crypto/keyMatch.d.ts +7 -0
  436. package/dist/test/crypto/keyMatch.js +22 -0
  437. package/dist/test/crypto/keyMatch.js.map +1 -0
  438. package/dist/test/extensionsEqual.test.d.ts +1 -0
  439. package/dist/test/extensionsEqual.test.js +51 -0
  440. package/dist/test/extensionsEqual.test.js.map +1 -0
  441. package/dist/test/groupinfo.test.d.ts +1 -0
  442. package/dist/test/groupinfo.test.js +40 -0
  443. package/dist/test/groupinfo.test.js.map +1 -0
  444. package/dist/test/scenario/common.d.ts +8 -0
  445. package/dist/test/scenario/common.js +41 -0
  446. package/dist/test/scenario/common.js.map +1 -0
  447. package/dist/test/scenario/customExtensions.test.d.ts +1 -0
  448. package/dist/test/scenario/customExtensions.test.js +56 -0
  449. package/dist/test/scenario/customExtensions.test.js.map +1 -0
  450. package/dist/test/scenario/customProposal.test.d.ts +1 -0
  451. package/dist/test/scenario/customProposal.test.js +71 -0
  452. package/dist/test/scenario/customProposal.test.js.map +1 -0
  453. package/dist/test/scenario/epochOutOfOrder.test.d.ts +1 -0
  454. package/dist/test/scenario/epochOutOfOrder.test.js +162 -0
  455. package/dist/test/scenario/epochOutOfOrder.test.js.map +1 -0
  456. package/dist/test/scenario/externalAddProposal.test.d.ts +1 -0
  457. package/dist/test/scenario/externalAddProposal.test.js +69 -0
  458. package/dist/test/scenario/externalAddProposal.test.js.map +1 -0
  459. package/dist/test/scenario/externalJoin.test.d.ts +1 -0
  460. package/dist/test/scenario/externalJoin.test.js +51 -0
  461. package/dist/test/scenario/externalJoin.test.js.map +1 -0
  462. package/dist/test/scenario/externalJoinResync.test.d.ts +1 -0
  463. package/dist/test/scenario/externalJoinResync.test.js +59 -0
  464. package/dist/test/scenario/externalJoinResync.test.js.map +1 -0
  465. package/dist/test/scenario/externalProposal.test.d.ts +1 -0
  466. package/dist/test/scenario/externalProposal.test.js +69 -0
  467. package/dist/test/scenario/externalProposal.test.js.map +1 -0
  468. package/dist/test/scenario/externalPsk.test.d.ts +1 -0
  469. package/dist/test/scenario/externalPsk.test.js +73 -0
  470. package/dist/test/scenario/externalPsk.test.js.map +1 -0
  471. package/dist/test/scenario/externalPskJoin.test.d.ts +1 -0
  472. package/dist/test/scenario/externalPskJoin.test.js +51 -0
  473. package/dist/test/scenario/externalPskJoin.test.js.map +1 -0
  474. package/dist/test/scenario/generationOutOfOrder.test.d.ts +1 -0
  475. package/dist/test/scenario/generationOutOfOrder.test.js +111 -0
  476. package/dist/test/scenario/generationOutOfOrder.test.js.map +1 -0
  477. package/dist/test/scenario/grease.test.d.ts +1 -0
  478. package/dist/test/scenario/grease.test.js +44 -0
  479. package/dist/test/scenario/grease.test.js.map +1 -0
  480. package/dist/test/scenario/largeGroupFullLifecycle.test.d.ts +1 -0
  481. package/dist/test/scenario/largeGroupFullLifecycle.test.js +127 -0
  482. package/dist/test/scenario/largeGroupFullLifecycle.test.js.map +1 -0
  483. package/dist/test/scenario/leaveProposal.test.d.ts +1 -0
  484. package/dist/test/scenario/leaveProposal.test.js +77 -0
  485. package/dist/test/scenario/leaveProposal.test.js.map +1 -0
  486. package/dist/test/scenario/multipleJoinsAtOnce.test.d.ts +1 -0
  487. package/dist/test/scenario/multipleJoinsAtOnce.test.js +48 -0
  488. package/dist/test/scenario/multipleJoinsAtOnce.test.js.map +1 -0
  489. package/dist/test/scenario/oneToOneJoin.test.d.ts +1 -0
  490. package/dist/test/scenario/oneToOneJoin.test.js +98 -0
  491. package/dist/test/scenario/oneToOneJoin.test.js.map +1 -0
  492. package/dist/test/scenario/ratchetTreeExtension.test.d.ts +1 -0
  493. package/dist/test/scenario/ratchetTreeExtension.test.js +48 -0
  494. package/dist/test/scenario/ratchetTreeExtension.test.js.map +1 -0
  495. package/dist/test/scenario/reinit.test.d.ts +1 -0
  496. package/dist/test/scenario/reinit.test.js +57 -0
  497. package/dist/test/scenario/reinit.test.js.map +1 -0
  498. package/dist/test/scenario/rejectIncomingMessage.test.d.ts +1 -0
  499. package/dist/test/scenario/rejectIncomingMessage.test.js +67 -0
  500. package/dist/test/scenario/rejectIncomingMessage.test.js.map +1 -0
  501. package/dist/test/scenario/remove.test.d.ts +1 -0
  502. package/dist/test/scenario/remove.test.js +68 -0
  503. package/dist/test/scenario/remove.test.js.map +1 -0
  504. package/dist/test/scenario/requiredCapabilites.test.d.ts +1 -0
  505. package/dist/test/scenario/requiredCapabilites.test.js +65 -0
  506. package/dist/test/scenario/requiredCapabilites.test.js.map +1 -0
  507. package/dist/test/scenario/resumption.test.d.ts +1 -0
  508. package/dist/test/scenario/resumption.test.js +43 -0
  509. package/dist/test/scenario/resumption.test.js.map +1 -0
  510. package/dist/test/scenario/threePartyJoin.test.d.ts +1 -0
  511. package/dist/test/scenario/threePartyJoin.test.js +56 -0
  512. package/dist/test/scenario/threePartyJoin.test.js.map +1 -0
  513. package/dist/test/scenario/update.test.d.ts +1 -0
  514. package/dist/test/scenario/update.test.js +50 -0
  515. package/dist/test/scenario/update.test.js.map +1 -0
  516. package/dist/test/test-vectors/cryptoBasics.test.d.ts +1 -0
  517. package/dist/test/test-vectors/cryptoBasics.test.js +60 -0
  518. package/dist/test/test-vectors/cryptoBasics.test.js.map +1 -0
  519. package/dist/test/test-vectors/deserialization.test.d.ts +1 -0
  520. package/dist/test/test-vectors/deserialization.test.js +13 -0
  521. package/dist/test/test-vectors/deserialization.test.js.map +1 -0
  522. package/dist/test/test-vectors/keySchedule.test.d.ts +1 -0
  523. package/dist/test/test-vectors/keySchedule.test.js +48 -0
  524. package/dist/test/test-vectors/keySchedule.test.js.map +1 -0
  525. package/dist/test/test-vectors/messageProtection.test.d.ts +1 -0
  526. package/dist/test/test-vectors/messageProtection.test.js +215 -0
  527. package/dist/test/test-vectors/messageProtection.test.js.map +1 -0
  528. package/dist/test/test-vectors/messages.test.d.ts +1 -0
  529. package/dist/test/test-vectors/messages.test.js +136 -0
  530. package/dist/test/test-vectors/messages.test.js.map +1 -0
  531. package/dist/test/test-vectors/passiveClientScenarios.test.d.ts +1 -0
  532. package/dist/test/test-vectors/passiveClientScenarios.test.js +86 -0
  533. package/dist/test/test-vectors/passiveClientScenarios.test.js.map +1 -0
  534. package/dist/test/test-vectors/pskSecret.test.d.ts +1 -0
  535. package/dist/test/test-vectors/pskSecret.test.js +18 -0
  536. package/dist/test/test-vectors/pskSecret.test.js.map +1 -0
  537. package/dist/test/test-vectors/secretTree.test.d.ts +1 -0
  538. package/dist/test/test-vectors/secretTree.test.js +48 -0
  539. package/dist/test/test-vectors/secretTree.test.js.map +1 -0
  540. package/dist/test/test-vectors/transcriptHashes.test.d.ts +1 -0
  541. package/dist/test/test-vectors/transcriptHashes.test.js +26 -0
  542. package/dist/test/test-vectors/transcriptHashes.test.js.map +1 -0
  543. package/dist/test/test-vectors/treeOperations.test.d.ts +1 -0
  544. package/dist/test/test-vectors/treeOperations.test.js +45 -0
  545. package/dist/test/test-vectors/treeOperations.test.js.map +1 -0
  546. package/dist/test/test-vectors/treeValidation.test.d.ts +1 -0
  547. package/dist/test/test-vectors/treeValidation.test.js +36 -0
  548. package/dist/test/test-vectors/treeValidation.test.js.map +1 -0
  549. package/dist/test/test-vectors/treekem.test.d.ts +1 -0
  550. package/dist/test/test-vectors/treekem.test.js +100 -0
  551. package/dist/test/test-vectors/treekem.test.js.map +1 -0
  552. package/dist/test/test-vectors/treemath.test.d.ts +1 -0
  553. package/dist/test/test-vectors/treemath.test.js +55 -0
  554. package/dist/test/test-vectors/treemath.test.js.map +1 -0
  555. package/dist/test/test-vectors/welcome.test.d.ts +1 -0
  556. package/dist/test/test-vectors/welcome.test.js +40 -0
  557. package/dist/test/test-vectors/welcome.test.js.map +1 -0
  558. package/dist/test/validation/proposalValidation.test.d.ts +1 -0
  559. package/dist/test/validation/proposalValidation.test.js +231 -0
  560. package/dist/test/validation/proposalValidation.test.js.map +1 -0
  561. package/dist/test/validation/ratchetTreeValidation.test.d.ts +1 -0
  562. package/dist/test/validation/ratchetTreeValidation.test.js +51 -0
  563. package/dist/test/validation/ratchetTreeValidation.test.js.map +1 -0
  564. package/dist/test/validation/resumptionValidation.test.d.ts +1 -0
  565. package/dist/test/validation/resumptionValidation.test.js +79 -0
  566. package/dist/test/validation/resumptionValidation.test.js.map +1 -0
  567. package/dist/test_vectors/crypto-basics.json +303 -0
  568. package/dist/test_vectors/deserialization.json +58 -0
  569. package/dist/test_vectors/key-schedule.json +926 -0
  570. package/dist/test_vectors/message-protection.json +142 -0
  571. package/dist/test_vectors/messages.json +5702 -0
  572. package/dist/test_vectors/passive-client-handling-commit.json +2683 -0
  573. package/dist/test_vectors/passive-client-random.json +2657 -0
  574. package/dist/test_vectors/passive-client-welcome.json +814 -0
  575. package/dist/test_vectors/psk_secret.json +2382 -0
  576. package/dist/test_vectors/secret-tree.json +4846 -0
  577. package/dist/test_vectors/transcript-hashes.json +58 -0
  578. package/dist/test_vectors/tree-math.json +8156 -0
  579. package/dist/test_vectors/tree-operations.json +47 -0
  580. package/dist/test_vectors/tree-validation.json +6204 -0
  581. package/dist/test_vectors/treekem.json +14859 -0
  582. package/dist/test_vectors/welcome.json +51 -0
  583. package/package.json +108 -0
@@ -0,0 +1,45 @@
1
+ import { getCiphersuiteFromId, getCiphersuiteImpl } from "../../src/crypto/ciphersuite";
2
+ import { addLeafNode, decodeRatchetTree, encodeRatchetTree, removeLeafNode, updateLeafNode, } from "../../src/ratchetTree";
3
+ import { hexToBytes } from "@noble/ciphers/utils";
4
+ import json from "../../test_vectors/tree-operations.json";
5
+ import { decodeProposal } from "../../src/proposal";
6
+ import { treeHashRoot } from "../../src/treeHash";
7
+ // How can there be a proposal with leaf_node_source = key_package in the test vectors?
8
+ // https://github.com/mlswg/mls-implementations/issues/195
9
+ for (const [index, x] of json.filter((_n, idx) => idx !== 2).entries()) {
10
+ test(`tree-operations test vectors ${index}`, async () => {
11
+ const impl = await getCiphersuiteImpl(getCiphersuiteFromId(x.cipher_suite));
12
+ await treeOperationsTest(x, impl);
13
+ });
14
+ }
15
+ async function treeOperationsTest(data, impl) {
16
+ const tree = decodeRatchetTree(hexToBytes(data.tree_before), 0);
17
+ if (tree === undefined)
18
+ throw new Error("could not decode tree");
19
+ const hash = await treeHashRoot(tree[0], impl.hash);
20
+ expect(hash).toStrictEqual(hexToBytes(data.tree_hash_before));
21
+ const proposal = decodeProposal(hexToBytes(data.proposal), 0);
22
+ if (proposal === undefined)
23
+ throw new Error("could not decode proposal");
24
+ const treeAfter = applyProposal(proposal[0], tree[0], data);
25
+ if (treeAfter === undefined)
26
+ throw new Error("Could not apply proposal: " + proposal[0].proposalType);
27
+ expect(encodeRatchetTree(treeAfter)).toStrictEqual(hexToBytes(data.tree_after));
28
+ const hashAfter = await treeHashRoot(treeAfter, impl.hash);
29
+ expect(hashAfter).toStrictEqual(hexToBytes(data.tree_hash_after));
30
+ }
31
+ function applyProposal(proposal, tree, data) {
32
+ switch (proposal.proposalType) {
33
+ case "add":
34
+ return addLeafNode(tree, proposal.add.keyPackage.leafNode)[0];
35
+ case "update":
36
+ return updateLeafNode(tree, proposal.update.leafNode, data.proposal_sender);
37
+ case "remove":
38
+ return removeLeafNode(tree, proposal.remove.removed);
39
+ case "psk":
40
+ case "reinit":
41
+ case "external_init":
42
+ case "group_context_extensions":
43
+ }
44
+ }
45
+ //# sourceMappingURL=treeOperations.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"treeOperations.test.js","sourceRoot":"","sources":["../../../test/test-vectors/treeOperations.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkC,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AACvH,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,iBAAiB,EAEjB,cAAc,EACd,cAAc,GACf,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,IAAI,MAAM,yCAAyC,CAAA;AAC1D,OAAO,EAAE,cAAc,EAAY,MAAM,oBAAoB,CAAA;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEjD,uFAAuF;AACvF,0DAA0D;AAC1D,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IACvE,IAAI,CAAC,gCAAgC,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,oBAAoB,CAAC,CAAC,CAAC,YAA6B,CAAC,CAAC,CAAA;QAC5F,MAAM,kBAAkB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;AACJ,CAAC;AAWD,KAAK,UAAU,kBAAkB,CAAC,IAAuB,EAAE,IAAqB;IAC9E,MAAM,IAAI,GAAG,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAA;IAE/D,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAEhE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IACnD,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAA;IAE7D,MAAM,QAAQ,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7D,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAExE,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IAE3D,IAAI,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IAErG,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;IAE/E,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,SAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3D,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAA;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,QAAkB,EAAE,IAAiB,EAAE,IAAuB;IACnF,QAAQ,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC9B,KAAK,KAAK;YACR,OAAO,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QAC/D,KAAK,QAAQ;YACX,OAAO,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,CAAA;QAC7E,KAAK,QAAQ;YACX,OAAO,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACtD,KAAK,KAAK,CAAC;QACX,KAAK,QAAQ,CAAC;QACd,KAAK,eAAe,CAAC;QACrB,KAAK,0BAA0B,CAAC;IAClC,CAAC;AACH,CAAC"}
@@ -0,0 +1 @@
1
+ export {};
@@ -0,0 +1,36 @@
1
+ import { getCiphersuiteFromId, getCiphersuiteImpl } from "../../src/crypto/ciphersuite";
2
+ import { decodeRatchetTree, resolution } from "../../src/ratchetTree";
3
+ import { hexToBytes } from "@noble/ciphers/utils";
4
+ import json from "../../test_vectors/tree-validation.json";
5
+ import { treeHash } from "../../src/treeHash";
6
+ import { verifyLeafNodeSignature } from "../../src/leafNode";
7
+ import { nodeToLeafIndex } from "../../src/treemath";
8
+ import { verifyParentHashes } from "../../src/parentHash";
9
+ for (const [index, x] of json.entries()) {
10
+ test(`tree-validation test vectors" ${index}`, async () => {
11
+ const impl = await getCiphersuiteImpl(getCiphersuiteFromId(x.cipher_suite));
12
+ await treeOperationsTest(x, impl);
13
+ });
14
+ }
15
+ async function treeOperationsTest(data, impl) {
16
+ const tree = decodeRatchetTree(hexToBytes(data.tree), 0);
17
+ if (tree === undefined)
18
+ throw new Error("could not decode tree");
19
+ for (const [i, h] of data.tree_hashes.entries()) {
20
+ const hash = await treeHash(tree[0], i, impl.hash);
21
+ expect(hash).toStrictEqual(hexToBytes(h));
22
+ }
23
+ for (const [i, r] of data.resolutions.entries()) {
24
+ const reso = resolution(tree[0], i);
25
+ expect(reso).toStrictEqual(r);
26
+ }
27
+ expect(await verifyParentHashes(tree[0], impl.hash)).toBe(true);
28
+ for (const [i, n] of tree[0].entries()) {
29
+ if (n !== undefined) {
30
+ if (n.nodeType === "leaf") {
31
+ expect(await verifyLeafNodeSignature(n.leaf, hexToBytes(data.group_id), nodeToLeafIndex(i), impl.signature)).toBe(true);
32
+ }
33
+ }
34
+ }
35
+ }
36
+ //# sourceMappingURL=treeValidation.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"treeValidation.test.js","sourceRoot":"","sources":["../../../test/test-vectors/treeValidation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkC,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AACvH,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,IAAI,MAAM,yCAAyC,CAAA;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAEzD,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACxC,IAAI,CAAC,iCAAiC,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,oBAAoB,CAAC,CAAC,CAAC,YAA6B,CAAC,CAAC,CAAA;QAC5F,MAAM,kBAAkB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;AACJ,CAAC;AASD,KAAK,UAAU,kBAAkB,CAAC,IAAwB,EAAE,IAAqB;IAC/E,MAAM,IAAI,GAAG,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;IAExD,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAEhE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3C,CAAC;IAED,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACnC,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;IAC/B,CAAC;IAED,MAAM,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAE/D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC1B,MAAM,CACJ,MAAM,uBAAuB,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CACrG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACd,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}
@@ -0,0 +1 @@
1
+ export {};
@@ -0,0 +1,100 @@
1
+ import { getCiphersuiteFromId, getCiphersuiteImpl, getCiphersuiteNameFromId, } from "../../src/crypto/ciphersuite";
2
+ import { decodeRatchetTree, getHpkePublicKey } from "../../src/ratchetTree";
3
+ import { hexToBytes } from "@noble/ciphers/utils";
4
+ import json from "../../test_vectors/treekem.json";
5
+ import { applyUpdatePath, createUpdatePath, decodeUpdatePath } from "../../src/updatePath";
6
+ import { treeHashRoot } from "../../src/treeHash";
7
+ import { deriveSecret } from "../../src/crypto/kdf";
8
+ import { leafToNodeIndex } from "../../src/treemath";
9
+ import { applyUpdatePathSecret } from "../../src/createCommit";
10
+ import { getCommitSecret } from "../../src/pathSecrets";
11
+ import { toPrivateKeyPath } from "../../src/privateKeyPath";
12
+ import { hpkeKeysMatch } from "../crypto/keyMatch";
13
+ for (const [index, x] of json.entries()) {
14
+ test(`treekem test vectors ${index}`, async () => {
15
+ const impl = await getCiphersuiteImpl(getCiphersuiteFromId(x.cipher_suite));
16
+ await treekemTest(x, impl);
17
+ }, 10000);
18
+ }
19
+ async function treekemTest(data, impl) {
20
+ const tree = decodeRatchetTree(hexToBytes(data.ratchet_tree), 0);
21
+ if (tree === undefined)
22
+ throw new Error("could not decode tree");
23
+ const th = await treeHashRoot(tree[0], impl.hash);
24
+ const gc = {
25
+ version: "mls10",
26
+ cipherSuite: getCiphersuiteNameFromId(data.cipher_suite),
27
+ groupId: hexToBytes(data.group_id),
28
+ epoch: BigInt(data.epoch),
29
+ treeHash: th,
30
+ confirmedTranscriptHash: hexToBytes(data.confirmed_transcript_hash),
31
+ extensions: [],
32
+ };
33
+ const privatePaths = await getPrivatePaths(data, impl);
34
+ await testTreeKeys(data, tree, impl);
35
+ for (const path of data.update_paths) {
36
+ const updatePath = decodeUpdatePath(hexToBytes(path.update_path), 0);
37
+ if (updatePath === undefined)
38
+ throw new Error("could not decode updatepath");
39
+ const updatedTree = await applyUpdatePath(tree[0], path.sender, updatePath[0], impl.hash);
40
+ const th = await treeHashRoot(updatedTree, impl.hash);
41
+ expect(th).toStrictEqual(hexToBytes(path.tree_hash_after));
42
+ const updatedGroupContext = { ...gc, treeHash: th };
43
+ const senderLeafState = data.leaves_private.find((lp) => lp.index === path.sender);
44
+ if (senderLeafState === undefined) {
45
+ throw new Error("Could not find leaf for sender");
46
+ }
47
+ const [t, newUpdatePath, newSecrets] = await createUpdatePath(updatedTree, path.sender, updatedGroupContext, hexToBytes(senderLeafState.signature_priv), impl);
48
+ const rootSecret = newSecrets.slice().pop();
49
+ const newCommitSecret = await deriveSecret(rootSecret.secret, "path", impl.kdf);
50
+ const newGroupContext = { ...gc, treeHash: await treeHashRoot(t, impl.hash), epoch: gc.epoch + 1n };
51
+ for (const pp of privatePaths) {
52
+ if (pp.leafIndex === path.sender) {
53
+ expect(path.path_secrets[pp.leafIndex]).toBeNull;
54
+ }
55
+ else {
56
+ await testCommitSecret(tree, pp, path, updatedGroupContext, updatePath[0], impl);
57
+ await testNewUpdatePath(tree, pp, path, newGroupContext, newUpdatePath, impl, newCommitSecret);
58
+ }
59
+ }
60
+ }
61
+ }
62
+ async function testNewUpdatePath(tree, pp, path, newGroupContext, newUpdatePath, impl, newCommitSecret) {
63
+ const secret = await applyUpdatePathSecret(tree[0], pp, path.sender, newGroupContext, newUpdatePath, [], impl);
64
+ const commitSecret = await getCommitSecret(tree[0], secret.nodeIndex, secret.pathSecret, impl.kdf);
65
+ expect(commitSecret).toStrictEqual(newCommitSecret);
66
+ }
67
+ async function testCommitSecret(tree, pp, path, updatedGroupContext, updatePath, impl) {
68
+ const privateP = await applyUpdatePathSecret(tree[0], pp, path.sender, updatedGroupContext, updatePath, [], impl);
69
+ expect(privateP.pathSecret).toStrictEqual(hexToBytes(path.path_secrets[pp.leafIndex]));
70
+ const commitSecret = await getCommitSecret(tree[0], privateP.nodeIndex, privateP.pathSecret, impl.kdf);
71
+ expect(commitSecret).toStrictEqual(hexToBytes(path.commit_secret));
72
+ }
73
+ async function getPrivatePaths(data, impl) {
74
+ return await Promise.all(data.leaves_private.map(async (leaf) => {
75
+ const nodeSecrets = leaf.path_secrets.reduce((acc, ps) => ({ ...acc, [ps.node]: hexToBytes(ps.path_secret) }), {});
76
+ const pks = await toPrivateKeyPath(nodeSecrets, leaf.index, impl);
77
+ return {
78
+ ...pks,
79
+ privateKeys: { ...pks.privateKeys, [leafToNodeIndex(leaf.index)]: hexToBytes(leaf.encryption_priv) },
80
+ };
81
+ }));
82
+ }
83
+ async function testTreeKeys(data, tree, impl) {
84
+ for (const leaf of data.leaves_private) {
85
+ const nodeSecrets = leaf.path_secrets.reduce((acc, ps) => ({ ...acc, [ps.node]: hexToBytes(ps.path_secret) }), {});
86
+ const node = tree[0][leafToNodeIndex(leaf.index)];
87
+ if (node === undefined || node.nodeType === "parent")
88
+ throw new Error("No leaf found at leaf index");
89
+ expect(await hpkeKeysMatch(node.leaf.hpkePublicKey, hexToBytes(leaf.encryption_priv), impl.hpke)).toBe(true);
90
+ for (const [nodeIndex, pathSecret] of Object.entries(nodeSecrets)) {
91
+ const s = await deriveSecret(pathSecret, "node", impl.kdf);
92
+ const { publicKey } = await impl.hpke.deriveKeyPair(s);
93
+ const node = tree[0][Number(nodeIndex)];
94
+ if (node === undefined)
95
+ throw new Error("No node found at node index");
96
+ expect(getHpkePublicKey(node)).toStrictEqual(await impl.hpke.exportPublicKey(publicKey));
97
+ }
98
+ }
99
+ }
100
+ //# sourceMappingURL=treekem.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"treekem.test.js","sourceRoot":"","sources":["../../../test/test-vectors/treekem.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,oBAAoB,EACpB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAe,MAAM,uBAAuB,CAAA;AACxF,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,IAAI,MAAM,iCAAiC,CAAA;AAClD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAc,MAAM,sBAAsB,CAAA;AAEtG,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAkB,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAE3E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACxC,IAAI,CAAC,wBAAwB,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,oBAAoB,CAAC,CAAC,CAAC,YAA6B,CAAC,CAAC,CAAA;QAC5F,MAAM,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IAC5B,CAAC,EAAE,KAAK,CAAC,CAAA;AACX,CAAC;AA+BD,KAAK,UAAU,WAAW,CAAC,IAAkB,EAAE,IAAqB;IAClE,MAAM,IAAI,GAAG,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAA;IAEhE,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAEhE,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAEjD,MAAM,EAAE,GAAiB;QACvB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,wBAAwB,CAAC,IAAI,CAAC,YAA6B,CAAC;QACzE,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;QAClC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACzB,QAAQ,EAAE,EAAE;QACZ,uBAAuB,EAAE,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC;QACnE,UAAU,EAAE,EAAE;KACf,CAAA;IAED,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAEtD,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;IAEpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAA;QAEpE,IAAI,UAAU,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAE5E,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAEzF,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAErD,MAAM,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAA;QAE1D,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;QAEnD,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,CAAA;QAClF,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;QACnD,CAAC;QACD,MAAM,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,CAAC,GAAG,MAAM,gBAAgB,CAC3D,WAAW,EACX,IAAI,CAAC,MAAM,EACX,mBAAmB,EACnB,UAAU,CAAC,eAAe,CAAC,cAAc,CAAC,EAC1C,IAAI,CACL,CAAA;QAED,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,GAAG,EAAG,CAAA;QAC5C,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;QAC/E,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,EAAE,EAAE,CAAA;QAEnG,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;YAC9B,IAAI,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAA;YAClD,CAAC;iBAAM,CAAC;gBACN,MAAM,gBAAgB,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;gBAEhF,MAAM,iBAAiB,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,CAAC,CAAA;YAChG,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,IAA2B,EAC3B,EAAkB,EAClB,IAAqB,EACrB,eAA6B,EAC7B,aAAyB,EACzB,IAAqB,EACrB,eAA2B;IAE3B,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAE9G,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAElG,MAAM,CAAC,YAAY,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC,CAAA;AACrD,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAA2B,EAC3B,EAAkB,EAClB,IAAqB,EACrB,mBAAiC,EACjC,UAAsB,EACtB,IAAqB;IAErB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,mBAAmB,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAEjH,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,SAAS,CAAE,CAAC,CAAC,CAAA;IAEvF,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAEtG,MAAM,CAAC,YAAY,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAA;AACpE,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAkB,EAAE,IAAqB;IACtE,OAAO,MAAM,OAAO,CAAC,GAAG,CACtB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrC,MAAM,WAAW,GAAgB,IAAI,CAAC,YAAY,CAAC,MAAM,CACvD,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,EAChE,EAAE,CACH,CAAA;QAED,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAEjE,OAAO;YACL,GAAG,GAAG;YACN,WAAW,EAAE,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE;SACrG,CAAA;IACH,CAAC,CAAC,CACH,CAAA;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAkB,EAAE,IAA2B,EAAE,IAAqB;IAChG,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACvC,MAAM,WAAW,GAAgB,IAAI,CAAC,YAAY,CAAC,MAAM,CACvD,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,EAChE,EAAE,CACH,CAAA;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QACjD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAEpG,MAAM,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE5G,KAAK,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1D,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;YAEtD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;YACvC,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;YAEtE,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAA;QAC1F,CAAC;IACH,CAAC;AACH,CAAC"}
@@ -0,0 +1 @@
1
+ export {};
@@ -0,0 +1,55 @@
1
+ import json from "../../test_vectors/tree-math.json";
2
+ import { left, nodeWidth, parent, right, root, sibling } from "../../src/treemath";
3
+ import { InternalError } from "../../src/mlsError";
4
+ for (const [index, x] of json.entries()) {
5
+ test(`tree math test vectors ${index}`, () => {
6
+ treemathTest(x);
7
+ });
8
+ }
9
+ function treemathTest(t) {
10
+ //n_nodes is the number of nodes in the tree with n_leaves leaves
11
+ expect(nodeWidth(t.n_leaves)).toBe(t.n_nodes);
12
+ //root is the root node index of the tree
13
+ expect(root(t.n_leaves)).toBe(t.root);
14
+ //left[i] is the node index of the left child of the node with index i in a tree with n_leaves leaves
15
+ for (const [i, expected] of t.left.entries()) {
16
+ const leftFn = () => left(i);
17
+ if (expected != null) {
18
+ expect(leftFn()).toBe(expected);
19
+ }
20
+ else {
21
+ expect(leftFn).toThrow(InternalError);
22
+ }
23
+ }
24
+ //right[i] is the node index of the right child of the node with index i in a tree with n_leaves leaves
25
+ for (const [i, expected] of t.right.entries()) {
26
+ const rightFn = () => right(i);
27
+ if (expected != null) {
28
+ expect(rightFn()).toBe(expected);
29
+ }
30
+ else {
31
+ expect(rightFn).toThrow(InternalError);
32
+ }
33
+ }
34
+ //parent[i] is the node index of the parent of the node with index i in a tree with n_leaves leaves
35
+ for (const [i, expected] of t.parent.entries()) {
36
+ const parentFn = () => parent(i, t.n_leaves);
37
+ if (expected != null) {
38
+ expect(parentFn()).toBe(expected);
39
+ }
40
+ else {
41
+ expect(parentFn).toThrow(InternalError);
42
+ }
43
+ }
44
+ //sibling[i] is the node index of the sibling of the node with index i in a tree with n_leaves leaves
45
+ for (const [i, expected] of t.sibling.entries()) {
46
+ const siblingFn = () => sibling(i, t.n_leaves);
47
+ if (expected != null) {
48
+ expect(siblingFn()).toBe(expected);
49
+ }
50
+ else {
51
+ expect(siblingFn).toThrow(InternalError);
52
+ }
53
+ }
54
+ }
55
+ //# sourceMappingURL=treemath.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"treemath.test.js","sourceRoot":"","sources":["../../../test/test-vectors/treemath.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,mCAAmC,CAAA;AACpD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACxC,IAAI,CAAC,0BAA0B,KAAK,EAAE,EAAE,GAAG,EAAE;QAC3C,YAAY,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAQrB;IACC,iEAAiE;IACjE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAC7C,yCAAyC;IACzC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAErC,qGAAqG;IACrG,KAAK,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC5B,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QACvC,CAAC;IACH,CAAC;IAED,uGAAuG;IACvG,KAAK,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC9B,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QACxC,CAAC;IACH,CAAC;IAED,mGAAmG;IACnG,KAAK,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAA;QAC5C,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACnC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IAED,qGAAqG;IACrG,KAAK,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAA;QAC9C,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACpC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QAC1C,CAAC;IACH,CAAC;AACH,CAAC"}
@@ -0,0 +1 @@
1
+ export {};
@@ -0,0 +1,40 @@
1
+ import { getCiphersuiteFromId, getCiphersuiteImpl } from "../../src/crypto/ciphersuite";
2
+ import { hexToBytes } from "@noble/ciphers/utils";
3
+ import json from "../../test_vectors/welcome.json";
4
+ import { decodeMlsMessage } from "../../src/message";
5
+ import { makeKeyPackageRef } from "../../src/keyPackage";
6
+ import { constantTimeEqual } from "../../src/util/constantTimeCompare";
7
+ import { verifyGroupInfoConfirmationTag, verifyGroupInfoSignature } from "../../src/groupInfo";
8
+ import { decryptGroupInfo, decryptGroupSecrets } from "../../src/welcome";
9
+ for (const [index, x] of json.entries()) {
10
+ test(`welcome test vectors ${index}`, async () => {
11
+ const impl = await getCiphersuiteImpl(getCiphersuiteFromId(x.cipher_suite));
12
+ await testWelcome(x.init_priv, x.key_package, x.signer_pub, x.welcome, impl);
13
+ });
14
+ }
15
+ async function testWelcome(init_priv, key_package, signer_pub, welcome, impl) {
16
+ const x = decodeMlsMessage(hexToBytes(welcome), 0);
17
+ if (x === undefined || x[0].wireformat !== "mls_welcome")
18
+ throw new Error("Couldn't decode to welcome");
19
+ const w = x[0].welcome;
20
+ const y = decodeMlsMessage(hexToBytes(key_package), 0);
21
+ if (y === undefined || y[0].wireformat !== "mls_key_package")
22
+ throw new Error("Couldn't decode to key package");
23
+ const keyPackageRef = await makeKeyPackageRef(y[0].keyPackage, impl.hash);
24
+ const secret = w.secrets.find((s) => constantTimeEqual(s.newMember, keyPackageRef));
25
+ if (secret === undefined)
26
+ throw new Error("No matching secret found");
27
+ const privKey = await impl.hpke.importPrivateKey(hexToBytes(init_priv));
28
+ const groupSecrets = await decryptGroupSecrets(privKey, keyPackageRef, w, impl.hpke);
29
+ if (groupSecrets === undefined)
30
+ throw new Error("Could not decrypt group secrets");
31
+ const pskSecret = new Uint8Array(impl.kdf.size);
32
+ const gi = await decryptGroupInfo(w, groupSecrets.joinerSecret, pskSecret, impl);
33
+ if (gi === undefined)
34
+ throw new Error("Could not decrypt group info");
35
+ const tagOk = await verifyGroupInfoConfirmationTag(gi, groupSecrets.joinerSecret, pskSecret, impl);
36
+ expect(tagOk).toBe(true);
37
+ const signatureOk = await verifyGroupInfoSignature(gi, hexToBytes(signer_pub), impl.signature);
38
+ expect(signatureOk).toBe(true);
39
+ }
40
+ //# sourceMappingURL=welcome.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"welcome.test.js","sourceRoot":"","sources":["../../../test/test-vectors/welcome.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkC,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AACvH,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,IAAI,MAAM,iCAAiC,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAA;AACtE,OAAO,EAAE,8BAA8B,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAC9F,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAGzE,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACxC,IAAI,CAAC,wBAAwB,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,oBAAoB,CAAC,CAAC,CAAC,YAA6B,CAAC,CAAC,CAAA;QAC5F,MAAM,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,SAAiB,EACjB,WAAmB,EACnB,UAAkB,EAClB,OAAe,EACf,IAAqB;IAErB,MAAM,CAAC,GAAG,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;IAClD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAEvG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;IAEtB,MAAM,CAAC,GAAG,gBAAgB,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAA;IACtD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IAE/G,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAEzE,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAA;IAEnF,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAErE,MAAM,OAAO,GAAe,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;IACnF,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAEpF,IAAI,YAAY,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IAElF,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAE/C,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,CAAC,EAAE,YAAY,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;IAChF,IAAI,EAAE,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IAErE,MAAM,KAAK,GAAG,MAAM,8BAA8B,CAAC,EAAE,EAAE,YAAY,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;IAClG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAExB,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC,EAAE,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IAC9F,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAChC,CAAC"}
@@ -0,0 +1 @@
1
+ export {};
@@ -0,0 +1,231 @@
1
+ import { createGroup, joinGroup } from "../../src/clientState";
2
+ import { createCommit } from "../../src/createCommit";
3
+ import { emptyPskIndex } from "../../src/pskIndex";
4
+ import { ciphersuites, getCiphersuiteFromName, getCiphersuiteImpl } from "../../src/crypto/ciphersuite";
5
+ import { generateKeyPackage } from "../../src/keyPackage";
6
+ import { defaultLifetime } from "../../src/lifetime";
7
+ import { defaultCapabilities } from "../../src/defaultCapabilities";
8
+ import { CodecError, ValidationError } from "../../src/mlsError";
9
+ import { encodeRequiredCapabilities } from "../../src/requiredCapabilities";
10
+ import { encodeExternalSender } from "../../src/externalSender";
11
+ import { constantTimeEqual } from "../../src/util/constantTimeCompare";
12
+ import { createCustomCredential } from "../../src/customCredential";
13
+ for (const cs of Object.keys(ciphersuites)) {
14
+ test(`Proposal Validation ${cs}`, async () => {
15
+ await remove(cs);
16
+ });
17
+ }
18
+ async function remove(cipherSuite) {
19
+ const impl = await getCiphersuiteImpl(getCiphersuiteFromName(cipherSuite));
20
+ const aliceCredential = { credentialType: "basic", identity: new TextEncoder().encode("alice") };
21
+ const alice = await generateKeyPackage(aliceCredential, defaultCapabilities(), defaultLifetime, [], impl);
22
+ const groupId = new TextEncoder().encode("group1");
23
+ let aliceGroup = await createGroup(groupId, alice.publicPackage, alice.privatePackage, [], impl);
24
+ const bobCredential = { credentialType: "basic", identity: new TextEncoder().encode("bob") };
25
+ const bob = await generateKeyPackage(bobCredential, defaultCapabilities(), defaultLifetime, [], impl);
26
+ const charlieCredential = { credentialType: "basic", identity: new TextEncoder().encode("charlie") };
27
+ const charlie = await generateKeyPackage(charlieCredential, defaultCapabilities(), defaultLifetime, [], impl);
28
+ const addBobProposal = {
29
+ proposalType: "add",
30
+ add: {
31
+ keyPackage: bob.publicPackage,
32
+ },
33
+ };
34
+ const addCharlieProposal = {
35
+ proposalType: "add",
36
+ add: {
37
+ keyPackage: charlie.publicPackage,
38
+ },
39
+ };
40
+ const addBobAndCharlieCommitResult = await createCommit(aliceGroup, emptyPskIndex, false, [addBobProposal, addCharlieProposal], impl);
41
+ aliceGroup = addBobAndCharlieCommitResult.newState;
42
+ let bobGroup = await joinGroup(addBobAndCharlieCommitResult.welcome, bob.publicPackage, bob.privatePackage, emptyPskIndex, impl, aliceGroup.ratchetTree);
43
+ expect(bobGroup.keySchedule.epochAuthenticator).toStrictEqual(aliceGroup.keySchedule.epochAuthenticator);
44
+ let charlieGroup = await joinGroup(addBobAndCharlieCommitResult.welcome, charlie.publicPackage, charlie.privatePackage, emptyPskIndex, impl, aliceGroup.ratchetTree);
45
+ expect(charlieGroup.keySchedule.epochAuthenticator).toStrictEqual(aliceGroup.keySchedule.epochAuthenticator);
46
+ const removeBobProposal = {
47
+ proposalType: "remove",
48
+ remove: {
49
+ removed: bobGroup.privatePath.leafIndex,
50
+ },
51
+ };
52
+ const removeBobProposal2 = {
53
+ proposalType: "remove",
54
+ remove: {
55
+ removed: bobGroup.privatePath.leafIndex,
56
+ },
57
+ };
58
+ // can't remove same leaf node twice
59
+ await expect(createCommit(aliceGroup, emptyPskIndex, false, [removeBobProposal, removeBobProposal2], impl)).rejects.toThrow(ValidationError);
60
+ // can't add someone already in the group
61
+ await expect(createCommit(aliceGroup, emptyPskIndex, false, [addBobProposal], impl)).rejects.toThrow(ValidationError);
62
+ const proposalInvalidRequiredCapabilities = {
63
+ proposalType: "group_context_extensions",
64
+ groupContextExtensions: {
65
+ extensions: [{ extensionType: "required_capabilities", extensionData: new Uint8Array([1, 2]) }],
66
+ },
67
+ };
68
+ //can't add groupContextExtensions with invalid requiredCapabilities
69
+ await expect(createCommit(aliceGroup, emptyPskIndex, false, [proposalInvalidRequiredCapabilities], impl)).rejects.toThrow(CodecError);
70
+ const proposalRequiredCapabilities = {
71
+ proposalType: "group_context_extensions",
72
+ groupContextExtensions: {
73
+ extensions: [
74
+ {
75
+ extensionType: "required_capabilities",
76
+ extensionData: encodeRequiredCapabilities({ extensionTypes: [], proposalTypes: [99], credentialTypes: [] }),
77
+ },
78
+ ],
79
+ },
80
+ };
81
+ //can't add groupContextExtensions with requiredCapabilities that members don't support
82
+ await expect(createCommit(aliceGroup, emptyPskIndex, false, [proposalRequiredCapabilities], impl)).rejects.toThrow(ValidationError);
83
+ const dianaCredential = { credentialType: "basic", identity: new TextEncoder().encode("diana") };
84
+ const diana = await generateKeyPackage(dianaCredential, { ...defaultCapabilities(), credentials: ["basic"] }, defaultLifetime, [], impl);
85
+ const addDiana = {
86
+ proposalType: "add",
87
+ add: {
88
+ keyPackage: diana.publicPackage,
89
+ },
90
+ };
91
+ const proposalRequiredCapabilitiesX509 = {
92
+ proposalType: "group_context_extensions",
93
+ groupContextExtensions: {
94
+ extensions: [
95
+ {
96
+ extensionType: "required_capabilities",
97
+ extensionData: encodeRequiredCapabilities({
98
+ extensionTypes: [],
99
+ proposalTypes: [],
100
+ credentialTypes: ["x509"],
101
+ }),
102
+ },
103
+ ],
104
+ },
105
+ };
106
+ //can't add groupContextExtensions with requiredCapabilities that newly added member doesn't support
107
+ await expect(createCommit(aliceGroup, emptyPskIndex, false, [addDiana, proposalRequiredCapabilitiesX509], impl)).rejects.toThrow(ValidationError);
108
+ const proposalInvalidExternalSenders = {
109
+ proposalType: "group_context_extensions",
110
+ groupContextExtensions: {
111
+ extensions: [{ extensionType: "external_senders", extensionData: new Uint8Array([1, 2]) }],
112
+ },
113
+ };
114
+ //can't add groupContextExtensions with invalid requiredCapabilities
115
+ await expect(createCommit(aliceGroup, emptyPskIndex, false, [proposalInvalidExternalSenders], impl)).rejects.toThrow(CodecError);
116
+ const badCredential = { credentialType: "basic", identity: new TextEncoder().encode("NOT GOOD") };
117
+ const proposalUnauthenticatedExternalSenders = {
118
+ proposalType: "group_context_extensions",
119
+ groupContextExtensions: {
120
+ extensions: [
121
+ {
122
+ extensionType: "external_senders",
123
+ extensionData: encodeExternalSender({ credential: badCredential, signaturePublicKey: new Uint8Array() }),
124
+ },
125
+ ],
126
+ },
127
+ };
128
+ const authService = {
129
+ async validateCredential(c, _pk) {
130
+ if (c.credentialType === "basic" && constantTimeEqual(c.identity, badCredential.identity))
131
+ return false;
132
+ return true;
133
+ },
134
+ };
135
+ //can't add groupContextExtensions with external senders that can't be auth'd
136
+ await expect(createCommit(withAuthService(aliceGroup, authService), emptyPskIndex, false, [proposalUnauthenticatedExternalSenders], impl)).rejects.toThrow(ValidationError);
137
+ const edwardCredential = { credentialType: "basic", identity: new TextEncoder().encode("edward") };
138
+ const edward = await generateKeyPackage(edwardCredential, { ...defaultCapabilities(), credentials: ["basic"] }, defaultLifetime, [], impl);
139
+ const addEdward = {
140
+ proposalType: "add",
141
+ add: {
142
+ keyPackage: edward.publicPackage,
143
+ },
144
+ };
145
+ const authServiceEdward = {
146
+ async validateCredential(c, _pk) {
147
+ if (c.credentialType === "basic" && constantTimeEqual(c.identity, edwardCredential.identity))
148
+ return false;
149
+ return true;
150
+ },
151
+ };
152
+ //can't add a member with invalid credentials
153
+ await expect(createCommit(withAuthService(aliceGroup, authServiceEdward), emptyPskIndex, false, [addEdward], impl)).rejects.toThrow(ValidationError);
154
+ const frankCredential = createCustomCredential(5, new Uint8Array([1, 2]));
155
+ const frank = await generateKeyPackage(frankCredential, defaultCapabilities(), defaultLifetime, [], impl);
156
+ const addFrank = {
157
+ proposalType: "add",
158
+ add: { keyPackage: frank.publicPackage },
159
+ };
160
+ //can't add leafNode with an unsupported credentialType
161
+ await expect(createCommit(aliceGroup, emptyPskIndex, false, [addFrank], impl)).rejects.toThrow(ValidationError);
162
+ const georgeCredential = { credentialType: "basic", identity: new TextEncoder().encode("george") };
163
+ const georgeExtension = { extensionType: 8545, extensionData: new Uint8Array() };
164
+ const george = await generateKeyPackage(georgeCredential, defaultCapabilities(), defaultLifetime, [georgeExtension], impl);
165
+ const addGeorge = {
166
+ proposalType: "add",
167
+ add: { keyPackage: george.publicPackage },
168
+ };
169
+ //can't add leafNode with an unsupported extension
170
+ await expect(createCommit(aliceGroup, emptyPskIndex, false, [addGeorge], impl)).rejects.toThrow(ValidationError);
171
+ const updateLeafNode = {
172
+ leafNodeSource: "update",
173
+ signaturePublicKey: alice.publicPackage.leafNode.signaturePublicKey,
174
+ hpkePublicKey: alice.publicPackage.leafNode.hpkePublicKey,
175
+ credential: alice.publicPackage.leafNode.credential,
176
+ capabilities: alice.publicPackage.leafNode.capabilities,
177
+ extensions: alice.publicPackage.leafNode.extensions,
178
+ signature: new Uint8Array(),
179
+ };
180
+ const updateProposal = {
181
+ proposalType: "update",
182
+ update: {
183
+ leafNode: updateLeafNode,
184
+ },
185
+ };
186
+ // commiter can't update themselves
187
+ await expect(createCommit(aliceGroup, emptyPskIndex, false, [updateProposal], impl)).rejects.toThrow(ValidationError);
188
+ const removeProposal = {
189
+ proposalType: "remove",
190
+ remove: {
191
+ removed: 0,
192
+ },
193
+ };
194
+ // committer can't remove themselves
195
+ await expect(createCommit(aliceGroup, emptyPskIndex, false, [removeProposal], impl)).rejects.toThrow(ValidationError);
196
+ const hannahCredential = { credentialType: "basic", identity: new TextEncoder().encode("bob") };
197
+ const hannah = await generateKeyPackage(hannahCredential, defaultCapabilities(), defaultLifetime, [], impl);
198
+ const addHannahProposal = {
199
+ proposalType: "add",
200
+ add: {
201
+ keyPackage: hannah.publicPackage,
202
+ },
203
+ };
204
+ // can't add the same keypackage twice
205
+ await expect(createCommit(aliceGroup, emptyPskIndex, false, [addHannahProposal, addHannahProposal], impl)).rejects.toThrow(ValidationError);
206
+ const pskId = new Uint8Array([1, 2, 3, 4]);
207
+ const pskProposal = {
208
+ proposalType: "psk",
209
+ psk: {
210
+ preSharedKeyId: {
211
+ psktype: "external",
212
+ pskId,
213
+ pskNonce: new Uint8Array([5, 6, 7, 8]),
214
+ },
215
+ },
216
+ };
217
+ // can't reference the same psk in multiple proposals
218
+ await expect(createCommit(aliceGroup, emptyPskIndex, false, [pskProposal, pskProposal], impl)).rejects.toThrow(ValidationError);
219
+ const groupContextExtensionsProposal = {
220
+ proposalType: "group_context_extensions",
221
+ groupContextExtensions: {
222
+ extensions: [],
223
+ },
224
+ };
225
+ // can't use multiple group_context_extensions proposals
226
+ await expect(createCommit(aliceGroup, emptyPskIndex, false, [groupContextExtensionsProposal, groupContextExtensionsProposal], impl)).rejects.toThrow(ValidationError);
227
+ }
228
+ function withAuthService(state, authService) {
229
+ return { ...state, clientConfig: { ...state.clientConfig, authService: authService } };
230
+ }
231
+ //# sourceMappingURL=proposalValidation.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"proposalValidation.test.js","sourceRoot":"","sources":["../../../test/validation/proposalValidation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,WAAW,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,OAAO,EAAmB,YAAY,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AACxH,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AACnE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAA;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAE/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAA;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAA;AAInE,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;IAC3C,IAAI,CAAC,uBAAuB,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,MAAM,CAAC,EAAqB,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,WAA4B;IAChD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAA;IAE1E,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;IAC5G,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,eAAe,EAAE,mBAAmB,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAEzG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAElD,IAAI,UAAU,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAEhG,MAAM,aAAa,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IACxG,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,aAAa,EAAE,mBAAmB,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAErG,MAAM,iBAAiB,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAA;IAChH,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAE7G,MAAM,cAAc,GAAgB;QAClC,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE;YACH,UAAU,EAAE,GAAG,CAAC,aAAa;SAC9B;KACF,CAAA;IAED,MAAM,kBAAkB,GAAgB;QACtC,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE;YACH,UAAU,EAAE,OAAO,CAAC,aAAa;SAClC;KACF,CAAA;IAED,MAAM,4BAA4B,GAAG,MAAM,YAAY,CACrD,UAAU,EACV,aAAa,EACb,KAAK,EACL,CAAC,cAAc,EAAE,kBAAkB,CAAC,EACpC,IAAI,CACL,CAAA;IAED,UAAU,GAAG,4BAA4B,CAAC,QAAQ,CAAA;IAElD,IAAI,QAAQ,GAAG,MAAM,SAAS,CAC5B,4BAA4B,CAAC,OAAQ,EACrC,GAAG,CAAC,aAAa,EACjB,GAAG,CAAC,cAAc,EAClB,aAAa,EACb,IAAI,EACJ,UAAU,CAAC,WAAW,CACvB,CAAA;IAED,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAA;IAExG,IAAI,YAAY,GAAG,MAAM,SAAS,CAChC,4BAA4B,CAAC,OAAQ,EACrC,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,cAAc,EACtB,aAAa,EACb,IAAI,EACJ,UAAU,CAAC,WAAW,CACvB,CAAA;IAED,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAA;IAE5G,MAAM,iBAAiB,GAAmB;QACxC,YAAY,EAAE,QAAQ;QACtB,MAAM,EAAE;YACN,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,SAAS;SACxC;KACF,CAAA;IAED,MAAM,kBAAkB,GAAmB;QACzC,YAAY,EAAE,QAAQ;QACtB,MAAM,EAAE;YACN,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,SAAS;SACxC;KACF,CAAA;IAED,oCAAoC;IACpC,MAAM,MAAM,CACV,YAAY,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,EAAE,IAAI,CAAC,CAC9F,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAElC,yCAAyC;IACzC,MAAM,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAErH,MAAM,mCAAmC,GAAa;QACpD,YAAY,EAAE,0BAA0B;QACxC,sBAAsB,EAAE;YACtB,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,uBAAuB,EAAE,aAAa,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChG;KACF,CAAA;IAED,oEAAoE;IACpE,MAAM,MAAM,CACV,YAAY,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,mCAAmC,CAAC,EAAE,IAAI,CAAC,CAC5F,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IAE7B,MAAM,4BAA4B,GAAa;QAC7C,YAAY,EAAE,0BAA0B;QACxC,sBAAsB,EAAE;YACtB,UAAU,EAAE;gBACV;oBACE,aAAa,EAAE,uBAAuB;oBACtC,aAAa,EAAE,0BAA0B,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;iBAC5G;aACF;SACF;KACF,CAAA;IAED,uFAAuF;IACvF,MAAM,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,4BAA4B,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAChH,eAAe,CAChB,CAAA;IAED,MAAM,eAAe,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;IAC5G,MAAM,KAAK,GAAG,MAAM,kBAAkB,CACpC,eAAe,EACf,EAAE,GAAG,mBAAmB,EAAE,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,EACpD,eAAe,EACf,EAAE,EACF,IAAI,CACL,CAAA;IAED,MAAM,QAAQ,GAAa;QACzB,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE;YACH,UAAU,EAAE,KAAK,CAAC,aAAa;SAChC;KACF,CAAA;IAED,MAAM,gCAAgC,GAAa;QACjD,YAAY,EAAE,0BAA0B;QACxC,sBAAsB,EAAE;YACtB,UAAU,EAAE;gBACV;oBACE,aAAa,EAAE,uBAAuB;oBACtC,aAAa,EAAE,0BAA0B,CAAC;wBACxC,cAAc,EAAE,EAAE;wBAClB,aAAa,EAAE,EAAE;wBACjB,eAAe,EAAE,CAAC,MAAM,CAAC;qBAC1B,CAAC;iBACH;aACF;SACF;KACF,CAAA;IAED,oGAAoG;IACpG,MAAM,MAAM,CACV,YAAY,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,gCAAgC,CAAC,EAAE,IAAI,CAAC,CACnG,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAElC,MAAM,8BAA8B,GAAa;QAC/C,YAAY,EAAE,0BAA0B;QACxC,sBAAsB,EAAE;YACtB,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,kBAAkB,EAAE,aAAa,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3F;KACF,CAAA;IAED,oEAAoE;IACpE,MAAM,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,8BAA8B,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAClH,UAAU,CACX,CAAA;IAED,MAAM,aAAa,GAAG,EAAE,cAAc,EAAE,OAAgB,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAA;IAE1G,MAAM,sCAAsC,GAAa;QACvD,YAAY,EAAE,0BAA0B;QACxC,sBAAsB,EAAE;YACtB,UAAU,EAAE;gBACV;oBACE,aAAa,EAAE,kBAAkB;oBACjC,aAAa,EAAE,oBAAoB,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,kBAAkB,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC;iBACzG;aACF;SACF;KACF,CAAA;IAED,MAAM,WAAW,GAA0B;QACzC,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,GAAG;YAC7B,IAAI,CAAC,CAAC,cAAc,KAAK,OAAO,IAAI,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAA;YACvG,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;IAED,6EAA6E;IAC7E,MAAM,MAAM,CACV,YAAY,CACV,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,EACxC,aAAa,EACb,KAAK,EACL,CAAC,sCAAsC,CAAC,EACxC,IAAI,CACL,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAElC,MAAM,gBAAgB,GAAG,EAAE,cAAc,EAAE,OAAgB,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAA;IAC3G,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,gBAAgB,EAChB,EAAE,GAAG,mBAAmB,EAAE,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,EACpD,eAAe,EACf,EAAE,EACF,IAAI,CACL,CAAA;IAED,MAAM,SAAS,GAAa;QAC1B,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE;YACH,UAAU,EAAE,MAAM,CAAC,aAAa;SACjC;KACF,CAAA;IAED,MAAM,iBAAiB,GAA0B;QAC/C,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,GAAG;YAC7B,IAAI,CAAC,CAAC,cAAc,KAAK,OAAO,IAAI,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAA;YAC1G,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;IAED,6CAA6C;IAC7C,MAAM,MAAM,CACV,YAAY,CAAC,eAAe,CAAC,UAAU,EAAE,iBAAiB,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CACtG,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAElC,MAAM,eAAe,GAAe,sBAAsB,CAAC,CAAC,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACrF,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,eAAe,EAAE,mBAAmB,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAEzG,MAAM,QAAQ,GAAa;QACzB,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,aAAa,EAAE;KACzC,CAAA;IAED,uDAAuD;IACvD,MAAM,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAE/G,MAAM,gBAAgB,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAA;IAC9G,MAAM,eAAe,GAAc,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,UAAU,EAAE,EAAE,CAAA;IAC3F,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,gBAAgB,EAChB,mBAAmB,EAAE,EACrB,eAAe,EACf,CAAC,eAAe,CAAC,EACjB,IAAI,CACL,CAAA;IAED,MAAM,SAAS,GAAa;QAC1B,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,aAAa,EAAE;KAC1C,CAAA;IAED,kDAAkD;IAClD,MAAM,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAEhH,MAAM,cAAc,GAAa;QAC/B,cAAc,EAAE,QAAQ;QACxB,kBAAkB,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,kBAAkB;QACnE,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,aAAa;QACzD,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU;QACnD,YAAY,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY;QACvD,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU;QACnD,SAAS,EAAE,IAAI,UAAU,EAAE;KAC5B,CAAA;IAED,MAAM,cAAc,GAAa;QAC/B,YAAY,EAAE,QAAQ;QACtB,MAAM,EAAE;YACN,QAAQ,EAAE,cAAc;SACzB;KACF,CAAA;IAED,mCAAmC;IACnC,MAAM,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAErH,MAAM,cAAc,GAAmB;QACrC,YAAY,EAAE,QAAQ;QACtB,MAAM,EAAE;YACN,OAAO,EAAE,CAAC;SACX;KACF,CAAA;IAED,oCAAoC;IACpC,MAAM,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAErH,MAAM,gBAAgB,GAAe,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IAC3G,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IAE3G,MAAM,iBAAiB,GAAgB;QACrC,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE;YACH,UAAU,EAAE,MAAM,CAAC,aAAa;SACjC;KACF,CAAA;IAED,uCAAuC;IACvC,MAAM,MAAM,CACV,YAAY,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,EAAE,IAAI,CAAC,CAC7F,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAElC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC1C,MAAM,WAAW,GAAa;QAC5B,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE;YACH,cAAc,EAAE;gBACd,OAAO,EAAE,UAAU;gBACnB,KAAK;gBACL,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aACvC;SACF;KACF,CAAA;IAED,qDAAqD;IACrD,MAAM,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC5G,eAAe,CAChB,CAAA;IAED,MAAM,8BAA8B,GAAa;QAC/C,YAAY,EAAE,0BAA0B;QACxC,sBAAsB,EAAE;YACtB,UAAU,EAAE,EAAE;SACf;KACF,CAAA;IAED,wDAAwD;IACxD,MAAM,MAAM,CACV,YAAY,CACV,UAAU,EACV,aAAa,EACb,KAAK,EACL,CAAC,8BAA8B,EAAE,8BAA8B,CAAC,EAChE,IAAI,CACL,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,KAAkB,EAAE,WAAkC;IAC7E,OAAO,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,KAAK,CAAC,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,CAAA;AACxF,CAAC"}