ts-mls 1.0.2

package/dist/src/messageProtectionPublic.js

@@ -0,0 +1,99 @@
+import { createMembershipTag, verifyMembershipTag, } from "./authenticatedContent";
+import { signFramedContentApplicationOrProposal, toTbs, verifyFramedContentSignature, } from "./framedContent";
+import { CryptoVerificationError, UsageError } from "./mlsError";
+import { findSignaturePublicKey } from "./publicMessage";
+export async function protectProposalPublic(signKey, membershipKey, groupContext, authenticatedData, proposal, leafIndex, cs) {
+    const framedContent = {
+        groupId: groupContext.groupId,
+        epoch: groupContext.epoch,
+        sender: { senderType: "member", leafIndex },
+        contentType: "proposal",
+        authenticatedData,
+        proposal,
+    };
+    const tbs = {
+        protocolVersion: groupContext.version,
+        wireformat: "mls_public_message",
+        content: framedContent,
+        senderType: "member",
+        context: groupContext,
+    };
+    const auth = await signFramedContentApplicationOrProposal(signKey, tbs, cs);
+    const authenticatedContent = {
+        wireformat: "mls_public_message",
+        content: framedContent,
+        auth,
+    };
+    const msg = await protectPublicMessage(membershipKey, groupContext, authenticatedContent, cs);
+    return { publicMessage: msg };
+}
+export async function protectExternalProposalPublic(signKey, groupContext, authenticatedData, proposal, sender, cs) {
+    const framedContent = {
+        groupId: groupContext.groupId,
+        epoch: groupContext.epoch,
+        sender,
+        contentType: "proposal",
+        authenticatedData,
+        proposal,
+    };
+    const tbs = {
+        protocolVersion: groupContext.version,
+        wireformat: "mls_public_message",
+        content: framedContent,
+        senderType: sender.senderType,
+        context: groupContext,
+    };
+    const auth = await signFramedContentApplicationOrProposal(signKey, tbs, cs);
+    const msg = {
+        content: framedContent,
+        auth,
+        senderType: sender.senderType,
+    };
+    return { publicMessage: msg };
+}
+export async function protectPublicMessage(membershipKey, groupContext, content, cs) {
+    if (content.content.contentType === "application")
+        throw new UsageError("Can't make an application message public");
+    if (content.content.sender.senderType == "member") {
+        const authenticatedContent = {
+            contentTbs: toTbs(content.content, "mls_public_message", groupContext),
+            auth: content.auth,
+        };
+        const tag = await createMembershipTag(membershipKey, authenticatedContent, cs.hash);
+        return {
+            content: content.content,
+            auth: content.auth,
+            senderType: "member",
+            membershipTag: tag,
+        };
+    }
+    return {
+        content: content.content,
+        auth: content.auth,
+        senderType: content.content.sender.senderType,
+    };
+}
+export async function unprotectPublicMessage(membershipKey, groupContext, ratchetTree, msg, cs, overrideSignatureKey) {
+    if (msg.content.contentType === "application")
+        throw new UsageError("Can't make an application message public");
+    if (msg.senderType === "member") {
+        const authenticatedContent = {
+            contentTbs: toTbs(msg.content, "mls_public_message", groupContext),
+            auth: msg.auth,
+        };
+        if (!(await verifyMembershipTag(membershipKey, authenticatedContent, msg.membershipTag, cs.hash)))
+            throw new CryptoVerificationError("Could not verify membership");
+    }
+    const signaturePublicKey = overrideSignatureKey !== undefined
+        ? overrideSignatureKey
+        : findSignaturePublicKey(ratchetTree, groupContext, msg.content);
+    const signatureValid = await verifyFramedContentSignature(signaturePublicKey, "mls_public_message", msg.content, msg.auth, groupContext, cs.signature);
+    if (!signatureValid)
+        throw new CryptoVerificationError("Signature invalid");
+    return {
+        wireformat: "mls_public_message",
+        content: msg.content,
+        auth: msg.auth,
+    };
+}
+//# sourceMappingURL=messageProtectionPublic.js.map

package/dist/src/messageProtectionPublic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messageProtectionPublic.js","sourceRoot":"","sources":["../../src/messageProtectionPublic.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,wBAAwB,CAAA;AAE/B,OAAO,EAEL,sCAAsC,EACtC,KAAK,EACL,4BAA4B,GAC7B,MAAM,iBAAiB,CAAA;AAExB,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEhE,OAAO,EAAyB,sBAAsB,EAAiB,MAAM,iBAAiB,CAAA;AAM9F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAmB,EACnB,aAAyB,EACzB,YAA0B,EAC1B,iBAA6B,EAC7B,QAAkB,EAClB,SAAiB,EACjB,EAAmB;IAEnB,MAAM,aAAa,GAAkB;QACnC,OAAO,EAAE,YAAY,CAAC,OAAO;QAC7B,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE;QAC3C,WAAW,EAAE,UAAU;QACvB,iBAAiB;QACjB,QAAQ;KACT,CAAA;IAED,MAAM,GAAG,GAAG;QACV,eAAe,EAAE,YAAY,CAAC,OAAO;QACrC,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,aAAa;QACtB,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,YAAY;KACb,CAAA;IAEV,MAAM,IAAI,GAAG,MAAM,sCAAsC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAE3E,MAAM,oBAAoB,GAAyB;QACjD,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,aAAa;QACtB,IAAI;KACL,CAAA;IAED,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,aAAa,EAAE,YAAY,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAA;IAE7F,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,CAAA;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAmB,EACnB,YAA0B,EAC1B,iBAA6B,EAC7B,QAAkB,EAClB,MAAuB,EACvB,EAAmB;IAEnB,MAAM,aAAa,GAAkB;QACnC,OAAO,EAAE,YAAY,CAAC,OAAO;QAC7B,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,MAAM;QACN,WAAW,EAAE,UAAU;QACvB,iBAAiB;QACjB,QAAQ;KACT,CAAA;IAED,MAAM,GAAG,GAAG;QACV,eAAe,EAAE,YAAY,CAAC,OAAO;QACrC,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,aAAa;QACtB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,YAAY;KACb,CAAA;IAEV,MAAM,IAAI,GAAG,MAAM,sCAAsC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAE3E,MAAM,GAAG,GAA0B;QACjC,OAAO,EAAE,aAAa;QACtB,IAAI;QACJ,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAA;IAED,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,CAAA;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,aAAyB,EACzB,YAA0B,EAC1B,OAA6B,EAC7B,EAAmB;IAEnB,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,KAAK,aAAa;QAAE,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAA;IAEnH,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,QAAQ,EAAE,CAAC;QAClD,MAAM,oBAAoB,GAA4B;YACpD,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,oBAAoB,EAAE,YAAY,CAAC;YACtE,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAA;QAED,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,aAAa,EAAE,oBAAoB,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;QACnF,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,QAAQ;YACpB,aAAa,EAAE,GAAG;SACnB,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU;KAC9C,CAAA;AACH,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,aAAyB,EACzB,YAA0B,EAC1B,WAAwB,EACxB,GAAkB,EAClB,EAAmB,EACnB,oBAAiC;IAEjC,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,aAAa;QAAE,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAA;IAE/G,IAAI,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,oBAAoB,GAA4B;YACpD,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,oBAAoB,EAAE,YAAY,CAAC;YAClE,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAA;QAED,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,aAAa,EAAE,oBAAoB,EAAE,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAC/F,MAAM,IAAI,uBAAuB,CAAC,6BAA6B,CAAC,CAAA;IACpE,CAAC;IAED,MAAM,kBAAkB,GACtB,oBAAoB,KAAK,SAAS;QAChC,CAAC,CAAC,oBAAoB;QACtB,CAAC,CAAC,sBAAsB,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IAEpE,MAAM,cAAc,GAAG,MAAM,4BAA4B,CACvD,kBAAkB,EAClB,oBAAoB,EACpB,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,IAAI,EACR,YAAY,EACZ,EAAE,CAAC,SAAS,CACb,CAAA;IAED,IAAI,CAAC,cAAc;QAAE,MAAM,IAAI,uBAAuB,CAAC,mBAAmB,CAAC,CAAA;IAE3E,OAAO;QACL,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI;KACf,CAAA;AACH,CAAC"}

package/dist/src/mlsError.d.ts

@@ -0,0 +1,24 @@
+export declare class MlsError extends Error {
+    constructor(message: string);
+}
+export declare class ValidationError extends MlsError {
+    constructor(message: string);
+}
+export declare class CodecError extends MlsError {
+    constructor(message: string);
+}
+export declare class UsageError extends MlsError {
+    constructor(message: string);
+}
+export declare class DependencyError extends MlsError {
+    constructor(message: string);
+}
+export declare class CryptoVerificationError extends MlsError {
+    constructor(message: string);
+}
+export declare class CryptoError extends MlsError {
+    constructor(message: string);
+}
+export declare class InternalError extends MlsError {
+    constructor(message: string);
+}

package/dist/src/mlsError.js

@@ -0,0 +1,49 @@
+export class MlsError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "MlsError";
+    }
+}
+export class ValidationError extends MlsError {
+    constructor(message) {
+        super(message);
+        this.name = "ValidationError";
+    }
+}
+export class CodecError extends MlsError {
+    constructor(message) {
+        super(message);
+        this.name = "CodecError";
+    }
+}
+export class UsageError extends MlsError {
+    constructor(message) {
+        super(message);
+        this.name = "UsageError";
+    }
+}
+export class DependencyError extends MlsError {
+    constructor(message) {
+        super(message);
+        this.name = "DependencyError";
+    }
+}
+export class CryptoVerificationError extends MlsError {
+    constructor(message) {
+        super(message);
+        this.name = "CryptoVerificationError";
+    }
+}
+export class CryptoError extends MlsError {
+    constructor(message) {
+        super(message);
+        this.name = "CryptoError";
+    }
+}
+export class InternalError extends MlsError {
+    constructor(message) {
+        super(`This error should never occur, if you see this please submit a bug report. Message: ${message}`);
+        this.name = "InternalError";
+    }
+}
+//# sourceMappingURL=mlsError.js.map

package/dist/src/mlsError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mlsError.js","sourceRoot":"","sources":["../../src/mlsError.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,UAAU,CAAA;IACxB,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,QAAQ;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,UAAW,SAAQ,QAAQ;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,YAAY,CAAA;IAC1B,CAAC;CACF;AAED,MAAM,OAAO,UAAW,SAAQ,QAAQ;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,YAAY,CAAA;IAC1B,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,QAAQ;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,QAAQ;IACnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IACvC,CAAC;CACF;AAED,MAAM,OAAO,WAAY,SAAQ,QAAQ;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,aAAa,CAAA;IAC3B,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,QAAQ;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,uFAAuF,OAAO,EAAE,CAAC,CAAA;QACvG,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC7B,CAAC;CACF"}

package/dist/src/nodeType.d.ts

@@ -0,0 +1,11 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+declare const nodeTypes: {
+    readonly leaf: 1;
+    readonly parent: 2;
+};
+export type NodeTypeName = keyof typeof nodeTypes;
+export type NodeTypeValue = (typeof nodeTypes)[NodeTypeName];
+export declare const encodeNodeType: Encoder<NodeTypeName>;
+export declare const decodeNodeType: Decoder<NodeTypeName>;
+export {};

package/dist/src/nodeType.js

@@ -0,0 +1,11 @@
+import { decodeUint8, encodeUint8 } from "./codec/number";
+import { mapDecoderOption } from "./codec/tlsDecoder";
+import { contramapEncoder } from "./codec/tlsEncoder";
+import { enumNumberToKey } from "./util/enumHelpers";
+const nodeTypes = {
+    leaf: 1,
+    parent: 2,
+};
+export const encodeNodeType = contramapEncoder(encodeUint8, (t) => nodeTypes[t]);
+export const decodeNodeType = mapDecoderOption(decodeUint8, enumNumberToKey(nodeTypes));
+//# sourceMappingURL=nodeType.js.map

package/dist/src/nodeType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeType.js","sourceRoot":"","sources":["../../src/nodeType.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACzD,OAAO,EAAW,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAW,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAEpD,MAAM,SAAS,GAAG;IAChB,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;CACD,CAAA;AAKV,MAAM,CAAC,MAAM,cAAc,GAA0B,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;AAEvG,MAAM,CAAC,MAAM,cAAc,GAA0B,gBAAgB,CAAC,WAAW,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAA"}

package/dist/src/paddingConfig.d.ts

@@ -0,0 +1,9 @@
+export type PaddingConfig = {
+    kind: "padUntilLength";
+    padUntilLength: number;
+} | {
+    kind: "alwaysPad";
+    paddingLength: number;
+};
+export declare const defaultPaddingConfig: PaddingConfig;
+export declare function byteLengthToPad(encodedLength: number, config: PaddingConfig): number;

package/dist/src/paddingConfig.js

@@ -0,0 +1,8 @@
+export const defaultPaddingConfig = { kind: "padUntilLength", padUntilLength: 256 };
+export function byteLengthToPad(encodedLength, config) {
+    if (config.kind === "alwaysPad")
+        return config.paddingLength;
+    else
+        return encodedLength >= config.padUntilLength ? 0 : config.padUntilLength - encodedLength;
+}
+//# sourceMappingURL=paddingConfig.js.map

package/dist/src/paddingConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paddingConfig.js","sourceRoot":"","sources":["../../src/paddingConfig.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,oBAAoB,GAAkB,EAAE,IAAI,EAAE,gBAAgB,EAAE,cAAc,EAAE,GAAG,EAAE,CAAA;AAElG,MAAM,UAAU,eAAe,CAAC,aAAqB,EAAE,MAAqB;IAC1E,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC,aAAa,CAAA;;QACvD,OAAO,aAAa,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,GAAG,aAAa,CAAA;AAChG,CAAC"}

package/dist/src/parentHash.d.ts

@@ -0,0 +1,16 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { Hash } from "./crypto/hash";
+import { RatchetTree } from "./ratchetTree";
+export type ParentHashInput = {
+    encryptionKey: Uint8Array;
+    parentHash: Uint8Array;
+    originalSiblingTreeHash: Uint8Array;
+};
+export declare const encodeParentHashInput: Encoder<ParentHashInput>;
+export declare const decodeParentHashInput: Decoder<ParentHashInput>;
+export declare function verifyParentHashes(tree: RatchetTree, h: Hash): Promise<boolean>;
+/**
+ * Calculcates parent hash for a given node or leaf and returns the node index of the parent or undefined if the given node is the root node.
+ */
+export declare function calculateParentHash(tree: RatchetTree, nodeIndex: number, h: Hash): Promise<[Uint8Array, number | undefined]>;

package/dist/src/parentHash.js

@@ -0,0 +1,103 @@
+import { mapDecoders } from "./codec/tlsDecoder";
+import { contramapEncoders } from "./codec/tlsEncoder";
+import { decodeVarLenData, encodeVarLenData } from "./codec/variableLength";
+import { InternalError } from "./mlsError";
+import { findFirstNonBlankAncestor, removeLeaves } from "./ratchetTree";
+import { treeHash } from "./treeHash";
+import { isLeaf, leafToNodeIndex, leafWidth, left, right, root } from "./treemath";
+import { constantTimeEqual } from "./util/constantTimeCompare";
+export const encodeParentHashInput = contramapEncoders([encodeVarLenData, encodeVarLenData, encodeVarLenData], (i) => [i.encryptionKey, i.parentHash, i.originalSiblingTreeHash]);
+export const decodeParentHashInput = mapDecoders([decodeVarLenData, decodeVarLenData, decodeVarLenData], (encryptionKey, parentHash, originalSiblingTreeHash) => ({
+    encryptionKey,
+    parentHash,
+    originalSiblingTreeHash,
+}));
+function validateParentHashCoverage(parentIndices, coverage) {
+    for (const index of parentIndices) {
+        if ((coverage[index] ?? 0) !== 1) {
+            return false;
+        }
+    }
+    return true;
+}
+export async function verifyParentHashes(tree, h) {
+    const parentNodes = tree.reduce((acc, cur, index) => {
+        if (cur !== undefined && cur.nodeType === "parent") {
+            return [...acc, index];
+        }
+        else
+            return acc;
+    }, []);
+    if (parentNodes.length === 0)
+        return true;
+    const coverage = await parentHashCoverage(tree, h);
+    return validateParentHashCoverage(parentNodes, coverage);
+}
+/**
+ * Traverse tree from bottom up, verifying that all non-blank parent nodes are covered by exactly one chain
+ */
+function parentHashCoverage(tree, h) {
+    const leaves = tree.filter((_v, i) => isLeaf(i));
+    return leaves.reduce(async (acc, leafNode, leafIndex) => {
+        if (leafNode === undefined)
+            return acc;
+        let currentIndex = leafToNodeIndex(leafIndex);
+        let updated = { ...(await acc) };
+        const rootIndex = root(leafWidth(tree.length));
+        while (currentIndex !== rootIndex) {
+            const currentNode = tree[currentIndex];
+            // skip blank nodes
+            if (currentNode === undefined) {
+                continue;
+            }
+            // parentHashNodeIndex is the node index where the nearest non blank ancestor was
+            const [parentHash, parentHashNodeIndex] = await calculateParentHash(tree, currentIndex, h);
+            if (parentHashNodeIndex === undefined) {
+                throw new InternalError("Reached root before completing parent hash coeverage");
+            }
+            const expectedParentHash = getParentHash(currentNode);
+            if (expectedParentHash !== undefined && constantTimeEqual(parentHash, expectedParentHash)) {
+                const newCount = (updated[parentHashNodeIndex] ?? 0) + 1;
+                updated = { ...updated, [parentHashNodeIndex]: newCount };
+            }
+            else {
+                // skip to next leaf
+                break;
+            }
+            currentIndex = parentHashNodeIndex;
+        }
+        return updated;
+    }, Promise.resolve({}));
+}
+function getParentHash(node) {
+    if (node.nodeType === "parent")
+        return node.parent.parentHash;
+    else if (node.leaf.leafNodeSource === "commit")
+        return node.leaf.parentHash;
+}
+/**
+ * Calculcates parent hash for a given node or leaf and returns the node index of the parent or undefined if the given node is the root node.
+ */
+export async function calculateParentHash(tree, nodeIndex, h) {
+    const rootIndex = root(leafWidth(tree.length));
+    if (nodeIndex === rootIndex) {
+        return [new Uint8Array(), undefined];
+    }
+    const parentNodeIndex = findFirstNonBlankAncestor(tree, nodeIndex);
+    const parentNode = tree[parentNodeIndex];
+    if (parentNodeIndex === rootIndex && parentNode === undefined) {
+        return [new Uint8Array(), parentNodeIndex];
+    }
+    const siblingIndex = nodeIndex < parentNodeIndex ? right(parentNodeIndex) : left(parentNodeIndex);
+    if (parentNode === undefined || parentNode.nodeType === "leaf")
+        throw new InternalError("Expected non-blank parent Node");
+    const removedUnmerged = removeLeaves(tree, parentNode.parent.unmergedLeaves);
+    const originalSiblingTreeHash = await treeHash(removedUnmerged, siblingIndex, h);
+    const input = {
+        encryptionKey: parentNode.parent.hpkePublicKey,
+        parentHash: parentNode.parent.parentHash,
+        originalSiblingTreeHash,
+    };
+    return [await h.digest(encodeParentHashInput(input)), parentNodeIndex];
+}
+//# sourceMappingURL=parentHash.js.map

package/dist/src/parentHash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parentHash.js","sourceRoot":"","sources":["../../src/parentHash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAW,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAE3E,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,EAAE,yBAAyB,EAAqB,YAAY,EAAE,MAAM,eAAe,CAAA;AAC1F,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAElF,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAQ9D,MAAM,CAAC,MAAM,qBAAqB,GAA6B,iBAAiB,CAC9E,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,EACtD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,uBAAuB,CAAU,CAC3E,CAAA;AAED,MAAM,CAAC,MAAM,qBAAqB,GAA6B,WAAW,CACxE,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,EACtD,CAAC,aAAa,EAAE,UAAU,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC;IACvD,aAAa;IACb,UAAU;IACV,uBAAuB;CACxB,CAAC,CACH,CAAA;AAED,SAAS,0BAA0B,CAAC,aAAuB,EAAE,QAAgC;IAC3F,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAiB,EAAE,CAAO;IACjE,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAClD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACnD,OAAO,CAAC,GAAG,GAAG,EAAE,KAAK,CAAC,CAAA;QACxB,CAAC;;YAAM,OAAO,GAAG,CAAA;IACnB,CAAC,EAAE,EAAc,CAAC,CAAA;IAElB,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAEzC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAElD,OAAO,0BAA0B,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;AAC1D,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAiB,EAAE,CAAO;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAChD,OAAO,MAAM,CAAC,MAAM,CAClB,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE;QACjC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,GAAG,CAAA;QAEtC,IAAI,YAAY,GAAG,eAAe,CAAC,SAAS,CAAC,CAAA;QAC7C,IAAI,OAAO,GAAG,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAA;QAEhC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;QAE9C,OAAO,YAAY,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,CAAA;YAEtC,mBAAmB;YACnB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,SAAQ;YACV,CAAC;YAED,iFAAiF;YACjF,MAAM,CAAC,UAAU,EAAE,mBAAmB,CAAC,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAA;YAE1F,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,IAAI,aAAa,CAAC,sDAAsD,CAAC,CAAA;YACjF,CAAC;YAED,MAAM,kBAAkB,GAAG,aAAa,CAAC,WAAW,CAAC,CAAA;YAErD,IAAI,kBAAkB,KAAK,SAAS,IAAI,iBAAiB,CAAC,UAAU,EAAE,kBAAkB,CAAC,EAAE,CAAC;gBAC1F,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;gBACxD,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAA;YAC3D,CAAC;iBAAM,CAAC;gBACN,oBAAoB;gBACpB,MAAK;YACP,CAAC;YAED,YAAY,GAAG,mBAAmB,CAAA;QACpC,CAAC;QAED,OAAO,OAAO,CAAA;IAChB,CAAC,EACD,OAAO,CAAC,OAAO,CAAC,EAA4B,CAAC,CAC9C,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAU;IAC/B,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAA;SACxD,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAA;AAC7E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAiB,EACjB,SAAiB,EACjB,CAAO;IAEP,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,UAAU,EAAE,EAAE,SAAS,CAAC,CAAA;IACtC,CAAC;IAED,MAAM,eAAe,GAAG,yBAAyB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAElE,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,CAAA;IAExC,IAAI,eAAe,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC9D,OAAO,CAAC,IAAI,UAAU,EAAE,EAAE,eAAe,CAAC,CAAA;IAC5C,CAAC;IAED,MAAM,YAAY,GAAG,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAEjG,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM;QAC5D,MAAM,IAAI,aAAa,CAAC,gCAAgC,CAAC,CAAA;IAE3D,MAAM,eAAe,GAAG,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;IAE5E,MAAM,uBAAuB,GAAG,MAAM,QAAQ,CAAC,eAAe,EAAE,YAAY,EAAE,CAAC,CAAC,CAAA;IAEhF,MAAM,KAAK,GAAG;QACZ,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,aAAa;QAC9C,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU;QACxC,uBAAuB;KACxB,CAAA;IAED,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;AACxE,CAAC"}

package/dist/src/parentNode.d.ts

@@ -0,0 +1,9 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+export type ParentNode = {
+    hpkePublicKey: Uint8Array;
+    parentHash: Uint8Array;
+    unmergedLeaves: number[];
+};
+export declare const encodeParentNode: Encoder<ParentNode>;
+export declare const decodeParentNode: Decoder<ParentNode>;

package/dist/src/parentNode.js

@@ -0,0 +1,11 @@
+import { encodeUint32, decodeUint32 } from "./codec/number";
+import { mapDecoders } from "./codec/tlsDecoder";
+import { contramapEncoders } from "./codec/tlsEncoder";
+import { encodeVarLenData, encodeVarLenType, decodeVarLenData, decodeVarLenType } from "./codec/variableLength";
+export const encodeParentNode = contramapEncoders([encodeVarLenData, encodeVarLenData, encodeVarLenType(encodeUint32)], (node) => [node.hpkePublicKey, node.parentHash, node.unmergedLeaves]);
+export const decodeParentNode = mapDecoders([decodeVarLenData, decodeVarLenData, decodeVarLenType(decodeUint32)], (hpkePublicKey, parentHash, unmergedLeaves) => ({
+    hpkePublicKey,
+    parentHash,
+    unmergedLeaves,
+}));
+//# sourceMappingURL=parentNode.js.map

package/dist/src/parentNode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parentNode.js","sourceRoot":"","sources":["../../src/parentNode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC3D,OAAO,EAAW,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAW,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAI/G,MAAM,CAAC,MAAM,gBAAgB,GAAwB,iBAAiB,CACpE,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC,EACpE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,cAAc,CAAU,CAC9E,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAwB,WAAW,CAC9D,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC,EACpE,CAAC,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;IAC9C,aAAa;IACb,UAAU;IACV,cAAc;CACf,CAAC,CACH,CAAA"}

package/dist/src/pathSecrets.d.ts

@@ -0,0 +1,10 @@
+import { Kdf } from "./crypto/kdf";
+import { RatchetTree } from "./ratchetTree";
+import { PathSecret } from "./updatePath";
+/**
+ * PathSecrets is a record with nodeIndex as keys and the path secret as values
+ */
+export type PathSecrets = Record<number, Uint8Array>;
+export declare function pathToPathSecrets(pathSecrets: PathSecret[]): PathSecrets;
+export declare function getCommitSecret(tree: RatchetTree, nodeIndex: number, pathSecret: Uint8Array, kdf: Kdf): Promise<Uint8Array>;
+export declare function pathToRoot(tree: RatchetTree, nodeIndex: number, pathSecret: Uint8Array, kdf: Kdf): Promise<PathSecrets>;

package/dist/src/pathSecrets.js

@@ -0,0 +1,31 @@
+import { deriveSecret } from "./crypto/kdf";
+import { InternalError } from "./mlsError";
+import { findFirstNonBlankAncestor } from "./ratchetTree";
+import { root, leafWidth } from "./treemath";
+export function pathToPathSecrets(pathSecrets) {
+    return pathSecrets.reduce((acc, cur) => ({
+        ...acc,
+        [cur.nodeIndex]: cur.secret,
+    }), {});
+}
+export async function getCommitSecret(tree, nodeIndex, pathSecret, kdf) {
+    const rootIndex = root(leafWidth(tree.length));
+    const path = await pathToRoot(tree, nodeIndex, pathSecret, kdf);
+    const rootSecret = path[rootIndex];
+    if (rootSecret === undefined)
+        throw new InternalError("Could not find secret for root");
+    return deriveSecret(rootSecret, "path", kdf);
+}
+export async function pathToRoot(tree, nodeIndex, pathSecret, kdf) {
+    const rootIndex = root(leafWidth(tree.length));
+    let currentIndex = nodeIndex;
+    let pathSecrets = { [nodeIndex]: pathSecret };
+    while (currentIndex != rootIndex) {
+        const nextIndex = findFirstNonBlankAncestor(tree, currentIndex);
+        const nextSecret = await deriveSecret(pathSecrets[currentIndex], "path", kdf);
+        pathSecrets[nextIndex] = nextSecret;
+        currentIndex = nextIndex;
+    }
+    return pathSecrets;
+}
+//# sourceMappingURL=pathSecrets.js.map

package/dist/src/pathSecrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathSecrets.js","sourceRoot":"","sources":["../../src/pathSecrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAO,YAAY,EAAE,MAAM,cAAc,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,EAAe,yBAAyB,EAAE,MAAM,eAAe,CAAA;AACtE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAQ5C,MAAM,UAAU,iBAAiB,CAAC,WAAyB;IACzD,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACb,GAAG,GAAG;QACN,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,MAAM;KAC5B,CAAC,EACF,EAAE,CACH,CAAA;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAiB,EACjB,SAAiB,EACjB,UAAsB,EACtB,GAAQ;IAER,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,CAAA;IAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,CAAA;IAElC,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,IAAI,aAAa,CAAC,gCAAgC,CAAC,CAAA;IACvF,OAAO,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAiB,EACjB,SAAiB,EACjB,UAAsB,EACtB,GAAQ;IAER,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9C,IAAI,YAAY,GAAG,SAAS,CAAA;IAC5B,IAAI,WAAW,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAA;IAC7C,OAAO,YAAY,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;QAC/D,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,YAAY,CAAE,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;QAE9E,WAAW,CAAC,SAAS,CAAC,GAAG,UAAU,CAAA;QACnC,YAAY,GAAG,SAAS,CAAA;IAC1B,CAAC;IAED,OAAO,WAAW,CAAA;AACpB,CAAC"}

package/dist/src/presharedkey.d.ts

@@ -0,0 +1,51 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { CiphersuiteImpl } from "./crypto/ciphersuite";
+export declare const pskTypes: {
+    readonly external: 1;
+    readonly resumption: 2;
+};
+export type PSKTypeName = keyof typeof pskTypes;
+export type PSKType = (typeof pskTypes)[PSKTypeName];
+export declare const encodePskType: Encoder<PSKTypeName>;
+export declare const decodePskType: Decoder<PSKTypeName>;
+declare const resumptionPSKUsages: {
+    readonly application: 1;
+    readonly reinit: 2;
+    readonly branch: 3;
+};
+export type ResumptionPSKUsageName = keyof typeof resumptionPSKUsages;
+export type ResumptionPSKUsage = (typeof resumptionPSKUsages)[ResumptionPSKUsageName];
+export declare const encodeResumptionPSKUsage: Encoder<ResumptionPSKUsageName>;
+export declare const decodeResumptionPSKUsage: Decoder<ResumptionPSKUsageName>;
+export type PSKInfoExternal = {
+    psktype: "external";
+    pskId: Uint8Array;
+};
+export type PSKInfoResumption = {
+    psktype: "resumption";
+    usage: ResumptionPSKUsageName;
+    pskGroupId: Uint8Array;
+    pskEpoch: bigint;
+};
+export type PSKInfo = PSKInfoExternal | PSKInfoResumption;
+export declare const encodePskInfo: Encoder<PSKInfo>;
+export declare const decodePskInfo: Decoder<PSKInfo>;
+type PSKNonce = {
+    pskNonce: Uint8Array;
+};
+export type PreSharedKeyID = PSKInfo & PSKNonce;
+export declare const encodePskId: Encoder<PreSharedKeyID>;
+export declare const decodePskId: Decoder<PreSharedKeyID>;
+type PSKLabel = {
+    id: PreSharedKeyID;
+    index: number;
+    count: number;
+};
+export declare const encodePskLabel: Encoder<PSKLabel>;
+export declare const decodePskLabel: Decoder<PSKLabel>;
+export type PreSharedKeyIdExternal = PSKInfoExternal & PSKNonce;
+export type PreSharedKeyIdResumption = PSKInfoResumption & PSKNonce;
+export declare function computePskSecret(psks: [PreSharedKeyID, Uint8Array][], impl: CiphersuiteImpl): Promise<Uint8Array<ArrayBufferLike>>;
+export declare function updatePskSecret(secret: Uint8Array, pskId: PreSharedKeyID, psk: Uint8Array, index: number, count: number, impl: CiphersuiteImpl): Promise<Uint8Array<ArrayBufferLike>>;
+export {};

package/dist/src/presharedkey.js

@@ -0,0 +1,59 @@
+import { decodeUint16, decodeUint64, decodeUint8, encodeUint16, encodeUint64, encodeUint8 } from "./codec/number";
+import { flatMapDecoder, mapDecoder, mapDecoderOption, mapDecoders } from "./codec/tlsDecoder";
+import { contramapEncoder, contramapEncoders } from "./codec/tlsEncoder";
+import { decodeVarLenData, encodeVarLenData } from "./codec/variableLength";
+import { expandWithLabel } from "./crypto/kdf";
+import { enumNumberToKey } from "./util/enumHelpers";
+export const pskTypes = {
+    external: 1,
+    resumption: 2,
+};
+export const encodePskType = contramapEncoder(encodeUint8, (t) => pskTypes[t]);
+export const decodePskType = mapDecoderOption(decodeUint8, enumNumberToKey(pskTypes));
+const resumptionPSKUsages = {
+    application: 1,
+    reinit: 2,
+    branch: 3,
+};
+export const encodeResumptionPSKUsage = contramapEncoder(encodeUint8, (u) => resumptionPSKUsages[u]);
+export const decodeResumptionPSKUsage = mapDecoderOption(decodeUint8, enumNumberToKey(resumptionPSKUsages));
+const encodePskInfoExternal = contramapEncoders([encodePskType, encodeVarLenData], (i) => [i.psktype, i.pskId]);
+const encodePskInfoResumption = contramapEncoders([encodePskType, encodeResumptionPSKUsage, encodeVarLenData, encodeUint64], (info) => [info.psktype, info.usage, info.pskGroupId, info.pskEpoch]);
+const decodePskInfoResumption = mapDecoders([decodeResumptionPSKUsage, decodeVarLenData, decodeUint64], (usage, pskGroupId, pskEpoch) => {
+    return { usage, pskGroupId, pskEpoch };
+});
+export const encodePskInfo = (info) => {
+    switch (info.psktype) {
+        case "external":
+            return encodePskInfoExternal(info);
+        case "resumption":
+            return encodePskInfoResumption(info);
+    }
+};
+export const decodePskInfo = flatMapDecoder(decodePskType, (psktype) => {
+    switch (psktype) {
+        case "external":
+            return mapDecoder(decodeVarLenData, (pskId) => ({
+                psktype,
+                pskId,
+            }));
+        case "resumption":
+            return mapDecoder(decodePskInfoResumption, (resumption) => ({
+                psktype,
+                ...resumption,
+            }));
+    }
+});
+export const encodePskId = contramapEncoders([encodePskInfo, encodeVarLenData], (pskid) => [pskid, pskid.pskNonce]);
+export const decodePskId = mapDecoders([decodePskInfo, decodeVarLenData], (info, pskNonce) => ({ ...info, pskNonce }));
+export const encodePskLabel = contramapEncoders([encodePskId, encodeUint16, encodeUint16], (label) => [label.id, label.index, label.count]);
+export const decodePskLabel = mapDecoders([decodePskId, decodeUint16, decodeUint16], (id, index, count) => ({ id, index, count }));
+export async function computePskSecret(psks, impl) {
+    const zeroes = new Uint8Array(impl.kdf.size);
+    return psks.reduce(async (acc, [curId, curPsk], index) => updatePskSecret(await acc, curId, curPsk, index, psks.length, impl), Promise.resolve(zeroes));
+}
+export async function updatePskSecret(secret, pskId, psk, index, count, impl) {
+    const zeroes = new Uint8Array(impl.kdf.size);
+    return impl.kdf.extract(await expandWithLabel(await impl.kdf.extract(zeroes, psk), "derived psk", encodePskLabel({ id: pskId, index, count }), impl.kdf.size, impl.kdf), secret);
+}
+//# sourceMappingURL=presharedkey.js.map

package/dist/src/presharedkey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presharedkey.js","sourceRoot":"","sources":["../../src/presharedkey.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACjH,OAAO,EAAW,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACvG,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAW,MAAM,oBAAoB,CAAA;AACjF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAE3E,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE9C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAEpD,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,QAAQ,EAAE,CAAC;IACX,UAAU,EAAE,CAAC;CACL,CAAA;AAKV,MAAM,CAAC,MAAM,aAAa,GAAyB,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;AACpG,MAAM,CAAC,MAAM,aAAa,GAAyB,gBAAgB,CAAC,WAAW,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAA;AAE3G,MAAM,mBAAmB,GAAG;IAC1B,WAAW,EAAE,CAAC;IACd,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;CACD,CAAA;AAKV,MAAM,CAAC,MAAM,wBAAwB,GAAoC,gBAAgB,CACvF,WAAW,EACX,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAC9B,CAAA;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAoC,gBAAgB,CACvF,WAAW,EACX,eAAe,CAAC,mBAAmB,CAAC,CACrC,CAAA;AAWD,MAAM,qBAAqB,GAA6B,iBAAiB,CACvE,CAAC,aAAa,EAAE,gBAAgB,CAAC,EACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAU,CACrC,CAAA;AAED,MAAM,uBAAuB,GAA+B,iBAAiB,CAC3E,CAAC,aAAa,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,YAAY,CAAC,EACzE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAU,CAC9E,CAAA;AAED,MAAM,uBAAuB,GAAG,WAAW,CACzC,CAAC,wBAAwB,EAAE,gBAAgB,EAAE,YAAY,CAAC,EAC1D,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE;IAC9B,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;AACxC,CAAC,CACF,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAqB,CAAC,IAAI,EAAE,EAAE;IACtD,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,UAAU;YACb,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAA;QACpC,KAAK,YAAY;YACf,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAqB,cAAc,CAAC,aAAa,EAAE,CAAC,OAAO,EAAoB,EAAE;IACzG,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,UAAU;YACb,OAAO,UAAU,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC9C,OAAO;gBACP,KAAK;aACN,CAAC,CAAC,CAAA;QACL,KAAK,YAAY;YACf,OAAO,UAAU,CAAC,uBAAuB,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBAC1D,OAAO;gBACP,GAAG,UAAU;aACd,CAAC,CAAC,CAAA;IACP,CAAC;AACH,CAAC,CAAC,CAAA;AAMF,MAAM,CAAC,MAAM,WAAW,GAA4B,iBAAiB,CACnE,CAAC,aAAa,EAAE,gBAAgB,CAAC,EACjC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAU,CAC5C,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAA4B,WAAW,CAC7D,CAAC,aAAa,EAAE,gBAAgB,CAAC,EACjC,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,CAC5C,CAAA;AAQD,MAAM,CAAC,MAAM,cAAc,GAAsB,iBAAiB,CAChE,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,CAAC,EACzC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAU,CACzD,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAsB,WAAW,CAC1D,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,CAAC,EACzC,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAC7C,CAAA;AAKD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAoC,EAAE,IAAqB;IAChG,MAAM,MAAM,GAAe,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAExD,OAAO,IAAI,CAAC,MAAM,CAChB,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAC1G,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CACxB,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAkB,EAClB,KAAqB,EACrB,GAAe,EACf,KAAa,EACb,KAAa,EACb,IAAqB;IAErB,MAAM,MAAM,GAAe,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACxD,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CACrB,MAAM,eAAe,CACnB,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EACnC,aAAa,EACb,cAAc,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAC3C,IAAI,CAAC,GAAG,CAAC,IAAI,EACb,IAAI,CAAC,GAAG,CACT,EACD,MAAM,CACP,CAAA;AACH,CAAC"}

package/dist/src/privateKeyPath.d.ts

@@ -0,0 +1,12 @@
+import { CiphersuiteImpl } from "./crypto/ciphersuite";
+import { PathSecrets } from "./pathSecrets";
+export type PrivateKeyPath = {
+    leafIndex: number;
+    privateKeys: Record<number, Uint8Array>;
+};
+/**
+ * Merges PrivateKeyPaths, BEWARE, if there is a conflict, this function will prioritize the second `b` parameter
+ */
+export declare function mergePrivateKeyPaths(a: PrivateKeyPath, b: PrivateKeyPath): PrivateKeyPath;
+export declare function updateLeafKey(path: PrivateKeyPath, newKey: Uint8Array): PrivateKeyPath;
+export declare function toPrivateKeyPath(pathSecrets: PathSecrets, leafIndex: number, cs: CiphersuiteImpl): Promise<PrivateKeyPath>;

package/dist/src/privateKeyPath.js

@@ -0,0 +1,21 @@
+import { deriveSecret } from "./crypto/kdf";
+import { leafToNodeIndex } from "./treemath";
+/**
+ * Merges PrivateKeyPaths, BEWARE, if there is a conflict, this function will prioritize the second `b` parameter
+ */
+export function mergePrivateKeyPaths(a, b) {
+    return { ...a, privateKeys: { ...a.privateKeys, ...b.privateKeys } };
+}
+export function updateLeafKey(path, newKey) {
+    return { ...path, privateKeys: { ...path.privateKeys, [leafToNodeIndex(path.leafIndex)]: newKey } };
+}
+export async function toPrivateKeyPath(pathSecrets, leafIndex, cs) {
+    const asArray = await Promise.all(Object.entries(pathSecrets).map(async ([nodeIndex, pathSecret]) => {
+        const nodeSecret = await deriveSecret(pathSecret, "node", cs.kdf);
+        const { privateKey } = await cs.hpke.deriveKeyPair(nodeSecret);
+        return [Number(nodeIndex), await cs.hpke.exportPrivateKey(privateKey)];
+    }));
+    const privateKeys = Object.fromEntries(asArray);
+    return { leafIndex, privateKeys };
+}
+//# sourceMappingURL=privateKeyPath.js.map

package/dist/src/privateKeyPath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privateKeyPath.js","sourceRoot":"","sources":["../../src/privateKeyPath.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAM5C;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAiB,EAAE,CAAiB;IACvE,OAAO,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAA;AACtE,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,IAAoB,EAAE,MAAkB;IACpE,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAA;AACrG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAwB,EACxB,SAAiB,EACjB,EAAmB;IAEnB,MAAM,OAAO,GAA2B,MAAM,OAAO,CAAC,GAAG,CACvD,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE;QAChE,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;QACjE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAE9D,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAU,CAAA;IACjF,CAAC,CAAC,CACH,CAAA;IAED,MAAM,WAAW,GAA+B,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;IAE3E,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAA;AACnC,CAAC"}