diff --git a/CHANGELOG.md b/CHANGELOG.md --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,22 @@ +# Version 0.2 + +* COMPILER ASSISTED BREAKING CHANGE — `Prv`, `prv`, `unPrv`, `prvToPub`, `Pub`, + `pub` and `unPub` are not exported from the `BIP32` module anymore. Instead, + this library now uses the corresponding types and functions from the + `Bitcoin.Keys` module of the `bitcoin-keys` library. + +* Add `indexNext`, `subsXPubXPub`, `subsPubPub`, `subsXPrvXPrv`, `subPrvPrv`, + `subsXPrvXPub`, `subsPubPub`. + +* Add field accessors to `XPub` and `XPrv`. + +* Depend on `bitcoin-keys`. + +* Improved `Show` instances. + +* Improved documentation. + + # Version 0.1.2 * Depend on `bitcoin-hash`. diff --git a/bip32.cabal b/bip32.cabal --- a/bip32.cabal +++ b/bip32.cabal @@ -1,6 +1,6 @@ cabal-version: 2.4 name: bip32 -version: 0.1.2 +version: 0.2 license: Apache-2.0 license-file: LICENSE extra-source-files: README.md CHANGELOG.md @@ -22,22 +22,18 @@ default-language: Haskell2010 ghc-options: -O2 -Wall -Werror=incomplete-patterns ghcjs-options: -O3 -Wall -Werror=incomplete-patterns - build-depends: base == 4.*, bytestring, base58-bytestring, binary + build-depends: + base == 4.*, + base58-bytestring, + binary, + bitcoin-keys, + bytestring, library import: basic hs-source-dirs: lib exposed-modules: BIP32 build-depends: bitcoin-hash - if impl(ghcjs) - other-modules: BIP32.GHCJS - build-depends: ghcjs-base - js-sources: - -- This file is generated. See README.md. - js/index.compiled.js - else - other-modules: BIP32.GHC - build-depends: secp256k1-haskell test-suite test import: basic diff --git a/js/index.compiled.js b/js/index.compiled.js deleted file mode 100644 --- a/js/index.compiled.js +++ /dev/null @@ -1,1 +0,0 @@ -var h$bip32=function(e){var t={};function r(i){if(t[i])return t[i].exports;var f=t[i]={i:i,l:!1,exports:{}};return e[i].call(f.exports,f,f.exports,r),f.l=!0,f.exports}return r.m=e,r.c=t,r.d=function(e,t,i){r.o(e,t)||Object.defineProperty(e,t,{enumerable:!0,get:i})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(r.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var f in e)r.d(i,f,function(t){return e[t]}.bind(null,f));return i},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r.p="",r(r.s=16)}([function(e,t,r){"use strict";var i=t,f=r(2),n=r(3),d=r(10);i.assert=n,i.toArray=d.toArray,i.zero2=d.zero2,i.toHex=d.toHex,i.encode=d.encode,i.getNAF=function(e,t,r){var i=new Array(Math.max(e.bitLength(),r)+1);i.fill(0);for(var f=1<(f>>1)-1?(f>>1)-c:c,n.isubn(a)):a=0,i[d]=a,n.iushrn(1)}return i},i.getJSF=function(e,t){var r=[[],[]];e=e.clone(),t=t.clone();for(var i=0,f=0;e.cmpn(-i)>0||t.cmpn(-f)>0;){var n,d,a,c=e.andln(3)+i&3,s=t.andln(3)+f&3;if(3===c&&(c=-1),3===s&&(s=-1),0==(1&c))n=0;else n=3!==(a=e.andln(7)+i&7)&&5!==a||2!==s?c:-c;if(r[0].push(n),0==(1&s))d=0;else d=3!==(a=t.andln(7)+f&7)&&5!==a||2!==c?s:-s;r[1].push(d),2*i===n+1&&(i=1-i),2*f===d+1&&(f=1-f),e.iushrn(1),t.iushrn(1)}return r},i.cachedProperty=function(e,t,r){var i="_"+t;e.prototype[t]=function(){return void 0!==this[i]?this[i]:this[i]=r.call(this)}},i.parseBytes=function(e){return"string"==typeof e?i.toArray(e,"hex"):e},i.intFromLE=function(e){return new f(e,"hex","le")}},function(e,t,r){"use strict";var i=r(3),f=r(7);function n(e,t){return 55296==(64512&e.charCodeAt(t))&&(!(t<0||t+1>=e.length)&&56320==(64512&e.charCodeAt(t+1)))}function d(e){return(e>>>24|e>>>8&65280|e<<8&16711680|(255&e)<<24)>>>0}function a(e){return 1===e.length?"0"+e:e}function c(e){return 7===e.length?"0"+e:6===e.length?"00"+e:5===e.length?"000"+e:4===e.length?"0000"+e:3===e.length?"00000"+e:2===e.length?"000000"+e:1===e.length?"0000000"+e:e}t.inherits=f,t.toArray=function(e,t){if(Array.isArray(e))return e.slice();if(!e)return[];var r=[];if("string"==typeof e)if(t){if("hex"===t)for((e=e.replace(/[^a-z0-9]+/gi,"")).length%2!=0&&(e="0"+e),f=0;f>6|192,r[i++]=63&d|128):n(e,f)?(d=65536+((1023&d)<<10)+(1023&e.charCodeAt(++f)),r[i++]=d>>18|240,r[i++]=d>>12&63|128,r[i++]=d>>6&63|128,r[i++]=63&d|128):(r[i++]=d>>12|224,r[i++]=d>>6&63|128,r[i++]=63&d|128)}else for(f=0;f>>0}return d},t.split32=function(e,t){for(var r=new Array(4*e.length),i=0,f=0;i>>24,r[f+1]=n>>>16&255,r[f+2]=n>>>8&255,r[f+3]=255&n):(r[f+3]=n>>>24,r[f+2]=n>>>16&255,r[f+1]=n>>>8&255,r[f]=255&n)}return r},t.rotr32=function(e,t){return e>>>t|e<<32-t},t.rotl32=function(e,t){return e<>>32-t},t.sum32=function(e,t){return e+t>>>0},t.sum32_3=function(e,t,r){return e+t+r>>>0},t.sum32_4=function(e,t,r,i){return e+t+r+i>>>0},t.sum32_5=function(e,t,r,i,f){return e+t+r+i+f>>>0},t.sum64=function(e,t,r,i){var f=e[t],n=i+e[t+1]>>>0,d=(n>>0,e[t+1]=n},t.sum64_hi=function(e,t,r,i){return(t+i>>>0>>0},t.sum64_lo=function(e,t,r,i){return t+i>>>0},t.sum64_4_hi=function(e,t,r,i,f,n,d,a){var c=0,s=t;return c+=(s=s+i>>>0)>>0)>>0)>>0},t.sum64_4_lo=function(e,t,r,i,f,n,d,a){return t+i+n+a>>>0},t.sum64_5_hi=function(e,t,r,i,f,n,d,a,c,s){var o=0,h=t;return o+=(h=h+i>>>0)>>0)>>0)>>0)>>0},t.sum64_5_lo=function(e,t,r,i,f,n,d,a,c,s){return t+i+n+a+s>>>0},t.rotr64_hi=function(e,t,r){return(t<<32-r|e>>>r)>>>0},t.rotr64_lo=function(e,t,r){return(e<<32-r|t>>>r)>>>0},t.shr64_hi=function(e,t,r){return e>>>r},t.shr64_lo=function(e,t,r){return(e<<32-r|t>>>r)>>>0}},function(e,t,r){(function(e){!function(e,t){"use strict";function i(e,t){if(!e)throw new Error(t||"Assertion failed")}function f(e,t){e.super_=t;var r=function(){};r.prototype=t.prototype,e.prototype=new r,e.prototype.constructor=e}function n(e,t,r){if(n.isBN(e))return e;this.negative=0,this.words=null,this.length=0,this.red=null,null!==e&&("le"!==t&&"be"!==t||(r=t,t=10),this._init(e||0,t||10,r||"be"))}var d;"object"==typeof e?e.exports=n:t.BN=n,n.BN=n,n.wordSize=26;try{d=r(22).Buffer}catch(e){}function a(e,t,r){for(var i=0,f=Math.min(e.length,r),n=t;n=49&&d<=54?d-49+10:d>=17&&d<=22?d-17+10:15&d}return i}function c(e,t,r,i){for(var f=0,n=Math.min(e.length,r),d=t;d=49?a-49+10:a>=17?a-17+10:a}return f}n.isBN=function(e){return e instanceof n||null!==e&&"object"==typeof e&&e.constructor.wordSize===n.wordSize&&Array.isArray(e.words)},n.max=function(e,t){return e.cmp(t)>0?e:t},n.min=function(e,t){return e.cmp(t)<0?e:t},n.prototype._init=function(e,t,r){if("number"==typeof e)return this._initNumber(e,t,r);if("object"==typeof e)return this._initArray(e,t,r);"hex"===t&&(t=16),i(t===(0|t)&&t>=2&&t<=36);var f=0;"-"===(e=e.toString().replace(/\s+/g,""))[0]&&f++,16===t?this._parseHex(e,f):this._parseBase(e,t,f),"-"===e[0]&&(this.negative=1),this.strip(),"le"===r&&this._initArray(this.toArray(),t,r)},n.prototype._initNumber=function(e,t,r){e<0&&(this.negative=1,e=-e),e<67108864?(this.words=[67108863&e],this.length=1):e<4503599627370496?(this.words=[67108863&e,e/67108864&67108863],this.length=2):(i(e<9007199254740992),this.words=[67108863&e,e/67108864&67108863,1],this.length=3),"le"===r&&this._initArray(this.toArray(),t,r)},n.prototype._initArray=function(e,t,r){if(i("number"==typeof e.length),e.length<=0)return this.words=[0],this.length=1,this;this.length=Math.ceil(e.length/3),this.words=new Array(this.length);for(var f=0;f=0;f-=3)d=e[f]|e[f-1]<<8|e[f-2]<<16,this.words[n]|=d<>>26-a&67108863,(a+=24)>=26&&(a-=26,n++);else if("le"===r)for(f=0,n=0;f>>26-a&67108863,(a+=24)>=26&&(a-=26,n++);return this.strip()},n.prototype._parseHex=function(e,t){this.length=Math.ceil((e.length-t)/6),this.words=new Array(this.length);for(var r=0;r=t;r-=6)f=a(e,r,r+6),this.words[i]|=f<>>26-n&4194303,(n+=24)>=26&&(n-=26,i++);r+6!==t&&(f=a(e,t,r+6),this.words[i]|=f<>>26-n&4194303),this.strip()},n.prototype._parseBase=function(e,t,r){this.words=[0],this.length=1;for(var i=0,f=1;f<=67108863;f*=t)i++;i--,f=f/t|0;for(var n=e.length-r,d=n%i,a=Math.min(n,n-d)+r,s=0,o=r;o1&&0===this.words[this.length-1];)this.length--;return this._normSign()},n.prototype._normSign=function(){return 1===this.length&&0===this.words[0]&&(this.negative=0),this},n.prototype.inspect=function(){return(this.red?""};var s=["","0","00","000","0000","00000","000000","0000000","00000000","000000000","0000000000","00000000000","000000000000","0000000000000","00000000000000","000000000000000","0000000000000000","00000000000000000","000000000000000000","0000000000000000000","00000000000000000000","000000000000000000000","0000000000000000000000","00000000000000000000000","000000000000000000000000","0000000000000000000000000"],o=[0,0,25,16,12,11,10,9,8,8,7,7,7,7,6,6,6,6,6,6,6,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5],h=[0,0,33554432,43046721,16777216,48828125,60466176,40353607,16777216,43046721,1e7,19487171,35831808,62748517,7529536,11390625,16777216,24137569,34012224,47045881,64e6,4084101,5153632,6436343,7962624,9765625,11881376,14348907,17210368,20511149,243e5,28629151,33554432,39135393,45435424,52521875,60466176];function u(e,t,r){r.negative=t.negative^e.negative;var i=e.length+t.length|0;r.length=i,i=i-1|0;var f=0|e.words[0],n=0|t.words[0],d=f*n,a=67108863&d,c=d/67108864|0;r.words[0]=a;for(var s=1;s>>26,h=67108863&c,u=Math.min(s,t.length-1),b=Math.max(0,s-e.length+1);b<=u;b++){var l=s-b|0;o+=(d=(f=0|e.words[l])*(n=0|t.words[b])+h)/67108864|0,h=67108863&d}r.words[s]=0|h,c=0|o}return 0!==c?r.words[s]=0|c:r.length--,r.strip()}n.prototype.toString=function(e,t){var r;if(t=0|t||1,16===(e=e||10)||"hex"===e){r="";for(var f=0,n=0,d=0;d>>24-f&16777215)||d!==this.length-1?s[6-c.length]+c+r:c+r,(f+=2)>=26&&(f-=26,d--)}for(0!==n&&(r=n.toString(16)+r);r.length%t!=0;)r="0"+r;return 0!==this.negative&&(r="-"+r),r}if(e===(0|e)&&e>=2&&e<=36){var u=o[e],b=h[e];r="";var l=this.clone();for(l.negative=0;!l.isZero();){var p=l.modn(b).toString(e);r=(l=l.idivn(b)).isZero()?p+r:s[u-p.length]+p+r}for(this.isZero()&&(r="0"+r);r.length%t!=0;)r="0"+r;return 0!==this.negative&&(r="-"+r),r}i(!1,"Base should be between 2 and 36")},n.prototype.toNumber=function(){var e=this.words[0];return 2===this.length?e+=67108864*this.words[1]:3===this.length&&1===this.words[2]?e+=4503599627370496+67108864*this.words[1]:this.length>2&&i(!1,"Number can only safely store up to 53 bits"),0!==this.negative?-e:e},n.prototype.toJSON=function(){return this.toString(16)},n.prototype.toBuffer=function(e,t){return i(void 0!==d),this.toArrayLike(d,e,t)},n.prototype.toArray=function(e,t){return this.toArrayLike(Array,e,t)},n.prototype.toArrayLike=function(e,t,r){var f=this.byteLength(),n=r||Math.max(1,f);i(f<=n,"byte array longer than desired length"),i(n>0,"Requested array length <= 0"),this.strip();var d,a,c="le"===t,s=new e(n),o=this.clone();if(c){for(a=0;!o.isZero();a++)d=o.andln(255),o.iushrn(8),s[a]=d;for(;a=4096&&(r+=13,t>>>=13),t>=64&&(r+=7,t>>>=7),t>=8&&(r+=4,t>>>=4),t>=2&&(r+=2,t>>>=2),r+t},n.prototype._zeroBits=function(e){if(0===e)return 26;var t=e,r=0;return 0==(8191&t)&&(r+=13,t>>>=13),0==(127&t)&&(r+=7,t>>>=7),0==(15&t)&&(r+=4,t>>>=4),0==(3&t)&&(r+=2,t>>>=2),0==(1&t)&&r++,r},n.prototype.bitLength=function(){var e=this.words[this.length-1],t=this._countBits(e);return 26*(this.length-1)+t},n.prototype.zeroBits=function(){if(this.isZero())return 0;for(var e=0,t=0;te.length?this.clone().ior(e):e.clone().ior(this)},n.prototype.uor=function(e){return this.length>e.length?this.clone().iuor(e):e.clone().iuor(this)},n.prototype.iuand=function(e){var t;t=this.length>e.length?e:this;for(var r=0;re.length?this.clone().iand(e):e.clone().iand(this)},n.prototype.uand=function(e){return this.length>e.length?this.clone().iuand(e):e.clone().iuand(this)},n.prototype.iuxor=function(e){var t,r;this.length>e.length?(t=this,r=e):(t=e,r=this);for(var i=0;ie.length?this.clone().ixor(e):e.clone().ixor(this)},n.prototype.uxor=function(e){return this.length>e.length?this.clone().iuxor(e):e.clone().iuxor(this)},n.prototype.inotn=function(e){i("number"==typeof e&&e>=0);var t=0|Math.ceil(e/26),r=e%26;this._expand(t),r>0&&t--;for(var f=0;f0&&(this.words[f]=~this.words[f]&67108863>>26-r),this.strip()},n.prototype.notn=function(e){return this.clone().inotn(e)},n.prototype.setn=function(e,t){i("number"==typeof e&&e>=0);var r=e/26|0,f=e%26;return this._expand(r+1),this.words[r]=t?this.words[r]|1<e.length?(r=this,i=e):(r=e,i=this);for(var f=0,n=0;n>>26;for(;0!==f&&n>>26;if(this.length=r.length,0!==f)this.words[this.length]=f,this.length++;else if(r!==this)for(;ne.length?this.clone().iadd(e):e.clone().iadd(this)},n.prototype.isub=function(e){if(0!==e.negative){e.negative=0;var t=this.iadd(e);return e.negative=1,t._normSign()}if(0!==this.negative)return this.negative=0,this.iadd(e),this.negative=1,this._normSign();var r,i,f=this.cmp(e);if(0===f)return this.negative=0,this.length=1,this.words[0]=0,this;f>0?(r=this,i=e):(r=e,i=this);for(var n=0,d=0;d>26,this.words[d]=67108863&t;for(;0!==n&&d>26,this.words[d]=67108863&t;if(0===n&&d>>13,b=0|d[1],l=8191&b,p=b>>>13,m=0|d[2],v=8191&m,y=m>>>13,g=0|d[3],w=8191&g,M=g>>>13,S=0|d[4],A=8191&S,_=S>>>13,x=0|d[5],I=8191&x,k=x>>>13,z=0|d[6],q=8191&z,R=z>>>13,P=0|d[7],E=8191&P,N=P>>>13,j=0|d[8],L=8191&j,B=j>>>13,O=0|d[9],K=8191&O,T=O>>>13,C=0|a[0],F=8191&C,Z=C>>>13,U=0|a[1],V=8191&U,J=U>>>13,H=0|a[2],X=8191&H,D=H>>>13,W=0|a[3],Y=8191&W,$=W>>>13,Q=0|a[4],G=8191&Q,ee=Q>>>13,te=0|a[5],re=8191&te,ie=te>>>13,fe=0|a[6],ne=8191&fe,de=fe>>>13,ae=0|a[7],ce=8191&ae,se=ae>>>13,oe=0|a[8],he=8191&oe,ue=oe>>>13,be=0|a[9],le=8191&be,pe=be>>>13;r.negative=e.negative^t.negative,r.length=19;var me=(s+(i=Math.imul(h,F))|0)+((8191&(f=(f=Math.imul(h,Z))+Math.imul(u,F)|0))<<13)|0;s=((n=Math.imul(u,Z))+(f>>>13)|0)+(me>>>26)|0,me&=67108863,i=Math.imul(l,F),f=(f=Math.imul(l,Z))+Math.imul(p,F)|0,n=Math.imul(p,Z);var ve=(s+(i=i+Math.imul(h,V)|0)|0)+((8191&(f=(f=f+Math.imul(h,J)|0)+Math.imul(u,V)|0))<<13)|0;s=((n=n+Math.imul(u,J)|0)+(f>>>13)|0)+(ve>>>26)|0,ve&=67108863,i=Math.imul(v,F),f=(f=Math.imul(v,Z))+Math.imul(y,F)|0,n=Math.imul(y,Z),i=i+Math.imul(l,V)|0,f=(f=f+Math.imul(l,J)|0)+Math.imul(p,V)|0,n=n+Math.imul(p,J)|0;var ye=(s+(i=i+Math.imul(h,X)|0)|0)+((8191&(f=(f=f+Math.imul(h,D)|0)+Math.imul(u,X)|0))<<13)|0;s=((n=n+Math.imul(u,D)|0)+(f>>>13)|0)+(ye>>>26)|0,ye&=67108863,i=Math.imul(w,F),f=(f=Math.imul(w,Z))+Math.imul(M,F)|0,n=Math.imul(M,Z),i=i+Math.imul(v,V)|0,f=(f=f+Math.imul(v,J)|0)+Math.imul(y,V)|0,n=n+Math.imul(y,J)|0,i=i+Math.imul(l,X)|0,f=(f=f+Math.imul(l,D)|0)+Math.imul(p,X)|0,n=n+Math.imul(p,D)|0;var ge=(s+(i=i+Math.imul(h,Y)|0)|0)+((8191&(f=(f=f+Math.imul(h,$)|0)+Math.imul(u,Y)|0))<<13)|0;s=((n=n+Math.imul(u,$)|0)+(f>>>13)|0)+(ge>>>26)|0,ge&=67108863,i=Math.imul(A,F),f=(f=Math.imul(A,Z))+Math.imul(_,F)|0,n=Math.imul(_,Z),i=i+Math.imul(w,V)|0,f=(f=f+Math.imul(w,J)|0)+Math.imul(M,V)|0,n=n+Math.imul(M,J)|0,i=i+Math.imul(v,X)|0,f=(f=f+Math.imul(v,D)|0)+Math.imul(y,X)|0,n=n+Math.imul(y,D)|0,i=i+Math.imul(l,Y)|0,f=(f=f+Math.imul(l,$)|0)+Math.imul(p,Y)|0,n=n+Math.imul(p,$)|0;var we=(s+(i=i+Math.imul(h,G)|0)|0)+((8191&(f=(f=f+Math.imul(h,ee)|0)+Math.imul(u,G)|0))<<13)|0;s=((n=n+Math.imul(u,ee)|0)+(f>>>13)|0)+(we>>>26)|0,we&=67108863,i=Math.imul(I,F),f=(f=Math.imul(I,Z))+Math.imul(k,F)|0,n=Math.imul(k,Z),i=i+Math.imul(A,V)|0,f=(f=f+Math.imul(A,J)|0)+Math.imul(_,V)|0,n=n+Math.imul(_,J)|0,i=i+Math.imul(w,X)|0,f=(f=f+Math.imul(w,D)|0)+Math.imul(M,X)|0,n=n+Math.imul(M,D)|0,i=i+Math.imul(v,Y)|0,f=(f=f+Math.imul(v,$)|0)+Math.imul(y,Y)|0,n=n+Math.imul(y,$)|0,i=i+Math.imul(l,G)|0,f=(f=f+Math.imul(l,ee)|0)+Math.imul(p,G)|0,n=n+Math.imul(p,ee)|0;var Me=(s+(i=i+Math.imul(h,re)|0)|0)+((8191&(f=(f=f+Math.imul(h,ie)|0)+Math.imul(u,re)|0))<<13)|0;s=((n=n+Math.imul(u,ie)|0)+(f>>>13)|0)+(Me>>>26)|0,Me&=67108863,i=Math.imul(q,F),f=(f=Math.imul(q,Z))+Math.imul(R,F)|0,n=Math.imul(R,Z),i=i+Math.imul(I,V)|0,f=(f=f+Math.imul(I,J)|0)+Math.imul(k,V)|0,n=n+Math.imul(k,J)|0,i=i+Math.imul(A,X)|0,f=(f=f+Math.imul(A,D)|0)+Math.imul(_,X)|0,n=n+Math.imul(_,D)|0,i=i+Math.imul(w,Y)|0,f=(f=f+Math.imul(w,$)|0)+Math.imul(M,Y)|0,n=n+Math.imul(M,$)|0,i=i+Math.imul(v,G)|0,f=(f=f+Math.imul(v,ee)|0)+Math.imul(y,G)|0,n=n+Math.imul(y,ee)|0,i=i+Math.imul(l,re)|0,f=(f=f+Math.imul(l,ie)|0)+Math.imul(p,re)|0,n=n+Math.imul(p,ie)|0;var Se=(s+(i=i+Math.imul(h,ne)|0)|0)+((8191&(f=(f=f+Math.imul(h,de)|0)+Math.imul(u,ne)|0))<<13)|0;s=((n=n+Math.imul(u,de)|0)+(f>>>13)|0)+(Se>>>26)|0,Se&=67108863,i=Math.imul(E,F),f=(f=Math.imul(E,Z))+Math.imul(N,F)|0,n=Math.imul(N,Z),i=i+Math.imul(q,V)|0,f=(f=f+Math.imul(q,J)|0)+Math.imul(R,V)|0,n=n+Math.imul(R,J)|0,i=i+Math.imul(I,X)|0,f=(f=f+Math.imul(I,D)|0)+Math.imul(k,X)|0,n=n+Math.imul(k,D)|0,i=i+Math.imul(A,Y)|0,f=(f=f+Math.imul(A,$)|0)+Math.imul(_,Y)|0,n=n+Math.imul(_,$)|0,i=i+Math.imul(w,G)|0,f=(f=f+Math.imul(w,ee)|0)+Math.imul(M,G)|0,n=n+Math.imul(M,ee)|0,i=i+Math.imul(v,re)|0,f=(f=f+Math.imul(v,ie)|0)+Math.imul(y,re)|0,n=n+Math.imul(y,ie)|0,i=i+Math.imul(l,ne)|0,f=(f=f+Math.imul(l,de)|0)+Math.imul(p,ne)|0,n=n+Math.imul(p,de)|0;var Ae=(s+(i=i+Math.imul(h,ce)|0)|0)+((8191&(f=(f=f+Math.imul(h,se)|0)+Math.imul(u,ce)|0))<<13)|0;s=((n=n+Math.imul(u,se)|0)+(f>>>13)|0)+(Ae>>>26)|0,Ae&=67108863,i=Math.imul(L,F),f=(f=Math.imul(L,Z))+Math.imul(B,F)|0,n=Math.imul(B,Z),i=i+Math.imul(E,V)|0,f=(f=f+Math.imul(E,J)|0)+Math.imul(N,V)|0,n=n+Math.imul(N,J)|0,i=i+Math.imul(q,X)|0,f=(f=f+Math.imul(q,D)|0)+Math.imul(R,X)|0,n=n+Math.imul(R,D)|0,i=i+Math.imul(I,Y)|0,f=(f=f+Math.imul(I,$)|0)+Math.imul(k,Y)|0,n=n+Math.imul(k,$)|0,i=i+Math.imul(A,G)|0,f=(f=f+Math.imul(A,ee)|0)+Math.imul(_,G)|0,n=n+Math.imul(_,ee)|0,i=i+Math.imul(w,re)|0,f=(f=f+Math.imul(w,ie)|0)+Math.imul(M,re)|0,n=n+Math.imul(M,ie)|0,i=i+Math.imul(v,ne)|0,f=(f=f+Math.imul(v,de)|0)+Math.imul(y,ne)|0,n=n+Math.imul(y,de)|0,i=i+Math.imul(l,ce)|0,f=(f=f+Math.imul(l,se)|0)+Math.imul(p,ce)|0,n=n+Math.imul(p,se)|0;var _e=(s+(i=i+Math.imul(h,he)|0)|0)+((8191&(f=(f=f+Math.imul(h,ue)|0)+Math.imul(u,he)|0))<<13)|0;s=((n=n+Math.imul(u,ue)|0)+(f>>>13)|0)+(_e>>>26)|0,_e&=67108863,i=Math.imul(K,F),f=(f=Math.imul(K,Z))+Math.imul(T,F)|0,n=Math.imul(T,Z),i=i+Math.imul(L,V)|0,f=(f=f+Math.imul(L,J)|0)+Math.imul(B,V)|0,n=n+Math.imul(B,J)|0,i=i+Math.imul(E,X)|0,f=(f=f+Math.imul(E,D)|0)+Math.imul(N,X)|0,n=n+Math.imul(N,D)|0,i=i+Math.imul(q,Y)|0,f=(f=f+Math.imul(q,$)|0)+Math.imul(R,Y)|0,n=n+Math.imul(R,$)|0,i=i+Math.imul(I,G)|0,f=(f=f+Math.imul(I,ee)|0)+Math.imul(k,G)|0,n=n+Math.imul(k,ee)|0,i=i+Math.imul(A,re)|0,f=(f=f+Math.imul(A,ie)|0)+Math.imul(_,re)|0,n=n+Math.imul(_,ie)|0,i=i+Math.imul(w,ne)|0,f=(f=f+Math.imul(w,de)|0)+Math.imul(M,ne)|0,n=n+Math.imul(M,de)|0,i=i+Math.imul(v,ce)|0,f=(f=f+Math.imul(v,se)|0)+Math.imul(y,ce)|0,n=n+Math.imul(y,se)|0,i=i+Math.imul(l,he)|0,f=(f=f+Math.imul(l,ue)|0)+Math.imul(p,he)|0,n=n+Math.imul(p,ue)|0;var xe=(s+(i=i+Math.imul(h,le)|0)|0)+((8191&(f=(f=f+Math.imul(h,pe)|0)+Math.imul(u,le)|0))<<13)|0;s=((n=n+Math.imul(u,pe)|0)+(f>>>13)|0)+(xe>>>26)|0,xe&=67108863,i=Math.imul(K,V),f=(f=Math.imul(K,J))+Math.imul(T,V)|0,n=Math.imul(T,J),i=i+Math.imul(L,X)|0,f=(f=f+Math.imul(L,D)|0)+Math.imul(B,X)|0,n=n+Math.imul(B,D)|0,i=i+Math.imul(E,Y)|0,f=(f=f+Math.imul(E,$)|0)+Math.imul(N,Y)|0,n=n+Math.imul(N,$)|0,i=i+Math.imul(q,G)|0,f=(f=f+Math.imul(q,ee)|0)+Math.imul(R,G)|0,n=n+Math.imul(R,ee)|0,i=i+Math.imul(I,re)|0,f=(f=f+Math.imul(I,ie)|0)+Math.imul(k,re)|0,n=n+Math.imul(k,ie)|0,i=i+Math.imul(A,ne)|0,f=(f=f+Math.imul(A,de)|0)+Math.imul(_,ne)|0,n=n+Math.imul(_,de)|0,i=i+Math.imul(w,ce)|0,f=(f=f+Math.imul(w,se)|0)+Math.imul(M,ce)|0,n=n+Math.imul(M,se)|0,i=i+Math.imul(v,he)|0,f=(f=f+Math.imul(v,ue)|0)+Math.imul(y,he)|0,n=n+Math.imul(y,ue)|0;var Ie=(s+(i=i+Math.imul(l,le)|0)|0)+((8191&(f=(f=f+Math.imul(l,pe)|0)+Math.imul(p,le)|0))<<13)|0;s=((n=n+Math.imul(p,pe)|0)+(f>>>13)|0)+(Ie>>>26)|0,Ie&=67108863,i=Math.imul(K,X),f=(f=Math.imul(K,D))+Math.imul(T,X)|0,n=Math.imul(T,D),i=i+Math.imul(L,Y)|0,f=(f=f+Math.imul(L,$)|0)+Math.imul(B,Y)|0,n=n+Math.imul(B,$)|0,i=i+Math.imul(E,G)|0,f=(f=f+Math.imul(E,ee)|0)+Math.imul(N,G)|0,n=n+Math.imul(N,ee)|0,i=i+Math.imul(q,re)|0,f=(f=f+Math.imul(q,ie)|0)+Math.imul(R,re)|0,n=n+Math.imul(R,ie)|0,i=i+Math.imul(I,ne)|0,f=(f=f+Math.imul(I,de)|0)+Math.imul(k,ne)|0,n=n+Math.imul(k,de)|0,i=i+Math.imul(A,ce)|0,f=(f=f+Math.imul(A,se)|0)+Math.imul(_,ce)|0,n=n+Math.imul(_,se)|0,i=i+Math.imul(w,he)|0,f=(f=f+Math.imul(w,ue)|0)+Math.imul(M,he)|0,n=n+Math.imul(M,ue)|0;var ke=(s+(i=i+Math.imul(v,le)|0)|0)+((8191&(f=(f=f+Math.imul(v,pe)|0)+Math.imul(y,le)|0))<<13)|0;s=((n=n+Math.imul(y,pe)|0)+(f>>>13)|0)+(ke>>>26)|0,ke&=67108863,i=Math.imul(K,Y),f=(f=Math.imul(K,$))+Math.imul(T,Y)|0,n=Math.imul(T,$),i=i+Math.imul(L,G)|0,f=(f=f+Math.imul(L,ee)|0)+Math.imul(B,G)|0,n=n+Math.imul(B,ee)|0,i=i+Math.imul(E,re)|0,f=(f=f+Math.imul(E,ie)|0)+Math.imul(N,re)|0,n=n+Math.imul(N,ie)|0,i=i+Math.imul(q,ne)|0,f=(f=f+Math.imul(q,de)|0)+Math.imul(R,ne)|0,n=n+Math.imul(R,de)|0,i=i+Math.imul(I,ce)|0,f=(f=f+Math.imul(I,se)|0)+Math.imul(k,ce)|0,n=n+Math.imul(k,se)|0,i=i+Math.imul(A,he)|0,f=(f=f+Math.imul(A,ue)|0)+Math.imul(_,he)|0,n=n+Math.imul(_,ue)|0;var ze=(s+(i=i+Math.imul(w,le)|0)|0)+((8191&(f=(f=f+Math.imul(w,pe)|0)+Math.imul(M,le)|0))<<13)|0;s=((n=n+Math.imul(M,pe)|0)+(f>>>13)|0)+(ze>>>26)|0,ze&=67108863,i=Math.imul(K,G),f=(f=Math.imul(K,ee))+Math.imul(T,G)|0,n=Math.imul(T,ee),i=i+Math.imul(L,re)|0,f=(f=f+Math.imul(L,ie)|0)+Math.imul(B,re)|0,n=n+Math.imul(B,ie)|0,i=i+Math.imul(E,ne)|0,f=(f=f+Math.imul(E,de)|0)+Math.imul(N,ne)|0,n=n+Math.imul(N,de)|0,i=i+Math.imul(q,ce)|0,f=(f=f+Math.imul(q,se)|0)+Math.imul(R,ce)|0,n=n+Math.imul(R,se)|0,i=i+Math.imul(I,he)|0,f=(f=f+Math.imul(I,ue)|0)+Math.imul(k,he)|0,n=n+Math.imul(k,ue)|0;var qe=(s+(i=i+Math.imul(A,le)|0)|0)+((8191&(f=(f=f+Math.imul(A,pe)|0)+Math.imul(_,le)|0))<<13)|0;s=((n=n+Math.imul(_,pe)|0)+(f>>>13)|0)+(qe>>>26)|0,qe&=67108863,i=Math.imul(K,re),f=(f=Math.imul(K,ie))+Math.imul(T,re)|0,n=Math.imul(T,ie),i=i+Math.imul(L,ne)|0,f=(f=f+Math.imul(L,de)|0)+Math.imul(B,ne)|0,n=n+Math.imul(B,de)|0,i=i+Math.imul(E,ce)|0,f=(f=f+Math.imul(E,se)|0)+Math.imul(N,ce)|0,n=n+Math.imul(N,se)|0,i=i+Math.imul(q,he)|0,f=(f=f+Math.imul(q,ue)|0)+Math.imul(R,he)|0,n=n+Math.imul(R,ue)|0;var Re=(s+(i=i+Math.imul(I,le)|0)|0)+((8191&(f=(f=f+Math.imul(I,pe)|0)+Math.imul(k,le)|0))<<13)|0;s=((n=n+Math.imul(k,pe)|0)+(f>>>13)|0)+(Re>>>26)|0,Re&=67108863,i=Math.imul(K,ne),f=(f=Math.imul(K,de))+Math.imul(T,ne)|0,n=Math.imul(T,de),i=i+Math.imul(L,ce)|0,f=(f=f+Math.imul(L,se)|0)+Math.imul(B,ce)|0,n=n+Math.imul(B,se)|0,i=i+Math.imul(E,he)|0,f=(f=f+Math.imul(E,ue)|0)+Math.imul(N,he)|0,n=n+Math.imul(N,ue)|0;var Pe=(s+(i=i+Math.imul(q,le)|0)|0)+((8191&(f=(f=f+Math.imul(q,pe)|0)+Math.imul(R,le)|0))<<13)|0;s=((n=n+Math.imul(R,pe)|0)+(f>>>13)|0)+(Pe>>>26)|0,Pe&=67108863,i=Math.imul(K,ce),f=(f=Math.imul(K,se))+Math.imul(T,ce)|0,n=Math.imul(T,se),i=i+Math.imul(L,he)|0,f=(f=f+Math.imul(L,ue)|0)+Math.imul(B,he)|0,n=n+Math.imul(B,ue)|0;var Ee=(s+(i=i+Math.imul(E,le)|0)|0)+((8191&(f=(f=f+Math.imul(E,pe)|0)+Math.imul(N,le)|0))<<13)|0;s=((n=n+Math.imul(N,pe)|0)+(f>>>13)|0)+(Ee>>>26)|0,Ee&=67108863,i=Math.imul(K,he),f=(f=Math.imul(K,ue))+Math.imul(T,he)|0,n=Math.imul(T,ue);var Ne=(s+(i=i+Math.imul(L,le)|0)|0)+((8191&(f=(f=f+Math.imul(L,pe)|0)+Math.imul(B,le)|0))<<13)|0;s=((n=n+Math.imul(B,pe)|0)+(f>>>13)|0)+(Ne>>>26)|0,Ne&=67108863;var je=(s+(i=Math.imul(K,le))|0)+((8191&(f=(f=Math.imul(K,pe))+Math.imul(T,le)|0))<<13)|0;return s=((n=Math.imul(T,pe))+(f>>>13)|0)+(je>>>26)|0,je&=67108863,c[0]=me,c[1]=ve,c[2]=ye,c[3]=ge,c[4]=we,c[5]=Me,c[6]=Se,c[7]=Ae,c[8]=_e,c[9]=xe,c[10]=Ie,c[11]=ke,c[12]=ze,c[13]=qe,c[14]=Re,c[15]=Pe,c[16]=Ee,c[17]=Ne,c[18]=je,0!==s&&(c[19]=s,r.length++),r};function l(e,t,r){return(new p).mulp(e,t,r)}function p(e,t){this.x=e,this.y=t}Math.imul||(b=u),n.prototype.mulTo=function(e,t){var r=this.length+e.length;return 10===this.length&&10===e.length?b(this,e,t):r<63?u(this,e,t):r<1024?function(e,t,r){r.negative=t.negative^e.negative,r.length=e.length+t.length;for(var i=0,f=0,n=0;n>>26)|0)>>>26,d&=67108863}r.words[n]=a,i=d,d=f}return 0!==i?r.words[n]=i:r.length--,r.strip()}(this,e,t):l(this,e,t)},p.prototype.makeRBT=function(e){for(var t=new Array(e),r=n.prototype._countBits(e)-1,i=0;i>=1;return i},p.prototype.permute=function(e,t,r,i,f,n){for(var d=0;d>>=1)f++;return 1<>>=13,r[2*d+1]=8191&n,n>>>=13;for(d=2*t;d>=26,t+=f/67108864|0,t+=n>>>26,this.words[r]=67108863&n}return 0!==t&&(this.words[r]=t,this.length++),this},n.prototype.muln=function(e){return this.clone().imuln(e)},n.prototype.sqr=function(){return this.mul(this)},n.prototype.isqr=function(){return this.imul(this.clone())},n.prototype.pow=function(e){var t=function(e){for(var t=new Array(e.bitLength()),r=0;r>>f}return t}(e);if(0===t.length)return new n(1);for(var r=this,i=0;i=0);var t,r=e%26,f=(e-r)/26,n=67108863>>>26-r<<26-r;if(0!==r){var d=0;for(t=0;t>>26-r}d&&(this.words[t]=d,this.length++)}if(0!==f){for(t=this.length-1;t>=0;t--)this.words[t+f]=this.words[t];for(t=0;t=0),f=t?(t-t%26)/26:0;var n=e%26,d=Math.min((e-n)/26,this.length),a=67108863^67108863>>>n<d)for(this.length-=d,s=0;s=0&&(0!==o||s>=f);s--){var h=0|this.words[s];this.words[s]=o<<26-n|h>>>n,o=h&a}return c&&0!==o&&(c.words[c.length++]=o),0===this.length&&(this.words[0]=0,this.length=1),this.strip()},n.prototype.ishrn=function(e,t,r){return i(0===this.negative),this.iushrn(e,t,r)},n.prototype.shln=function(e){return this.clone().ishln(e)},n.prototype.ushln=function(e){return this.clone().iushln(e)},n.prototype.shrn=function(e){return this.clone().ishrn(e)},n.prototype.ushrn=function(e){return this.clone().iushrn(e)},n.prototype.testn=function(e){i("number"==typeof e&&e>=0);var t=e%26,r=(e-t)/26,f=1<=0);var t=e%26,r=(e-t)/26;if(i(0===this.negative,"imaskn works only with positive numbers"),this.length<=r)return this;if(0!==t&&r++,this.length=Math.min(r,this.length),0!==t){var f=67108863^67108863>>>t<=67108864;t++)this.words[t]-=67108864,t===this.length-1?this.words[t+1]=1:this.words[t+1]++;return this.length=Math.max(this.length,t+1),this},n.prototype.isubn=function(e){if(i("number"==typeof e),i(e<67108864),e<0)return this.iaddn(-e);if(0!==this.negative)return this.negative=0,this.iaddn(e),this.negative=1,this;if(this.words[0]-=e,1===this.length&&this.words[0]<0)this.words[0]=-this.words[0],this.negative=1;else for(var t=0;t>26)-(c/67108864|0),this.words[f+r]=67108863&n}for(;f>26,this.words[f+r]=67108863&n;if(0===a)return this.strip();for(i(-1===a),a=0,f=0;f>26,this.words[f]=67108863&n;return this.negative=1,this.strip()},n.prototype._wordDiv=function(e,t){var r=(this.length,e.length),i=this.clone(),f=e,d=0|f.words[f.length-1];0!==(r=26-this._countBits(d))&&(f=f.ushln(r),i.iushln(r),d=0|f.words[f.length-1]);var a,c=i.length-f.length;if("mod"!==t){(a=new n(null)).length=c+1,a.words=new Array(a.length);for(var s=0;s=0;h--){var u=67108864*(0|i.words[f.length+h])+(0|i.words[f.length+h-1]);for(u=Math.min(u/d|0,67108863),i._ishlnsubmul(f,u,h);0!==i.negative;)u--,i.negative=0,i._ishlnsubmul(f,1,h),i.isZero()||(i.negative^=1);a&&(a.words[h]=u)}return a&&a.strip(),i.strip(),"div"!==t&&0!==r&&i.iushrn(r),{div:a||null,mod:i}},n.prototype.divmod=function(e,t,r){return i(!e.isZero()),this.isZero()?{div:new n(0),mod:new n(0)}:0!==this.negative&&0===e.negative?(a=this.neg().divmod(e,t),"mod"!==t&&(f=a.div.neg()),"div"!==t&&(d=a.mod.neg(),r&&0!==d.negative&&d.iadd(e)),{div:f,mod:d}):0===this.negative&&0!==e.negative?(a=this.divmod(e.neg(),t),"mod"!==t&&(f=a.div.neg()),{div:f,mod:a.mod}):0!=(this.negative&e.negative)?(a=this.neg().divmod(e.neg(),t),"div"!==t&&(d=a.mod.neg(),r&&0!==d.negative&&d.isub(e)),{div:a.div,mod:d}):e.length>this.length||this.cmp(e)<0?{div:new n(0),mod:this}:1===e.length?"div"===t?{div:this.divn(e.words[0]),mod:null}:"mod"===t?{div:null,mod:new n(this.modn(e.words[0]))}:{div:this.divn(e.words[0]),mod:new n(this.modn(e.words[0]))}:this._wordDiv(e,t);var f,d,a},n.prototype.div=function(e){return this.divmod(e,"div",!1).div},n.prototype.mod=function(e){return this.divmod(e,"mod",!1).mod},n.prototype.umod=function(e){return this.divmod(e,"mod",!0).mod},n.prototype.divRound=function(e){var t=this.divmod(e);if(t.mod.isZero())return t.div;var r=0!==t.div.negative?t.mod.isub(e):t.mod,i=e.ushrn(1),f=e.andln(1),n=r.cmp(i);return n<0||1===f&&0===n?t.div:0!==t.div.negative?t.div.isubn(1):t.div.iaddn(1)},n.prototype.modn=function(e){i(e<=67108863);for(var t=(1<<26)%e,r=0,f=this.length-1;f>=0;f--)r=(t*r+(0|this.words[f]))%e;return r},n.prototype.idivn=function(e){i(e<=67108863);for(var t=0,r=this.length-1;r>=0;r--){var f=(0|this.words[r])+67108864*t;this.words[r]=f/e|0,t=f%e}return this.strip()},n.prototype.divn=function(e){return this.clone().idivn(e)},n.prototype.egcd=function(e){i(0===e.negative),i(!e.isZero());var t=this,r=e.clone();t=0!==t.negative?t.umod(e):t.clone();for(var f=new n(1),d=new n(0),a=new n(0),c=new n(1),s=0;t.isEven()&&r.isEven();)t.iushrn(1),r.iushrn(1),++s;for(var o=r.clone(),h=t.clone();!t.isZero();){for(var u=0,b=1;0==(t.words[0]&b)&&u<26;++u,b<<=1);if(u>0)for(t.iushrn(u);u-- >0;)(f.isOdd()||d.isOdd())&&(f.iadd(o),d.isub(h)),f.iushrn(1),d.iushrn(1);for(var l=0,p=1;0==(r.words[0]&p)&&l<26;++l,p<<=1);if(l>0)for(r.iushrn(l);l-- >0;)(a.isOdd()||c.isOdd())&&(a.iadd(o),c.isub(h)),a.iushrn(1),c.iushrn(1);t.cmp(r)>=0?(t.isub(r),f.isub(a),d.isub(c)):(r.isub(t),a.isub(f),c.isub(d))}return{a:a,b:c,gcd:r.iushln(s)}},n.prototype._invmp=function(e){i(0===e.negative),i(!e.isZero());var t=this,r=e.clone();t=0!==t.negative?t.umod(e):t.clone();for(var f,d=new n(1),a=new n(0),c=r.clone();t.cmpn(1)>0&&r.cmpn(1)>0;){for(var s=0,o=1;0==(t.words[0]&o)&&s<26;++s,o<<=1);if(s>0)for(t.iushrn(s);s-- >0;)d.isOdd()&&d.iadd(c),d.iushrn(1);for(var h=0,u=1;0==(r.words[0]&u)&&h<26;++h,u<<=1);if(h>0)for(r.iushrn(h);h-- >0;)a.isOdd()&&a.iadd(c),a.iushrn(1);t.cmp(r)>=0?(t.isub(r),d.isub(a)):(r.isub(t),a.isub(d))}return(f=0===t.cmpn(1)?d:a).cmpn(0)<0&&f.iadd(e),f},n.prototype.gcd=function(e){if(this.isZero())return e.abs();if(e.isZero())return this.abs();var t=this.clone(),r=e.clone();t.negative=0,r.negative=0;for(var i=0;t.isEven()&&r.isEven();i++)t.iushrn(1),r.iushrn(1);for(;;){for(;t.isEven();)t.iushrn(1);for(;r.isEven();)r.iushrn(1);var f=t.cmp(r);if(f<0){var n=t;t=r,r=n}else if(0===f||0===r.cmpn(1))break;t.isub(r)}return r.iushln(i)},n.prototype.invm=function(e){return this.egcd(e).a.umod(e)},n.prototype.isEven=function(){return 0==(1&this.words[0])},n.prototype.isOdd=function(){return 1==(1&this.words[0])},n.prototype.andln=function(e){return this.words[0]&e},n.prototype.bincn=function(e){i("number"==typeof e);var t=e%26,r=(e-t)/26,f=1<>>26,a&=67108863,this.words[d]=a}return 0!==n&&(this.words[d]=n,this.length++),this},n.prototype.isZero=function(){return 1===this.length&&0===this.words[0]},n.prototype.cmpn=function(e){var t,r=e<0;if(0!==this.negative&&!r)return-1;if(0===this.negative&&r)return 1;if(this.strip(),this.length>1)t=1;else{r&&(e=-e),i(e<=67108863,"Number is too big");var f=0|this.words[0];t=f===e?0:fe.length)return 1;if(this.length=0;r--){var i=0|this.words[r],f=0|e.words[r];if(i!==f){if&&(t=1);break}}return t},n.prototype.gtn=function(e){return 1===this.cmpn(e)},n.prototype.gt=function(e){return 1===this.cmp(e)},n.prototype.gten=function(e){return this.cmpn(e)>=0},n.prototype.gte=function(e){return this.cmp(e)>=0},n.prototype.ltn=function(e){return-1===this.cmpn(e)},n.prototype.lt=function(e){return-1===this.cmp(e)},n.prototype.lten=function(e){return this.cmpn(e)<=0},n.prototype.lte=function(e){return this.cmp(e)<=0},n.prototype.eqn=function(e){return 0===this.cmpn(e)},n.prototype.eq=function(e){return 0===this.cmp(e)},n.red=function(e){return new S(e)},n.prototype.toRed=function(e){return i(!this.red,"Already a number in reduction context"),i(0===this.negative,"red works only with positives"),e.convertTo(this)._forceRed(e)},n.prototype.fromRed=function(){return i(this.red,"fromRed works only with numbers in reduction context"),this.red.convertFrom(this)},n.prototype._forceRed=function(e){return this.red=e,this},n.prototype.forceRed=function(e){return i(!this.red,"Already a number in reduction context"),this._forceRed(e)},n.prototype.redAdd=function(e){return i(this.red,"redAdd works only with red numbers"),this.red.add(this,e)},n.prototype.redIAdd=function(e){return i(this.red,"redIAdd works only with red numbers"),this.red.iadd(this,e)},n.prototype.redSub=function(e){return i(this.red,"redSub works only with red numbers"),this.red.sub(this,e)},n.prototype.redISub=function(e){return i(this.red,"redISub works only with red numbers"),this.red.isub(this,e)},n.prototype.redShl=function(e){return i(this.red,"redShl works only with red numbers"),this.red.shl(this,e)},n.prototype.redMul=function(e){return i(this.red,"redMul works only with red numbers"),this.red._verify2(this,e),this.red.mul(this,e)},n.prototype.redIMul=function(e){return i(this.red,"redMul works only with red numbers"),this.red._verify2(this,e),this.red.imul(this,e)},n.prototype.redSqr=function(){return i(this.red,"redSqr works only with red numbers"),this.red._verify1(this),this.red.sqr(this)},n.prototype.redISqr=function(){return i(this.red,"redISqr works only with red numbers"),this.red._verify1(this),this.red.isqr(this)},n.prototype.redSqrt=function(){return i(this.red,"redSqrt works only with red numbers"),this.red._verify1(this),this.red.sqrt(this)},n.prototype.redInvm=function(){return i(this.red,"redInvm works only with red numbers"),this.red._verify1(this),this.red.invm(this)},n.prototype.redNeg=function(){return i(this.red,"redNeg works only with red numbers"),this.red._verify1(this),this.red.neg(this)},n.prototype.redPow=function(e){return i(this.red&&!e.red,"redPow(normalNum)"),this.red._verify1(this),this.red.pow(this,e)};var m={k256:null,p224:null,p192:null,p25519:null};function v(e,t){this.name=e,this.p=new n(t,16),this.n=this.p.bitLength(),this.k=new n(1).iushln(this.n).isub(this.p),this.tmp=this._tmp()}function y(){v.call(this,"k256","ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffe fffffc2f")}function g(){v.call(this,"p224","ffffffff ffffffff ffffffff ffffffff 00000000 00000000 00000001")}function w(){v.call(this,"p192","ffffffff ffffffff ffffffff fffffffe ffffffff ffffffff")}function M(){v.call(this,"25519","7fffffffffffffff ffffffffffffffff ffffffffffffffff ffffffffffffffed")}function S(e){if("string"==typeof e){var t=n._prime(e);this.m=t.p,this.prime=t}else i(e.gtn(1),"modulus must be greater than 1"),this.m=e,this.prime=null}function A(e){S.call(this,e),this.shift=this.m.bitLength(),this.shift%26!=0&&(this.shift+=26-this.shift%26),this.r=new n(1).iushln(this.shift),this.r2=this.imod(this.r.sqr()),this.rinv=this.r._invmp(this.m),this.minv=this.rinv.mul(this.r).isubn(1).div(this.m),this.minv=this.minv.umod(this.r),this.minv=this.r.sub(this.minv)}v.prototype._tmp=function(){var e=new n(null);return e.words=new Array(Math.ceil(this.n/13)),e},v.prototype.ireduce=function(e){var t,r=e;do{this.split(r,this.tmp),t=(r=(r=this.imulK(r)).iadd(this.tmp)).bitLength()}while(t>this.n);var i=t0?r.isub(this.p):void 0!==r.strip?r.strip():r._strip(),r},v.prototype.split=function(e,t){e.iushrn(this.n,0,t)},v.prototype.imulK=function(e){return e.imul(this.k)},f(y,v),y.prototype.split=function(e,t){for(var r=Math.min(e.length,9),i=0;i>>22,f=n}f>>>=22,e.words[i-10]=f,0===f&&e.length>10?e.length-=10:e.length-=9},y.prototype.imulK=function(e){e.words[e.length]=0,e.words[e.length+1]=0,e.length+=2;for(var t=0,r=0;r>>=26,e.words[r]=f,t=i}return 0!==t&&(e.words[e.length++]=t),e},n._prime=function(e){if(m[e])return m[e];var t;if("k256"===e)t=new y;else if("p224"===e)t=new g;else if("p192"===e)t=new w;else{if("p25519"!==e)throw new Error("Unknown prime "+e);t=new M}return m[e]=t,t},S.prototype._verify1=function(e){i(0===e.negative,"red works only with positives"),i(e.red,"red works only with red numbers")},S.prototype._verify2=function(e,t){i(0==(e.negative|t.negative),"red works only with positives"),i(e.red&&e.red===t.red,"red works only with red numbers")},S.prototype.imod=function(e){return this.prime?this.prime.ireduce(e)._forceRed(this):e.umod(this.m)._forceRed(this)},S.prototype.neg=function(e){return e.isZero()?e.clone():this.m.sub(e)._forceRed(this)},S.prototype.add=function(e,t){this._verify2(e,t);var r=e.add(t);return r.cmp(this.m)>=0&&r.isub(this.m),r._forceRed(this)},S.prototype.iadd=function(e,t){this._verify2(e,t);var r=e.iadd(t);return r.cmp(this.m)>=0&&r.isub(this.m),r},S.prototype.sub=function(e,t){this._verify2(e,t);var r=e.sub(t);return r.cmpn(0)<0&&r.iadd(this.m),r._forceRed(this)},S.prototype.isub=function(e,t){this._verify2(e,t);var r=e.isub(t);return r.cmpn(0)<0&&r.iadd(this.m),r},S.prototype.shl=function(e,t){return this._verify1(e),this.imod(e.ushln(t))},S.prototype.imul=function(e,t){return this._verify2(e,t),this.imod(e.imul(t))},S.prototype.mul=function(e,t){return this._verify2(e,t),this.imod(e.mul(t))},S.prototype.isqr=function(e){return this.imul(e,e.clone())},S.prototype.sqr=function(e){return this.mul(e,e)},S.prototype.sqrt=function(e){if(e.isZero())return e.clone();var t=this.m.andln(3);if(i(t%2==1),3===t){var r=this.m.add(new n(1)).iushrn(2);return this.pow(e,r)}for(var f=this.m.subn(1),d=0;!f.isZero()&&0===f.andln(1);)d++,f.iushrn(1);i(!f.isZero());var a=new n(1).toRed(this),c=a.redNeg(),s=this.m.subn(1).iushrn(1),o=this.m.bitLength();for(o=new n(2*o*o).toRed(this);0!==this.pow(o,s).cmp(c);)o.redIAdd(c);for(var h=this.pow(o,f),u=this.pow(e,f.addn(1).iushrn(1)),b=this.pow(e,f),l=d;0!==b.cmp(a);){for(var p=b,m=0;0!==p.cmp(a);m++)p=p.redSqr();i(m=0;i--){for(var s=t.words[i],o=c-1;o>=0;o--){var h=s>>o&1;f!==r[0]&&(f=this.sqr(f)),0!==h||0!==d?(d<<=1,d|=h,(4===++a||0===i&&0===o)&&(f=this.mul(f,r[d]),a=0,d=0)):a=0}c=26}return f},S.prototype.convertTo=function(e){var t=e.umod(this.m);return t===e?t.clone():t},S.prototype.convertFrom=function(e){var t=e.clone();return t.red=null,t},n.mont=function(e){return new A(e)},f(A,S),A.prototype.convertTo=function(e){return this.imod(e.ushln(this.shift))},A.prototype.convertFrom=function(e){var t=this.imod(e.mul(this.rinv));return t.red=null,t},A.prototype.imul=function(e,t){if(e.isZero()||t.isZero())return e.words[0]=0,e.length=1,e;var r=e.imul(t),i=r.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),f=r.isub(i).iushrn(this.shift),n=f;return f.cmp(this.m)>=0?n=f.isub(this.m):f.cmpn(0)<0&&(n=f.iadd(this.m)),n._forceRed(this)},A.prototype.mul=function(e,t){if(e.isZero()||t.isZero())return new n(0)._forceRed(this);var r=e.mul(t),i=r.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),f=r.isub(i).iushrn(this.shift),d=f;return f.cmp(this.m)>=0?d=f.isub(this.m):f.cmpn(0)<0&&(d=f.iadd(this.m)),d._forceRed(this)},A.prototype.invm=function(e){return this.imod(e._invmp(this.m).mul(this.r2))._forceRed(this)}}(e,this)}).call(this,r(21)(e))},function(e,t){function r(e,t){if(!e)throw new Error(t||"Assertion failed")}e.exports=r,r.equal=function(e,t,r){if(e!=t)throw new Error(r||"Assertion failed: "+e+" != "+t)}},function(e,t,r){e.exports=r(17)(r(18))},function(e,t,r){"use strict";var i=r(1),f=r(3);function n(){this.pending=null,this.pendingTotal=0,this.blockSize=this.constructor.blockSize,this.outSize=this.constructor.outSize,this.hmacStrength=this.constructor.hmacStrength,this.padLength=this.constructor.padLength/8,this.endian="big",this._delta8=this.blockSize/8,this._delta32=this.blockSize/32}t.BlockHash=n,n.prototype.update=function(e,t){if(e=i.toArray(e,t),this.pending?this.pending=this.pending.concat(e):this.pending=e,this.pendingTotal+=e.length,this.pending.length>=this._delta8){var r=(e=this.pending).length%this._delta8;this.pending=e.slice(e.length-r,e.length),0===this.pending.length&&(this.pending=null),e=i.join32(e,0,e.length-r,this.endian);for(var f=0;f>>24&255,i[f++]=e>>>16&255,i[f++]=e>>>8&255,i[f++]=255&e}else for(i[f++]=255&e,i[f++]=e>>>8&255,i[f++]=e>>>16&255,i[f++]=e>>>24&255,i[f++]=0,i[f++]=0,i[f++]=0,i[f++]=0,n=8;n0?this.redN=null:(this._maxwellTrick=!0,this.redN=this.n.toRed(this.red))}function s(e,t){this.curve=e,this.type=t,this.precomputed=null}e.exports=c,c.prototype.point=function(){throw new Error("Not implemented")},c.prototype.validate=function(){throw new Error("Not implemented")},c.prototype._fixedNafMul=function(e,t){a(e.precomputed);var r=e._getDoubles(),i=n(t,1,this._bitLength),f=(1<=c;t--)s=(s<<1)+i[t];d.push(s)}for(var o=this.jpoint(null,null,null),h=this.jpoint(null,null,null),u=f;u>0;u--){for(c=0;c=0;s--){for(t=0;s>=0&&0===d[s];s--)t++;if(s>=0&&t++,c=c.dblp(t),s<0)break;var o=d[s];a(0!==o),c="affine"===e.type?o>0?c.mixedAdd(f[o-1>>1]):c.mixedAdd(f[-o-1>>1].neg()):o>0?c.add(f[o-1>>1]):c.add(f[-o-1>>1].neg())}return"affine"===e.type?c.toP():c},c.prototype._wnafMulAdd=function(e,t,r,i,f){for(var a=this._wnafT1,c=this._wnafT2,s=this._wnafT3,o=0,h=0;h=1;h-=2){var b=h-1,l=h;if(1===a[b]&&1===a[l]){var p=[t[b],null,null,t[l]];0===t[b].y.cmp(t[l].y)?(p[1]=t[b].add(t[l]),p[2]=t[b].toJ().mixedAdd(t[l].neg())):0===t[b].y.cmp(t[l].y.redNeg())?(p[1]=t[b].toJ().mixedAdd(t[l]),p[2]=t[b].add(t[l].neg())):(p[1]=t[b].toJ().mixedAdd(t[l]),p[2]=t[b].toJ().mixedAdd(t[l].neg()));var m=[-3,-1,-5,-7,0,7,5,1,3],v=d(r[b],r[l]);o=Math.max(v[0].length,o),s[b]=new Array(o),s[l]=new Array(o);for(var y=0;y=0;h--){for(var A=0;h>=0;){var _=!0;for(y=0;y=0&&A++,M=M.dblp(A),h<0)break;for(y=0;y0?x=c[y][I-1>>1]:I<0&&(x=c[y][-I-1>>1].neg()),M="affine"===x.type?M.mixedAdd(x):M.add(x))}}for(h=0;h=Math.ceil((e.bitLength()+1)/t.step)},s.prototype._getDoubles=function(e,t){if(this.precomputed&&this.precomputed.doubles)return this.precomputed.doubles;for(var r=[this],i=this,f=0;f>8,d=255&f;n?r.push(n,d):r.push(d)}return r},i.zero2=f,i.toHex=n,i.encode=function(e,t){return"hex"===t?n(e):e}},function(e,t,r){var i;function f(e){this.rand=e}if(e.exports=function(e){return i||(i=new f(null)),i.generate(e)},e.exports.Rand=f,f.prototype.generate=function(e){return this._rand(e)},f.prototype._rand=function(e){if(this.rand.getBytes)return this.rand.getBytes(e);for(var t=new Uint8Array(e),r=0;r>>3},t.g1_256=function(e){return i(e,17)^i(e,19)^e>>>10}},function(e,t,r){"use strict";var i=r(1),f=r(5),n=r(13),d=r(3),a=i.sum32,c=i.sum32_4,s=i.sum32_5,o=n.ch32,h=n.maj32,u=n.s0_256,b=n.s1_256,l=n.g0_256,p=n.g1_256,m=f.BlockHash,v=[1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298];function y(){if(!(this instanceof y))return new y;m.call(this),this.h=[1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225],this.k=v,this.W=new Array(64)}i.inherits(y,m),e.exports=y,y.blockSize=512,y.outSize=256,y.hmacStrength=192,y.padLength=64,y.prototype._update=function(e,t){for(var r=this.W,i=0;i<16;i++)r[i]=e[t+i];for(;inew Uint8Array(e)),t){return"function"==typeof e&&(e=e(t)),p("output",e,t),e}function y(e){return Object.prototype.toString.call(e).slice(8,-1)}e.exports=e=>({contextRandomize(t){switch(l(null===t||t instanceof Uint8Array,"Expected seed to be an Uint8Array or null"),null!==t&&p("seed",t,32),e.contextRandomize(t)){case 1:throw new Error(n)}},privateKeyVerify:t=>(p("private key",t,32),0===e.privateKeyVerify(t)),privateKeyNegate(t){switch(p("private key",t,32),e.privateKeyNegate(t)){case 0:return t;case 1:throw new Error(r)}},privateKeyTweakAdd(t,r){switch(p("private key",t,32),p("tweak",r,32),e.privateKeyTweakAdd(t,r)){case 0:return t;case 1:throw new Error(i)}},privateKeyTweakMul(t,r){switch(p("private key",t,32),p("tweak",r,32),e.privateKeyTweakMul(t,r)){case 0:return t;case 1:throw new Error(f)}},publicKeyVerify:t=>(p("public key",t,[33,65]),0===e.publicKeyVerify(t)),publicKeyCreate(t,r=!0,i){switch(p("private key",t,32),m(r),i=v(i,r?33:65),e.publicKeyCreate(i,t)){case 0:return i;case 1:throw new Error(d);case 2:throw new Error(c)}},publicKeyConvert(t,r=!0,i){switch(p("public key",t,[33,65]),m(r),i=v(i,r?33:65),e.publicKeyConvert(i,t)){case 0:return i;case 1:throw new Error(a);case 2:throw new Error(c)}},publicKeyNegate(t,i=!0,f){switch(p("public key",t,[33,65]),m(i),f=v(f,i?33:65),e.publicKeyNegate(f,t)){case 0:return f;case 1:throw new Error(a);case 2:throw new Error(r);case 3:throw new Error(c)}},publicKeyCombine(t,r=!0,i){l(Array.isArray(t),"Expected public keys to be an Array"),l(t.length>0,"Expected public keys array will have more than zero items");for(const e of t)p("public key",e,[33,65]);switch(m(r),i=v(i,r?33:65),e.publicKeyCombine(i,t)){case 0:return i;case 1:throw new Error(a);case 2:throw new Error(s);case 3:throw new Error(c)}},publicKeyTweakAdd(t,r,f=!0,n){switch(p("public key",t,[33,65]),p("tweak",r,32),m(f),n=v(n,f?33:65),e.publicKeyTweakAdd(n,t,r)){case 0:return n;case 1:throw new Error(a);case 2:throw new Error(i)}},publicKeyTweakMul(t,r,i=!0,n){switch(p("public key",t,[33,65]),p("tweak",r,32),m(i),n=v(n,i?33:65),e.publicKeyTweakMul(n,t,r)){case 0:return n;case 1:throw new Error(a);case 2:throw new Error(f)}},signatureNormalize(t){switch(p("signature",t,64),e.signatureNormalize(t)){case 0:return t;case 1:throw new Error(o)}},signatureExport(t,i){p("signature",t,64);const f={output:i=v(i,72),outputlen:72};switch(e.signatureExport(f,t)){case 0:return i.slice(0,f.outputlen);case 1:throw new Error(o);case 2:throw new Error(r)}},signatureImport(t,i){switch(p("signature",t),i=v(i,64),e.signatureImport(i,t)){case 0:return i;case 1:throw new Error(o);case 2:throw new Error(r)}},ecdsaSign(t,i,f={},n){p("message",t,32),p("private key",i,32),l("Object"===y(f),"Expected options to be an Object"),void 0!==f.data&&p("options.data",f.data),void 0!==f.noncefn&&l("Function"===y(f.noncefn),"Expected options.noncefn to be a Function");const d={signature:n=v(n,64),recid:null};switch(e.ecdsaSign(d,t,i,f.data,f.noncefn)){case 0:return d;case 1:throw new Error(h);case 2:throw new Error(r)}},ecdsaVerify(t,r,i){switch(p("signature",t,64),p("message",r,32),p("public key",i,[33,65]),e.ecdsaVerify(t,r,i)){case 0:return!0;case 3:return!1;case 1:throw new Error(o);case 2:throw new Error(a)}},ecdsaRecover(t,i,f,n=!0,d){switch(p("signature",t,64),l("Number"===y(i)&&i>=0&&i<=3,"Expected recovery id to be a Number within interval [0, 3]"),p("message",f,32),m(n),d=v(d,n?33:65),e.ecdsaRecover(d,t,i,f)){case 0:return d;case 1:throw new Error(o);case 2:throw new Error(u);case 3:throw new Error(r)}},ecdh(t,r,i={},f){switch(p("public key",t,[33,65]),p("private key",r,32),l("Object"===y(i),"Expected options to be an Object"),void 0!==i.data&&p("options.data",i.data),void 0!==i.hashfn?(l("Function"===y(i.hashfn),"Expected options.hashfn to be a Function"),void 0!==i.xbuf&&p("options.xbuf",i.xbuf,32),void 0!==i.ybuf&&p("options.ybuf",i.ybuf,32),p("output",f)):f=v(f,32),e.ecdh(f,t,r,i.data,i.hashfn,i.xbuf,i.ybuf)){case 0:return f;case 1:throw new Error(a);case 2:throw new Error(b)}}})},function(e,t,r){const i=new(0,r(19).ec)("secp256k1"),f=i.curve,n=f.n.constructor;function d(e){const t=e[0];switch(t){case 2:case 3:return 33!==e.length?null:function(e,t){let r=new n(t);if(r.cmp(f.p)>=0)return null;r=r.toRed(f.red);let d=r.redSqr().redIMul(r).redIAdd(f.b).redSqrt();return 3===e!==d.isOdd()&&(d=d.redNeg()),i.keyPair({pub:{x:r,y:d}})}(t,e.subarray(1,33));case 4:case 6:case 7:return 65!==e.length?null:function(e,t,r){let d=new n(t),a=new n(r);if(d.cmp(f.p)>=0||a.cmp(f.p)>=0)return null;if(d=d.toRed(f.red),a=a.toRed(f.red),(6===e||7===e)&&a.isOdd()!==(7===e))return null;const c=d.redSqr().redIMul(d);return a.redSqr().redISub(c.redIAdd(f.b)).isZero()?i.keyPair({pub:{x:d,y:a}}):null}(t,e.subarray(1,33),e.subarray(33,65));default:return null}}function a(e,t){const r=t.encode(null,33===e.length);for(let t=0;t0,privateKeyVerify(e){const t=new n(e);return t.cmp(f.n)<0&&!t.isZero()?0:1},privateKeyNegate(e){const t=new n(e),r=f.n.sub(t).umod(f.n).toArrayLike(Uint8Array,"be",32);return e.set(r),0},privateKeyTweakAdd(e,t){const r=new n(t);if(r.cmp(f.n)>=0)return 1;if(r.iadd(new n(e)),r.cmp(f.n)>=0&&r.isub(f.n),r.isZero())return 1;const i=r.toArrayLike(Uint8Array,"be",32);return e.set(i),0},privateKeyTweakMul(e,t){let r=new n(t);if(r.cmp(f.n)>=0||r.isZero())return 1;r.imul(new n(e)),r.cmp(f.n)>=0&&(r=r.umod(f.n));const i=r.toArrayLike(Uint8Array,"be",32);return e.set(i),0},publicKeyVerify:e=>null===d(e)?1:0,publicKeyCreate(e,t){const r=new n(t);if(r.cmp(f.n)>=0||r.isZero())return 1;return a(e,i.keyFromPrivate(t).getPublic()),0},publicKeyConvert(e,t){const r=d(t);if(null===r)return 1;return a(e,r.getPublic()),0},publicKeyNegate(e,t){const r=d(t);if(null===r)return 1;const i=r.getPublic();return i.y=i.y.redNeg(),a(e,i),0},publicKeyCombine(e,t){const r=new Array(t.length);for(let e=0;e=0)return 2;const c=i.getPublic().add(f.g.mul(r));return c.isInfinity()?2:(a(e,c),0)},publicKeyTweakMul(e,t,r){const i=d(t);if(null===i)return 1;if((r=new n(r)).cmp(f.n)>=0||r.isZero())return 2;return a(e,i.getPublic().mul(r)),0},signatureNormalize(e){const t=new n(e.subarray(0,32)),r=new n(e.subarray(32,64));return t.cmp(f.n)>=0||r.cmp(f.n)>=0?1:(1===r.cmp(i.nh)&&e.set(f.n.sub(r).toArrayLike(Uint8Array,"be",32),32),0)},signatureExport(e,t){const r=t.subarray(0,32),i=t.subarray(32,64);if(new n(r).cmp(f.n)>=0)return 1;if(new n(i).cmp(f.n)>=0)return 1;const{output:d}=e;let a=d.subarray(4,37);a[0]=0,a.set(r,1);let c=33,s=0;for(;c>1&&0===a[s]&&!(128&a[s+1]);--c,++s);if(a=a.subarray(s),128&a[0])return 1;if(c>1&&0===a[0]&&!(128&a[1]))return 1;let o=d.subarray(39,72);o[0]=0,o.set(i,1);let h=33,u=0;for(;h>1&&0===o[u]&&!(128&o[u+1]);--h,++u);return o=o.subarray(u),128&o[0]||h>1&&0===o[0]&&!(128&o[1])?1:(e.outputlen=6+c+h,d[0]=48,d[1]=e.outputlen-2,d[2]=2,d[3]=a.length,d.set(a,4),d[4+c]=2,d[5+c]=o.length,d.set(o,6+c),0)},signatureImport(e,t){if(t.length<8)return 1;if(t.length>72)return 1;if(48!==t[0])return 1;if(t[1]!==t.length-2)return 1;if(2!==t[2])return 1;const r=t[3];if(0===r)return 1;if(5+r>=t.length)return 1;if(2!==t[4+r])return 1;const i=t[5+r];if(0===i)return 1;if(6+r+i!==t.length)return 1;if(128&t[4])return 1;if(r>1&&0===t[4]&&!(128&t[5]))return 1;if(128&t[r+6])return 1;if(i>1&&0===t[r+6]&&!(128&t[r+7]))return 1;let d=t.subarray(4,4+r);if(33===d.length&&0===d[0]&&(d=d.subarray(1)),d.length>32)return 1;let a=t.subarray(6+r);if(33===a.length&&0===a[0]&&(a=a.slice(1)),a.length>32)throw new Error("S length is too long");let c=new n(d);c.cmp(f.n)>=0&&(c=new n(0));let s=new n(t.subarray(6+r));return s.cmp(f.n)>=0&&(s=new n(0)),e.set(c.toArrayLike(Uint8Array,"be",32),0),e.set(s.toArrayLike(Uint8Array,"be",32),32),0},ecdsaSign(e,t,r,d,a){if(a){const e=a;a=i=>{const f=e(t,r,null,d,i);if(!(f instanceof Uint8Array&&32===f.length))throw new Error("This is the way");return new n(f)}}const c=new n(r);if(c.cmp(f.n)>=0||c.isZero())return 1;let s;try{s=i.sign(t,r,{canonical:!0,k:a,pers:d})}catch(e){return 1}return e.signature.set(s.r.toArrayLike(Uint8Array,"be",32),0),e.signature.set(s.s.toArrayLike(Uint8Array,"be",32),32),e.recid=s.recoveryParam,0},ecdsaVerify(e,t,r){const a={r:e.subarray(0,32),s:e.subarray(32,64)},c=new n(a.r),s=new n(a.s);if(c.cmp(f.n)>=0||s.cmp(f.n)>=0)return 1;if(1===s.cmp(i.nh)||c.isZero()||s.isZero())return 3;const o=d(r);if(null===o)return 2;const h=o.getPublic();return i.verify(t,a,h)?0:3},ecdsaRecover(e,t,r,d){const c={r:t.slice(0,32),s:t.slice(32,64)},s=new n(c.r),o=new n(c.s);if(s.cmp(f.n)>=0||o.cmp(f.n)>=0)return 1;if(s.isZero()||o.isZero())return 2;let h;try{h=i.recoverPubKey(d,c,r)}catch(e){return 2}return a(e,h),0},ecdh(e,t,r,a,c,s,o){const h=d(t);if(null===h)return 1;const u=new n(r);if(u.cmp(f.n)>=0||u.isZero())return 2;const b=h.getPublic().mul(u);if(void 0===c){const t=b.encode(null,!0),r=i.hash().update(t).digest();for(let t=0;t<32;++t)e[t]=r[t]}else{s||(s=new Uint8Array(32));const t=b.getX().toArray("be",32);for(let e=0;e<32;++e)s[e]=t[e];o||(o=new Uint8Array(32));const r=b.getY().toArray("be",32);for(let e=0;e<32;++e)o[e]=r[e];const i=c(s,o,a);if(!(i instanceof Uint8Array&&i.length===e.length))return 2;e.set(i)}return 0}}},function(e,t,r){"use strict";var i=t;i.version=r(20).version,i.utils=r(0),i.rand=r(11),i.curve=r(12),i.curves=r(8),i.ec=r(34),i.eddsa=r(38)},function(e){e.exports=JSON.parse('{"_from":"elliptic@^6.5.2","_id":"elliptic@6.5.2","_inBundle":false,"_integrity":"sha512-f4x70okzZbIQl/NSRLkI/+tteV/9WqL98zx+SQ69KbXxmVrmjwsNUPn/gYJJ0sHvEak24cZgHIPegRePAtA/xw==","_location":"/elliptic","_phantomChildren":{},"_requested":{"type":"range","registry":true,"raw":"elliptic@^6.5.2","name":"elliptic","escapedName":"elliptic","rawSpec":"^6.5.2","saveSpec":null,"fetchSpec":"^6.5.2"},"_requiredBy":["/browserify-sign","/create-ecdh","/secp256k1"],"_resolved":"https://registry.npmjs.org/elliptic/-/elliptic-6.5.2.tgz","_shasum":"05c5678d7173c049d8ca433552224a495d0e3762","_spec":"elliptic@^6.5.2","_where":"/home/k/q/bip32.git/bip32/node_modules/secp256k1","author":{"name":"Fedor Indutny","email":"fedor@indutny.com"},"bugs":{"url":"https://github.com/indutny/elliptic/issues"},"bundleDependencies":false,"dependencies":{"bn.js":"^4.4.0","brorand":"^1.0.1","hash.js":"^1.0.0","hmac-drbg":"^1.0.0","inherits":"^2.0.1","minimalistic-assert":"^1.0.0","minimalistic-crypto-utils":"^1.0.0"},"deprecated":false,"description":"EC cryptography","devDependencies":{"brfs":"^1.4.3","coveralls":"^3.0.8","grunt":"^1.0.4","grunt-browserify":"^5.0.0","grunt-cli":"^1.2.0","grunt-contrib-connect":"^1.0.0","grunt-contrib-copy":"^1.0.0","grunt-contrib-uglify":"^1.0.1","grunt-mocha-istanbul":"^3.0.1","grunt-saucelabs":"^9.0.1","istanbul":"^0.4.2","jscs":"^3.0.7","jshint":"^2.10.3","mocha":"^6.2.2"},"files":["lib"],"homepage":"https://github.com/indutny/elliptic","keywords":["EC","Elliptic","curve","Cryptography"],"license":"MIT","main":"lib/elliptic.js","name":"elliptic","repository":{"type":"git","url":"git+ssh://git@github.com/indutny/elliptic.git"},"scripts":{"jscs":"jscs benchmarks/*.js lib/*.js lib/**/*.js lib/**/**/*.js test/index.js","jshint":"jscs benchmarks/*.js lib/*.js lib/**/*.js lib/**/**/*.js test/index.js","lint":"npm run jscs && npm run jshint","test":"npm run lint && npm run unit","unit":"istanbul test _mocha --reporter=spec test/index.js","version":"grunt dist && git add dist/"},"version":"6.5.2"}')},function(e,t){e.exports=function(e){return e.webpackPolyfill||(e.deprecate=function(){},e.paths=[],e.children||(e.children=[]),Object.defineProperty(e,"loaded",{enumerable:!0,get:function(){return e.l}}),Object.defineProperty(e,"id",{enumerable:!0,get:function(){return e.i}}),e.webpackPolyfill=1),e}},function(e,t){},function(e,t){},function(e,t,r){"use strict";var i=r(0),f=r(2),n=r(7),d=r(6),a=i.assert;function c(e){d.call(this,"short",e),this.a=new f(e.a,16).toRed(this.red),this.b=new f(e.b,16).toRed(this.red),this.tinv=this.two.redInvm(),this.zeroA=0===this.a.fromRed().cmpn(0),this.threeA=0===this.a.fromRed().sub(this.p).cmpn(-3),this.endo=this._getEndomorphism(e),this._endoWnafT1=new Array(4),this._endoWnafT2=new Array(4)}function s(e,t,r,i){d.BasePoint.call(this,e,"affine"),null===t&&null===r?(this.x=null,this.y=null,this.inf=!0):(this.x=new f(t,16),this.y=new f(r,16),i&&(this.x.forceRed(this.curve.red),this.y.forceRed(this.curve.red)),this.x.red||(this.x=this.x.toRed(this.curve.red)),this.y.red||(this.y=this.y.toRed(this.curve.red)),this.inf=!1)}function o(e,t,r,i){d.BasePoint.call(this,e,"jacobian"),null===t&&null===r&&null===i?(this.x=this.curve.one,this.y=this.curve.one,this.z=new f(0)):(this.x=new f(t,16),this.y=new f(r,16),this.z=new f(i,16)),this.x.red||(this.x=this.x.toRed(this.curve.red)),this.y.red||(this.y=this.y.toRed(this.curve.red)),this.z.red||(this.z=this.z.toRed(this.curve.red)),this.zOne=this.z===this.curve.one}n(c,d),e.exports=c,c.prototype._getEndomorphism=function(e){if(this.zeroA&&this.g&&this.n&&1===this.p.modn(3)){var t,r;if(e.beta)t=new f(e.beta,16).toRed(this.red);else{var i=this._getEndoRoots(this.p);t=(t=i[0].cmp(i[1])<0?i[0]:i[1]).toRed(this.red)}if(e.lambda)r=new f(e.lambda,16);else{var n=this._getEndoRoots(this.n);0===this.g.mul(n[0]).x.cmp(this.g.x.redMul(t))?r=n[0]:(r=n[1],a(0===this.g.mul(r).x.cmp(this.g.x.redMul(t))))}return{beta:t,lambda:r,basis:e.basis?e.basis.map((function(e){return{a:new f(e.a,16),b:new f(e.b,16)}})):this._getEndoBasis(r)}}},c.prototype._getEndoRoots=function(e){var t=e===this.p?this.red:f.mont(e),r=new f(2).toRed(t).redInvm(),i=r.redNeg(),n=new f(3).toRed(t).redNeg().redSqrt().redMul(r);return[i.redAdd(n).fromRed(),i.redSub(n).fromRed()]},c.prototype._getEndoBasis=function(e){for(var t,r,i,n,d,a,c,s,o,h=this.n.ushrn(Math.floor(this.n.bitLength()/2)),u=e,b=this.n.clone(),l=new f(1),p=new f(0),m=new f(0),v=new f(1),y=0;0!==u.cmpn(0);){var g=b.div(u);s=b.sub(g.mul(u)),o=m.sub(g.mul(l));var w=v.sub(g.mul(p));if(!i&&s.cmp(h)<0)t=c.neg(),r=l,i=s.neg(),n=o;else if(i&&2==++y)break;c=s,b=u,u=s,m=l,l=o,v=p,p=w}d=s.neg(),a=o;var M=i.sqr().add(n.sqr());return d.sqr().add(a.sqr()).cmp(M)>=0&&(d=t,a=r),i.negative&&(i=i.neg(),n=n.neg()),d.negative&&(d=d.neg(),a=a.neg()),[{a:i,b:n},{a:d,b:a}]},c.prototype._endoSplit=function(e){var t=this.endo.basis,r=t[0],i=t[1],f=i.b.mul(e).divRound(this.n),n=r.b.neg().mul(e).divRound(this.n),d=f.mul(r.a),a=n.mul(i.a),c=f.mul(r.b),s=n.mul(i.b);return{k1:e.sub(d).sub(a),k2:c.add(s).neg()}},c.prototype.pointFromX=function(e,t){(e=new f(e,16)).red||(e=e.toRed(this.red));var r=e.redSqr().redMul(e).redIAdd(e.redMul(this.a)).redIAdd(this.b),i=r.redSqrt();if(0!==i.redSqr().redSub(r).cmp(this.zero))throw new Error("invalid point");var n=i.fromRed().isOdd();return(t&&!n||!t&&n)&&(i=i.redNeg()),this.point(e,i)},c.prototype.validate=function(e){if(e.inf)return!0;var t=e.x,r=e.y,i=this.a.redMul(t),f=t.redSqr().redMul(t).redIAdd(i).redIAdd(this.b);return 0===r.redSqr().redISub(f).cmpn(0)},c.prototype._endoWnafMulAdd=function(e,t,r){for(var i=this._endoWnafT1,f=this._endoWnafT2,n=0;n":""},s.prototype.isInfinity=function(){return this.inf},s.prototype.add=function(e){if(this.inf)return e;if(e.inf)return this;if(this.eq(e))return this.dbl();if(this.neg().eq(e))return this.curve.point(null,null);if(0===this.x.cmp(e.x))return this.curve.point(null,null);var t=this.y.redSub(e.y);0!==t.cmpn(0)&&(t=t.redMul(this.x.redSub(e.x).redInvm()));var r=t.redSqr().redISub(this.x).redISub(e.x),i=t.redMul(this.x.redSub(r)).redISub(this.y);return this.curve.point(r,i)},s.prototype.dbl=function(){if(this.inf)return this;var e=this.y.redAdd(this.y);if(0===e.cmpn(0))return this.curve.point(null,null);var t=this.curve.a,r=this.x.redSqr(),i=e.redInvm(),f=r.redAdd(r).redIAdd(r).redIAdd(t).redMul(i),n=f.redSqr().redISub(this.x.redAdd(this.x)),d=f.redMul(this.x.redSub(n)).redISub(this.y);return this.curve.point(n,d)},s.prototype.getX=function(){return this.x.fromRed()},s.prototype.getY=function(){return this.y.fromRed()},s.prototype.mul=function(e){return e=new f(e,16),this.isInfinity()?this:this._hasDoubles(e)?this.curve._fixedNafMul(this,e):this.curve.endo?this.curve._endoWnafMulAdd([this],[e]):this.curve._wnafMul(this,e)},s.prototype.mulAdd=function(e,t,r){var i=[this,t],f=[e,r];return this.curve.endo?this.curve._endoWnafMulAdd(i,f):this.curve._wnafMulAdd(1,i,f,2)},s.prototype.jmulAdd=function(e,t,r){var i=[this,t],f=[e,r];return this.curve.endo?this.curve._endoWnafMulAdd(i,f,!0):this.curve._wnafMulAdd(1,i,f,2,!0)},s.prototype.eq=function(e){return this===e||this.inf===e.inf&&(this.inf||0===this.x.cmp(e.x)&&0===this.y.cmp(e.y))},s.prototype.neg=function(e){if(this.inf)return this;var t=this.curve.point(this.x,this.y.redNeg());if(e&&this.precomputed){var r=this.precomputed,i=function(e){return e.neg()};t.precomputed={naf:r.naf&&{wnd:r.naf.wnd,points:r.naf.points.map(i)},doubles:r.doubles&&{step:r.doubles.step,points:r.doubles.points.map(i)}}}return t},s.prototype.toJ=function(){return this.inf?this.curve.jpoint(null,null,null):this.curve.jpoint(this.x,this.y,this.curve.one)},n(o,d.BasePoint),c.prototype.jpoint=function(e,t,r){return new o(this,e,t,r)},o.prototype.toP=function(){if(this.isInfinity())return this.curve.point(null,null);var e=this.z.redInvm(),t=e.redSqr(),r=this.x.redMul(t),i=this.y.redMul(t).redMul(e);return this.curve.point(r,i)},o.prototype.neg=function(){return this.curve.jpoint(this.x,this.y.redNeg(),this.z)},o.prototype.add=function(e){if(this.isInfinity())return e;if(e.isInfinity())return this;var t=e.z.redSqr(),r=this.z.redSqr(),i=this.x.redMul(t),f=e.x.redMul(r),n=this.y.redMul(t.redMul(e.z)),d=e.y.redMul(r.redMul(this.z)),a=i.redSub(f),c=n.redSub(d);if(0===a.cmpn(0))return 0!==c.cmpn(0)?this.curve.jpoint(null,null,null):this.dbl();var s=a.redSqr(),o=s.redMul(a),h=i.redMul(s),u=c.redSqr().redIAdd(o).redISub(h).redISub(h),b=c.redMul(h.redISub(u)).redISub(n.redMul(o)),l=this.z.redMul(e.z).redMul(a);return this.curve.jpoint(u,b,l)},o.prototype.mixedAdd=function(e){if(this.isInfinity())return e.toJ();if(e.isInfinity())return this;var t=this.z.redSqr(),r=this.x,i=e.x.redMul(t),f=this.y,n=e.y.redMul(t).redMul(this.z),d=r.redSub(i),a=f.redSub(n);if(0===d.cmpn(0))return 0!==a.cmpn(0)?this.curve.jpoint(null,null,null):this.dbl();var c=d.redSqr(),s=c.redMul(d),o=r.redMul(c),h=a.redSqr().redIAdd(s).redISub(o).redISub(o),u=a.redMul(o.redISub(h)).redISub(f.redMul(s)),b=this.z.redMul(d);return this.curve.jpoint(h,u,b)},o.prototype.dblp=function(e){if(0===e)return this;if(this.isInfinity())return this;if(!e)return this.dbl();if(this.curve.zeroA||this.curve.threeA){for(var t=this,r=0;r=0)return!1;if(r.redIAdd(f),0===this.x.cmp(r))return!0}},o.prototype.inspect=function(){return this.isInfinity()?"":""},o.prototype.isInfinity=function(){return 0===this.z.cmpn(0)}},function(e,t,r){"use strict";var i=r(2),f=r(7),n=r(6),d=r(0);function a(e){n.call(this,"mont",e),this.a=new i(e.a,16).toRed(this.red),this.b=new i(e.b,16).toRed(this.red),this.i4=new i(4).toRed(this.red).redInvm(),this.two=new i(2).toRed(this.red),this.a24=this.i4.redMul(this.a.redAdd(this.two))}function c(e,t,r){n.BasePoint.call(this,e,"projective"),null===t&&null===r?(this.x=this.curve.one,this.z=this.curve.zero):(this.x=new i(t,16),this.z=new i(r,16),this.x.red||(this.x=this.x.toRed(this.curve.red)),this.z.red||(this.z=this.z.toRed(this.curve.red)))}f(a,n),e.exports=a,a.prototype.validate=function(e){var t=e.normalize().x,r=t.redSqr(),i=r.redMul(t).redAdd(r.redMul(this.a)).redAdd(t);return 0===i.redSqrt().redSqr().cmp(i)},f(c,n.BasePoint),a.prototype.decodePoint=function(e,t){return this.point(d.toArray(e,t),1)},a.prototype.point=function(e,t){return new c(this,e,t)},a.prototype.pointFromJSON=function(e){return c.fromJSON(this,e)},c.prototype.precompute=function(){},c.prototype._encode=function(){return this.getX().toArray("be",this.curve.p.byteLength())},c.fromJSON=function(e,t){return new c(e,t[0],t[1]||e.one)},c.prototype.inspect=function(){return this.isInfinity()?"":""},c.prototype.isInfinity=function(){return 0===this.z.cmpn(0)},c.prototype.dbl=function(){var e=this.x.redAdd(this.z).redSqr(),t=this.x.redSub(this.z).redSqr(),r=e.redSub(t),i=e.redMul(t),f=r.redMul(t.redAdd(this.curve.a24.redMul(r)));return this.curve.point(i,f)},c.prototype.add=function(){throw new Error("Not supported on Montgomery curve")},c.prototype.diffAdd=function(e,t){var r=this.x.redAdd(this.z),i=this.x.redSub(this.z),f=e.x.redAdd(e.z),n=e.x.redSub(e.z).redMul(r),d=f.redMul(i),a=t.z.redMul(n.redAdd(d).redSqr()),c=t.x.redMul(n.redISub(d).redSqr());return this.curve.point(a,c)},c.prototype.mul=function(e){for(var t=e.clone(),r=this,i=this.curve.point(null,null),f=[];0!==t.cmpn(0);t.iushrn(1))f.push(t.andln(1));for(var n=f.length-1;n>=0;n--)0===f[n]?(r=r.diffAdd(i,this),i=i.dbl()):(i=r.diffAdd(i,this),r=r.dbl());return i},c.prototype.mulAdd=function(){throw new Error("Not supported on Montgomery curve")},c.prototype.jumlAdd=function(){throw new Error("Not supported on Montgomery curve")},c.prototype.eq=function(e){return 0===this.getX().cmp(e.getX())},c.prototype.normalize=function(){return this.x=this.x.redMul(this.z.redInvm()),this.z=this.curve.one,this},c.prototype.getX=function(){return this.normalize(),this.x.fromRed()}},function(e,t,r){"use strict";var i=r(0),f=r(2),n=r(7),d=r(6),a=i.assert;function c(e){this.twisted=1!=(0|e.a),this.mOneA=this.twisted&&-1==(0|e.a),this.extended=this.mOneA,d.call(this,"edwards",e),this.a=new f(e.a,16).umod(this.red.m),this.a=this.a.toRed(this.red),this.c=new f(e.c,16).toRed(this.red),this.c2=this.c.redSqr(),this.d=new f(e.d,16).toRed(this.red),this.dd=this.d.redAdd(this.d),a(!this.twisted||0===this.c.fromRed().cmpn(1)),this.oneC=1==(0|e.c)}function s(e,t,r,i,n){d.BasePoint.call(this,e,"projective"),null===t&&null===r&&null===i?(this.x=this.curve.zero,this.y=this.curve.one,this.z=this.curve.one,this.t=this.curve.zero,this.zOne=!0):(this.x=new f(t,16),this.y=new f(r,16),this.z=i?new f(i,16):this.curve.one,this.t=n&&new f(n,16),this.x.red||(this.x=this.x.toRed(this.curve.red)),this.y.red||(this.y=this.y.toRed(this.curve.red)),this.z.red||(this.z=this.z.toRed(this.curve.red)),this.t&&!this.t.red&&(this.t=this.t.toRed(this.curve.red)),this.zOne=this.z===this.curve.one,this.curve.extended&&!this.t&&(this.t=this.x.redMul(this.y),this.zOne||(this.t=this.t.redMul(this.z.redInvm()))))}n(c,d),e.exports=c,c.prototype._mulA=function(e){return this.mOneA?e.redNeg():this.a.redMul(e)},c.prototype._mulC=function(e){return this.oneC?e:this.c.redMul(e)},c.prototype.jpoint=function(e,t,r,i){return this.point(e,t,r,i)},c.prototype.pointFromX=function(e,t){(e=new f(e,16)).red||(e=e.toRed(this.red));var r=e.redSqr(),i=this.c2.redSub(this.a.redMul(r)),n=this.one.redSub(this.c2.redMul(this.d).redMul(r)),d=i.redMul(n.redInvm()),a=d.redSqrt();if(0!==a.redSqr().redSub(d).cmp(this.zero))throw new Error("invalid point");var c=a.fromRed().isOdd();return(t&&!c||!t&&c)&&(a=a.redNeg()),this.point(e,a)},c.prototype.pointFromY=function(e,t){(e=new f(e,16)).red||(e=e.toRed(this.red));var r=e.redSqr(),i=r.redSub(this.c2),n=r.redMul(this.d).redMul(this.c2).redSub(this.a),d=i.redMul(n.redInvm());if(0===d.cmp(this.zero)){if(t)throw new Error("invalid point");return this.point(this.zero,e)}var a=d.redSqrt();if(0!==a.redSqr().redSub(d).cmp(this.zero))throw new Error("invalid point");return a.fromRed().isOdd()!==t&&(a=a.redNeg()),this.point(a,e)},c.prototype.validate=function(e){if(e.isInfinity())return!0;e.normalize();var t=e.x.redSqr(),r=e.y.redSqr(),i=t.redMul(this.a).redAdd(r),f=this.c2.redMul(this.one.redAdd(this.d.redMul(t).redMul(r)));return 0===i.cmp(f)},n(s,d.BasePoint),c.prototype.pointFromJSON=function(e){return s.fromJSON(this,e)},c.prototype.point=function(e,t,r,i){return new s(this,e,t,r,i)},s.fromJSON=function(e,t){return new s(e,t[0],t[1],t[2])},s.prototype.inspect=function(){return this.isInfinity()?"":""},s.prototype.isInfinity=function(){return 0===this.x.cmpn(0)&&(0===this.y.cmp(this.z)||this.zOne&&0===this.y.cmp(this.curve.c))},s.prototype._extDbl=function(){var e=this.x.redSqr(),t=this.y.redSqr(),r=this.z.redSqr();r=r.redIAdd(r);var i=this.curve._mulA(e),f=this.x.redAdd(this.y).redSqr().redISub(e).redISub(t),n=i.redAdd(t),d=n.redSub(r),a=i.redSub(t),c=f.redMul(d),s=n.redMul(a),o=f.redMul(a),h=d.redMul(n);return this.curve.point(c,s,h,o)},s.prototype._projDbl=function(){var e,t,r,i=this.x.redAdd(this.y).redSqr(),f=this.x.redSqr(),n=this.y.redSqr();if(this.curve.twisted){var d=(s=this.curve._mulA(f)).redAdd(n);if(this.zOne)e=i.redSub(f).redSub(n).redMul(d.redSub(this.curve.two)),t=d.redMul(s.redSub(n)),r=d.redSqr().redSub(d).redSub(d);else{var a=this.z.redSqr(),c=d.redSub(a).redISub(a);e=i.redSub(f).redISub(n).redMul(c),t=d.redMul(s.redSub(n)),r=d.redMul(c)}}else{var s=f.redAdd(n);a=this.curve._mulC(this.z).redSqr(),c=s.redSub(a).redSub(a);e=this.curve._mulC(i.redISub(s)).redMul(c),t=this.curve._mulC(s).redMul(f.redISub(n)),r=s.redMul(c)}return this.curve.point(e,t,r)},s.prototype.dbl=function(){return this.isInfinity()?this:this.curve.extended?this._extDbl():this._projDbl()},s.prototype._extAdd=function(e){var t=this.y.redSub(this.x).redMul(e.y.redSub(e.x)),r=this.y.redAdd(this.x).redMul(e.y.redAdd(e.x)),i=this.t.redMul(this.curve.dd).redMul(e.t),f=this.z.redMul(e.z.redAdd(e.z)),n=r.redSub(t),d=f.redSub(i),a=f.redAdd(i),c=r.redAdd(t),s=n.redMul(d),o=a.redMul(c),h=n.redMul(c),u=d.redMul(a);return this.curve.point(s,o,u,h)},s.prototype._projAdd=function(e){var t,r,i=this.z.redMul(e.z),f=i.redSqr(),n=this.x.redMul(e.x),d=this.y.redMul(e.y),a=this.curve.d.redMul(n).redMul(d),c=f.redSub(a),s=f.redAdd(a),o=this.x.redAdd(this.y).redMul(e.x.redAdd(e.y)).redISub(n).redISub(d),h=i.redMul(c).redMul(o);return this.curve.twisted?(t=i.redMul(s).redMul(d.redSub(this.curve._mulA(n))),r=c.redMul(s)):(t=i.redMul(s).redMul(d.redSub(n)),r=this.curve._mulC(c).redMul(s)),this.curve.point(h,t,r)},s.prototype.add=function(e){return this.isInfinity()?e:e.isInfinity()?this:this.curve.extended?this._extAdd(e):this._projAdd(e)},s.prototype.mul=function(e){return this._hasDoubles(e)?this.curve._fixedNafMul(this,e):this.curve._wnafMul(this,e)},s.prototype.mulAdd=function(e,t,r){return this.curve._wnafMulAdd(1,[this,t],[e,r],2,!1)},s.prototype.jmulAdd=function(e,t,r){return this.curve._wnafMulAdd(1,[this,t],[e,r],2,!0)},s.prototype.normalize=function(){if(this.zOne)return this;var e=this.z.redInvm();return this.x=this.x.redMul(e),this.y=this.y.redMul(e),this.t&&(this.t=this.t.redMul(e)),this.z=this.curve.one,this.zOne=!0,this},s.prototype.neg=function(){return this.curve.point(this.x.redNeg(),this.y,this.z,this.t&&this.t.redNeg())},s.prototype.getX=function(){return this.normalize(),this.x.fromRed()},s.prototype.getY=function(){return this.normalize(),this.y.fromRed()},s.prototype.eq=function(e){return this===e||0===this.getX().cmp(e.getX())&&0===this.getY().cmp(e.getY())},s.prototype.eqXToP=function(e){var t=e.toRed(this.curve.red).redMul(this.z);if(0===this.x.cmp(t))return!0;for(var r=e.clone(),i=this.curve.redN.redMul(this.z);;){if(r.iadd(this.curve.n),r.cmp(this.curve.p)>=0)return!1;if(t.redIAdd(i),0===this.x.cmp(t))return!0}},s.prototype.toP=s.prototype.normalize,s.prototype.mixedAdd=s.prototype.add},function(e,t,r){"use strict";t.sha1=r(28),t.sha224=r(29),t.sha256=r(14),t.sha384=r(30),t.sha512=r(15)},function(e,t,r){"use strict";var i=r(1),f=r(5),n=r(13),d=i.rotl32,a=i.sum32,c=i.sum32_5,s=n.ft_1,o=f.BlockHash,h=[1518500249,1859775393,2400959708,3395469782];function u(){if(!(this instanceof u))return new u;o.call(this),this.h=[1732584193,4023233417,2562383102,271733878,3285377520],this.W=new Array(80)}i.inherits(u,o),e.exports=u,u.blockSize=512,u.outSize=160,u.hmacStrength=80,u.padLength=64,u.prototype._update=function(e,t){for(var r=this.W,i=0;i<16;i++)r[i]=e[t+i];for(;ithis.blockSize&&(e=(new this.Hash).update(e).digest()),f(e.length<=this.blockSize);for(var t=e.length;t0))return d.iaddn(1),this.keyFromPrivate(d)}},h.prototype._truncateToN=function(e,t){var r=8*e.byteLength()-this.n.bitLength();return r>0&&(e=e.ushrn(r)),!t&&e.cmp(this.n)>=0?e.sub(this.n):e},h.prototype.sign=function(e,t,r,n){"object"==typeof r&&(n=r,r=null),n||(n={}),t=this.keyFromPrivate(t,r),e=this._truncateToN(new i(e,16));for(var d=this.n.byteLength(),a=t.getPrivate().toArray("be",d),c=e.toArray("be",d),s=new f({hash:this.hash,entropy:a,nonce:c,pers:n.pers,persEnc:n.persEnc||"utf8"}),h=this.n.sub(new i(1)),u=0;;u++){var b=n.k?n.k(u):new i(s.generate(this.n.byteLength()));if(!((b=this._truncateToN(b,!0)).cmpn(1)<=0||b.cmp(h)>=0)){var l=this.g.mul(b);if(!l.isInfinity()){var p=l.getX(),m=p.umod(this.n);if(0!==m.cmpn(0)){var v=b.invm(this.n).mul(m.mul(t.getPrivate()).iadd(e));if(0!==(v=v.umod(this.n)).cmpn(0)){var y=(l.getY().isOdd()?1:0)|(0!==p.cmp(m)?2:0);return n.canonical&&v.cmp(this.nh)>0&&(v=this.n.sub(v),y^=1),new o({r:m,s:v,recoveryParam:y})}}}}}},h.prototype.verify=function(e,t,r,f){e=this._truncateToN(new i(e,16)),r=this.keyFromPublic(r,f);var n=(t=new o(t,"hex")).r,d=t.s;if(n.cmpn(1)<0||n.cmp(this.n)>=0)return!1;if(d.cmpn(1)<0||d.cmp(this.n)>=0)return!1;var a,c=d.invm(this.n),s=c.mul(e).umod(this.n),h=c.mul(n).umod(this.n);return this.curve._maxwellTrick?!(a=this.g.jmulAdd(s,r.getPublic(),h)).isInfinity()&&a.eqXToP(n):!(a=this.g.mulAdd(s,r.getPublic(),h)).isInfinity()&&0===a.getX().umod(this.n).cmp(n)},h.prototype.recoverPubKey=function(e,t,r,f){c((3&r)===r,"The recovery param is more than two bits"),t=new o(t,f);var n=this.n,d=new i(e),a=t.r,s=t.s,h=1&r,u=r>>1;if(a.cmp(this.curve.p.umod(this.curve.n))>=0&&u)throw new Error("Unable to find sencond key candinate");a=u?this.curve.pointFromX(a.add(this.curve.n),h):this.curve.pointFromX(a,h);var b=t.r.invm(n),l=n.sub(d).mul(b).umod(n),p=s.mul(b).umod(n);return this.g.mulAdd(l,a,p)},h.prototype.getKeyRecoveryParam=function(e,t,r,i){if(null!==(t=new o(t,i)).recoveryParam)return t.recoveryParam;for(var f=0;f<4;f++){var n;try{n=this.recoverPubKey(e,t,f)}catch(e){continue}if(n.eq(r))return f}throw new Error("Unable to find valid recovery factor")}},function(e,t,r){"use strict";var i=r(9),f=r(10),n=r(3);function d(e){if(!(this instanceof d))return new d(e);this.hash=e.hash,this.predResist=!!e.predResist,this.outLen=this.hash.outSize,this.minEntropy=e.minEntropy||this.hash.hmacStrength,this._reseed=null,this.reseedInterval=null,this.K=null,this.V=null;var t=f.toArray(e.entropy,e.entropyEnc||"hex"),r=f.toArray(e.nonce,e.nonceEnc||"hex"),i=f.toArray(e.pers,e.persEnc||"hex");n(t.length>=this.minEntropy/8,"Not enough entropy. Minimum is: "+this.minEntropy+" bits"),this._init(t,r,i)}e.exports=d,d.prototype._init=function(e,t,r){var i=e.concat(t).concat(r);this.K=new Array(this.outLen/8),this.V=new Array(this.outLen/8);for(var f=0;f=this.minEntropy/8,"Not enough entropy. Minimum is: "+this.minEntropy+" bits"),this._update(e.concat(r||[])),this._reseed=1},d.prototype.generate=function(e,t,r,i){if(this._reseed>this.reseedInterval)throw new Error("Reseed is required");"string"!=typeof t&&(i=r,r=t,t=null),r&&(r=f.toArray(r,i||"hex"),this._update(r));for(var n=[];n.length"}},function(e,t,r){"use strict";var i=r(2),f=r(0),n=f.assert;function d(e,t){if(e instanceof d)return e;this._importDER(e,t)||(n(e.r&&e.s,"Signature without r or s"),this.r=new i(e.r,16),this.s=new i(e.s,16),void 0===e.recoveryParam?this.recoveryParam=null:this.recoveryParam=e.recoveryParam)}function a(){this.place=0}function c(e,t){var r=e[t.place++];if(!(128&r))return r;for(var i=15&r,f=0,n=0,d=t.place;n>>3);for(e.push(128|r);--r;)e.push(t>>>(r<<3)&255);e.push(t)}}e.exports=d,d.prototype._importDER=function(e,t){e=f.toArray(e,t);var r=new a;if(48!==e[r.place++])return!1;if(c(e,r)+r.place!==e.length)return!1;if(2!==e[r.place++])return!1;var n=c(e,r),d=e.slice(r.place,n+r.place);if(r.place+=n,2!==e[r.place++])return!1;var s=c(e,r);if(e.length!==s+r.place)return!1;var o=e.slice(r.place,s+r.place);return 0===d[0]&&128&d[1]&&(d=d.slice(1)),0===o[0]&&128&o[1]&&(o=o.slice(1)),this.r=new i(d),this.s=new i(o),this.recoveryParam=null,!0},d.prototype.toDER=function(e){var t=this.r.toArray(),r=this.s.toArray();for(128&t[0]&&(t=[0].concat(t)),128&r[0]&&(r=[0].concat(r)),t=s(t),r=s(r);!(r[0]||128&r[1]);)r=r.slice(1);var i=[2];o(i,t.length),(i=i.concat(t)).push(2),o(i,r.length);var n=i.concat(r),d=[48];return o(d,n.length),d=d.concat(n),f.encode(d,e)}},function(e,t,r){"use strict";var i=r(9),f=r(8),n=r(0),d=n.assert,a=n.parseBytes,c=r(39),s=r(40);function o(e){if(d("ed25519"===e,"only tested with ed25519 so far"),!(this instanceof o))return new o(e);e=f[e].curve;this.curve=e,this.g=e.g,this.g.precompute(e.n.bitLength()+1),this.pointClass=e.point().constructor,this.encodingLength=Math.ceil(e.n.bitLength()/8),this.hash=i.sha512}e.exports=o,o.prototype.sign=function(e,t){e=a(e);var r=this.keyFromSecret(t),i=this.hashInt(r.messagePrefix(),e),f=this.g.mul(i),n=this.encodePoint(f),d=this.hashInt(n,r.pubBytes(),e).mul(r.priv()),c=i.add(d).umod(this.curve.n);return this.makeSignature({R:f,S:c,Rencoded:n})},o.prototype.verify=function(e,t,r){e=a(e),t=this.makeSignature(t);var i=this.keyFromPublic(r),f=this.hashInt(t.Rencoded(),i.pubBytes(),e),n=this.g.mul(t.S());return t.R().add(i.pub().mul(f)).eq(n)},o.prototype.hashInt=function(){for(var e=this.hash(),t=0;t XPrv -> XPub -xprvToXPub v (XPrv _ d f i c prv) = XPub v d f i c (I.prvToPub prv) +xprvToXPub v (XPrv _ d f i c prv) = XPub v d f i c (K.prvToPub prv) -------------------------------------------------------------------------------- -- | Extended private key. -data XPub = XPub !Version !Depth !Fingerprint !Index !Chain !I.Pub - deriving (Eq, Show) +data XPub = XPub + { xpub_version :: Version + , xpub_depth :: Depth + , xpub_fingerprint :: Fingerprint + , xpub_index :: Index + , xpub_chain :: Chain + , xpub_pub :: K.Pub + } deriving (Eq, Show) -------------------------------------------------------------------------------- --- | The 33-byte serialized contents of either 'I.Pub' or 'I.Prv'. +-- | The 33-byte serialized contents of either 'K.Pub' or 'K.Prv'. newtype Key = Key B.ByteString -keyPub :: I.Pub -> Key +keyPub :: K.Pub -> Key {-# INLINE keyPub #-} -keyPub = Key . I.unPub +keyPub = Key . K.pubCompressed -keyPrv :: I.Prv -> Key +keyPrv :: K.Prv -> Key {-# INLINE keyPrv #-} -keyPrv = Key . B.cons 0 . I.unPrv +keyPrv = Key . B.cons 0 . K.prvRaw -------------------------------------------------------------------------------- @@ -187,11 +200,11 @@ -------------------------------------------------------------------------------- --- | 4-byte fingerprint of a 'I.Pub' key. +-- | 4-byte fingerprint of a 'K.Pub' key. newtype Fingerprint = Fingerprint { unFingerprint :: Word32 } deriving (Eq, Show) -fingerprint :: I.Pub -> Fingerprint +fingerprint :: K.Pub -> Fingerprint {-# INLINE fingerprint #-} fingerprint = fingerprint' . keyId @@ -209,9 +222,9 @@ -- | 20-byte key identifier. newtype KeyId = KeyId B.ByteString -keyId :: I.Pub -> KeyId +keyId :: K.Pub -> KeyId {-# INLINE keyId #-} -keyId = KeyId . hash160 . I.unPub +keyId = KeyId . hash160 . K.pubCompressed -------------------------------------------------------------------------------- @@ -224,7 +237,7 @@ instance Show Chain where showsPrec n (Chain b) = showParen (n > 10) $ showString "Chain " . - showsPrec 0 (BB.toLazyByteString (BB.byteStringHex b)) + mappend (BL8.unpack (BB.toLazyByteString (BB.byteStringHex b))) -- | Construct a 'Chain' code. -- @@ -255,19 +268,29 @@ {-# INLINE indexIsHardened #-} indexIsHardened (Index w) = w >= 0x80000000 +-- | Increment the given 'Index' by one, but only if doing so would result in a +-- new 'Index' in the same index group (normal vs. hardened). Otherwise, returns +-- 'Nothing'. +indexNext :: Index -> Maybe Index +{-# INLINE indexNext #-} +indexNext (Index w) = case w of + 0xffffffff -> Nothing -- Would be a normal to hardened transition + 0x7fffffff -> Nothing -- Would be a hardened to normal transition + _ -> Just (Index (w + 1)) + -------------------------------------------------------------------------------- --- | Derive a child 'XPrv' subkey from a parent a parent 'XPrv' key. +-- | Derive a 'XPrv' subkey from a parent 'XPrv' key. -- -- Returns 'Nothing' if the given inputs result in an invalid key. subXPrvXPrv :: XPrv -> Index -> Maybe XPrv subXPrvXPrv (XPrv v d0 _ _ ch0 prv0) i1 = do d1 <- depthNext d0 (ch1, prv1) <- subPrvPrv ch0 prv0 i1 - let f1 = fingerprint (I.prvToPub prv0) + let f1 = fingerprint (K.prvToPub prv0) pure $ XPrv v d1 f1 i1 ch1 prv1 --- | Derive a child 'XPub' subkey from a parent a parent 'XPub' key. +-- | Derive a 'XPub' subkey from a parent 'XPub' key. -- -- The given 'Index' is expected to /not/ be hardened. -- @@ -279,7 +302,7 @@ let f1 = fingerprint pub0 pure $ XPub v d1 f1 i1 ch1 pub1 --- | Derive a child 'XPub' subkey from a parent a parent 'XPrv' key. +-- | Derive 'XPub' subkey from a parent 'XPrv' key. -- -- Notice that while @'subXPubXPub' ('xprvToXPub' v) xprv i@ will fail with a -- hardened 'Index', @'subXPrvXPub' v xprv i@ may succeed. @@ -290,46 +313,127 @@ -------------------------------------------------------------------------------- --- | Derive a child 'I.Prv' subkey and 'Chain' code at a particular 'Index' from --- a parent 'I.Prv' and 'Chain' code. --- --- Returns 'Nothing' if the given inputs result in an invalid key. -subPrvPrv :: Chain -> I.Prv -> Index -> Maybe (Chain, I.Prv) +-- | Behaves exactly like 'subXPrvXPrv', but deals with 'Chain' and +-- 'K.Prv', rather than an 'XPrv'. +subPrvPrv :: Chain -> K.Prv -> Index -> Maybe (Chain, K.Prv) subPrvPrv (Chain ch0) prv0 i1@(Index i1w) = do - let pub0 = I.prvToPub prv0 + let pub0 = K.prvToPub prv0 x = hmacSHA512 ch0 $ mconcat $ if indexIsHardened i1 - then [B.singleton 0, I.unPrv prv0, word32BE i1w] - else [I.unPub pub0, word32BE i1w] + then [B.singleton 0, K.prvRaw prv0, word32BE i1w] + else [K.pubCompressed pub0, word32BE i1w] (xl, xr) = B.splitAt 32 x - prv1 <- I.addPrvTweak prv0 =<< I.tweak xl + prv1 <- flip K.prvAddTweak prv0 =<< K.parseTweak xl ch1 <- chain xr pure (ch1, prv1) --- | Derive a child 'I.Pub' subkey and 'Chain' code at a particular 'Index' from --- a parent 'I.Pub' and 'Chain' code. --- --- The given 'Index' is expected to /not/ be hardened. --- --- Returns 'Nothing' if the given inputs result in an invalid key. -subPubPub :: Chain -> I.Pub -> Index -> Maybe (Chain, I.Pub) +-- | Behaves exactly like 'subXPubXPub', but deals with 'Chain' and +-- 'K.Pub', rather than an 'XPub'. +subPubPub :: Chain -> K.Pub -> Index -> Maybe (Chain, K.Pub) subPubPub (Chain ch0) pub0 i1@(Index i1w) = do guard (not (indexIsHardened i1)) - let x = hmacSHA512 ch0 (I.unPub pub0 <> word32BE i1w) + let x = hmacSHA512 ch0 (K.pubCompressed pub0 <> word32BE i1w) (xl, xr) = B.splitAt 32 x - pub1 <- I.addPubTweak pub0 =<< I.tweak xl + pub1 <- flip K.pubAddTweak pub0 =<< K.parseTweak xl ch1 <- chain xr pure (ch1, pub1) --- | Derive a child 'I.Pub' subkey and 'Chain' code at a particular 'Index' from --- a parent 'I.Prv' and 'Chain' code. +-- | Behaves exactly like 'subXPrvXPub', but deals with 'Chain', 'K.Prv' and +-- 'K.Pub', rather than an 'XPrv' and 'XPub'. +subPrvPub :: Chain -> K.Prv -> Index -> Maybe (Chain, K.Pub) +subPrvPub ch0 prv0 i1 = fmap K.prvToPub <$> subPrvPrv ch0 prv0 i1 + +-------------------------------------------------------------------------------- + +-- | Lazily derive all the child 'XPrv' subkeys from a parent's 'XPrv'. -- --- Notice that while @'subPubPub' ('I.prvToPub' prv) i@ will fail with a --- hardened 'Index', @'subPrvPub' prv i@ may succeed. +-- The first child returned is the one at the given 'Index', if any, and the +-- subsequent childs are those immediately after it (see 'indexNext'). -- --- Returns 'Nothing' if the given inputs result in an invalid key. -subPrvPub :: Chain -> I.Prv -> Index -> Maybe (Chain, I.Pub) -subPrvPub ch0 prv0 i1 = fmap I.prvToPub <$> subPrvPrv ch0 prv0 i1 +-- The returned 'Index'es are not necessarily consecutive, since not all +-- 'XPrv' and 'Index' combinations are able to derive valid keys. +-- However, the produced 'Index'es do increase monotonically. +-- +-- If the given 'Index' is hardened, then all produced children will have +-- hardened 'Index'es too. If the given 'Index' is normal, then all children +-- will have normal 'Index'es too. That is, this function will never produce +-- children with 'Index'es belonging to another group (normal vs. hardened). +subsXPrvXPrv :: XPrv -> Index -> [XPrv] +subsXPrvXPrv (XPrv v d0 _ _ ch0 prv0) i = do + d1 <- maybeToList $ depthNext d0 + let f1 = fingerprint (K.prvToPub prv0) + (i1, ch1, prv1) <- subsPrvPrv ch0 prv0 i + pure $ XPrv v d1 f1 i1 ch1 prv1 +-- | Lazily derive all the 'XPub' subkeys from a parent's 'XPub'. +-- +-- The first child returned is the one at the given 'Index', if any, and the +-- subsequent childs are those immediately after it (see 'indexNext'). +-- +-- The returned 'Index'es are not necessarily consecutive, since not all +-- 'XPub' and 'Index' combinations are able to derive valid keys. +-- However, the produced 'Index'es do increase monotonically. +-- +-- The produced list will never include a hardened 'Index'. If a hardened +-- 'Index' is provided as input, the produced list will be empty. +subsXPubXPub :: XPub -> Index -> [XPub] +subsXPubXPub (XPub v d0 _ _ ch0 pub0) i = do + d1 <- maybeToList $ depthNext d0 + let f1 = fingerprint pub0 + (i1, ch1, pub1) <- subsPubPub ch0 pub0 i + pure $ XPub v d1 f1 i1 ch1 pub1 + +-- | Lazily derive all the 'XPub' subkeys from a parent 'XPrv' key. +-- +-- The first child returned is the one at the given 'Index', if any, and the +-- subsequent childs are those immediately after it (see 'indexNext'). +-- +-- The returned 'Index'es are not necessarily consecutive, since not all +-- 'XPrv' and 'Index' combinations are able to derive valid keys. +-- However, the produced 'Index'es do increase monotonically. +-- +-- If the given 'Index' is hardened, then all produced children will have +-- hardened 'Index'es too. If the given 'Index' is normal, then all children +-- will have normal 'Index'es too. That is, this function will never produce +-- children with 'Index'es belonging to another group (normal vs. hardened). +-- +-- /Notice/ that while @'subsXPubXPub' ('xprvToXPub' v) xprv i@ will fail with a +-- hardened 'Index', @'subsXPrvXPub' v xprv i@ may succeed. +subsXPrvXPub :: Version -> XPrv -> Index -> [XPub] +subsXPrvXPub v xprv i1 = xprvToXPub v <$> subsXPrvXPrv xprv i1 + +---------------------------------------------------------------------------------- + +-- | Behaves exactly like 'subsXPrvXPrv', but deals with 'Chain' and +-- 'K.Prv', rather than an 'XPrv'. +subsPrvPrv :: Chain -> K.Prv -> Index -> [(Index, Chain, K.Prv)] +subsPrvPrv ch0 prv0 = go + where + go :: Index -> [(Index, Chain, K.Prv)] + go i = let rest = maybe [] go (indexNext i) + in case subPrvPrv ch0 prv0 i of + Just (ch1, prv1) -> (i, ch1, prv1) : rest + Nothing -> rest + +-- | Behaves exactly like 'subsXPubXPub', but deals with 'Chain' and +-- 'K.Pub', rather than an 'XPub'. +subsPubPub :: Chain -> K.Pub -> Index -> [(Index, Chain, K.Pub)] +subsPubPub ch0 pub0 i0 + | indexIsHardened i0 = [] + | otherwise = go i0 + where + go :: Index -> [(Index, Chain, K.Pub)] + go i = let rest = maybe [] go (indexNext i) + in case subPubPub ch0 pub0 i of + Just (ch1, pub1) -> (i, ch1, pub1) : rest + Nothing -> rest + +-- | Behaves exactly like 'subsXPrvXPub', but deals with 'Chain', 'K.Prv' and +-- 'K.Pub', rather than an 'XPrv' and 'XPub'. +subsPrvPub :: Chain -> K.Prv-> Index -> [(Index, Chain, K.Pub)] +subsPrvPub ch0 prv0 i0 = do + (i1, ch1, prv1) <- subsPrvPrv ch0 prv0 i0 + pure (i1, ch1, K.prvToPub prv1) + -------------------------------------------------------------------------------- -- | Obtain the Base58 representation for an 'XPub'. @@ -443,18 +547,18 @@ Left k -> Left (XPub v d f i c k) Right k -> Right (XPrv v d f i c k) -getPrv :: Bin.Get I.Prv +getPrv :: Bin.Get K.Prv getPrv = do 0 <- Bin.getWord8 a <- Bin.getByteString 32 - case I.prv a of + case K.parsePrv a of Just b -> pure b Nothing -> fail "Bad private key" -getPub :: Bin.Get I.Pub +getPub :: Bin.Get K.Pub getPub = do a <- Bin.getByteString 33 - case I.pub a of + case K.parsePub a of Just b -> pure b Nothing -> fail "Bad public key" diff --git a/lib/BIP32/GHC.hs b/lib/BIP32/GHC.hs deleted file mode 100644 --- a/lib/BIP32/GHC.hs +++ /dev/null @@ -1,104 +0,0 @@ --- | Implementation to be used when compiled with GHC -module BIP32.GHC - ( Prv - , prv - , unPrv - , prvToPub - , addPrvTweak - - , Pub - , pub - , unPub - , addPubTweak - - , Tweak - , tweak - ) where - -import Control.Monad -import qualified Crypto.Secp256k1 as K -import qualified Data.ByteString as B - --------------------------------------------------------------------------------- - --- | Private key. --- --- Construct with 'prv'. -newtype Prv = Prv K.SecKey - deriving (Eq, Show) - --- | Obtain the 32 raw bytes inside a 'Prv'. See 'prv'. -unPrv :: Prv -> B.ByteString -{-# INLINE unPrv #-} -unPrv (Prv x) = K.getSecKey x - --- | Construct a 'Prv' key from its raw bytes. --- --- * 32 bytes containing \(ser_{256}(k)\). --- --- See Bitcoin's [BIP-0032](https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki) --- for details. --- --- 'Nothing' if something is not satisfied. -prv :: B.ByteString -> Maybe Prv -{-# INLINE prv #-} -prv x = Prv <$> K.secKey x - --- | Obtain the 'Pub' key for 'Prv'. -prvToPub :: Prv -> Pub -{-# INLINE prvToPub #-} -prvToPub (Prv x) = Pub (K.derivePubKey x) - --- | Tweak a 'Prv'ate key by adding 'Tweak' times the generator to it. -addPrvTweak :: Prv -> Tweak -> Maybe Prv -{-# INLINE addPrvTweak #-} -addPrvTweak (Prv p) (Tweak t) = Prv <$> K.tweakAddSecKey p t - --------------------------------------------------------------------------------- - --- | Public key. --- --- Construct with 'pub'. -newtype Pub = Pub K.PubKey - deriving (Eq, Show) - --- | Obtain the 33 raw bytes inside a 'Pub'. See 'pub'. --- --- Corresponds to BIP-0032's \(ser_{P}(P)\). -unPub :: Pub -> B.ByteString -{-# INLINE unPub #-} -unPub (Pub x) = K.exportPubKey True x - --- | Construct a 'Pub' key from its raw bytes. --- --- * 33 bytes in total, containing \(ser_{P}(P)\). --- --- * The leftmost byte is either @0x02@ or @0x03@, depending on the parity --- of the omitted @y@ coordinate. --- --- * The remaining 32 bytes are \(ser_{256}(x)\). --- --- See Bitcoin's [BIP-0032](https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki) --- for details. --- --- 'Nothing' if something is not satisfied. -pub :: B.ByteString -> Maybe Pub -{-# INLINE pub #-} -pub x = do - guard (B.length x == 33) - Pub <$> K.importPubKey x - --- | Tweak a 'Pub'lic key by adding 'Tweak' times the generator to it. -addPubTweak :: Pub -> Tweak -> Maybe Pub -{-# INLINE addPubTweak #-} -addPubTweak (Pub p) (Tweak t) = Pub <$> K.tweakAddPubKey p t - --------------------------------------------------------------------------------- - -newtype Tweak = Tweak K.Tweak - --- | Convert a 32-Byte 'B.ByteString' to a 'Tweak'. -tweak :: B.ByteString -> Maybe Tweak -{-# INLINE tweak #-} -tweak x = Tweak <$> K.tweak x - diff --git a/lib/BIP32/GHCJS.hs b/lib/BIP32/GHCJS.hs deleted file mode 100644 --- a/lib/BIP32/GHCJS.hs +++ /dev/null @@ -1,198 +0,0 @@ -{-# LANGUAGE KindSignatures #-} -{-# LANGUAGE ForeignFunctionInterface #-} -{-# LANGUAGE JavaScriptFFI #-} - --- | Implementation to be used when compiled with GHCJS -module BIP32.GHCJS - ( Prv - , prv - , unPrv - , prvToPub - , addPrvTweak - - , Pub - , pub - , unPub - , addPubTweak - - , Tweak - , tweak - ) where - -import Control.Monad -import qualified Data.ByteString as B -import qualified Data.ByteString.Builder as BB -import qualified GHCJS.Buffer as Buf -import GHCJS.Types (JSVal) -import GHCJS.Nullable -import qualified JavaScript.TypedArray.ArrayBuffer as AB -import qualified JavaScript.TypedArray as TA - --------------------------------------------------------------------------------- - --- | Private key. --- --- Construct with 'prv'. -newtype Prv = Prv TA.Uint8Array - -instance Eq Prv where - Prv a == Prv b = - byteStringFromUint8Array a == byteStringFromUint8Array b - -instance Show Prv where - showsPrec n (Prv u) = showParen (n > 10) $ - let b = byteStringFromUint8Array u - in showString "Prv " . - showsPrec 0 (BB.toLazyByteString (BB.byteStringHex b)) - - --- | Obtain the 32 raw bytes inside a 'Prv'. See 'prv'. -unPrv :: Prv -> B.ByteString -{-# INLINE unPrv #-} -unPrv (Prv x) = byteStringFromUint8Array x - --- | Construct a 'Prv' key from its raw bytes. --- --- * 32 bytes containing \(ser_{256}(k)\). --- --- See Bitcoin's [BIP-0032](https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki) --- for details. --- --- 'Nothing' if something is not satisfied. -prv :: B.ByteString -> Maybe Prv -prv b = do - guard (B.length b == 32) - let u = byteStringToUint8Array b - guard (js_secp256k1_verifyPrv u) - pure (Prv u) - -foreign import javascript unsafe - "h$bip32.secp256k1.verifyPrv($1)" - js_secp256k1_verifyPrv :: TA.Uint8Array -> Bool - --- | Obtain the 'Pub' key for 'Prv'. -prvToPub :: Prv -> Pub -{-# INLINE prvToPub #-} -prvToPub (Prv x) = Pub (js_secp256k1_prvToPub x) - -foreign import javascript unsafe - "h$bip32.secp256k1.prvToPub($1)" - js_secp256k1_prvToPub :: TA.Uint8Array -> TA.Uint8Array - --- | Tweak a 'Prv'ate key by adding 'Tweak' times the generator to it. -addPrvTweak :: Prv -> Tweak -> Maybe Prv -{-# INLINE addPrvTweak #-} -addPrvTweak (Prv p) (Tweak t) = do - jsv <- nullableToMaybe (js_secp256k1_addPrvTweak p t) - pure $ Prv (js_unsafe_JSVal_to_UInt8Array jsv) - -foreign import javascript unsafe - "h$bip32.secp256k1.addPrvTweak($1, $2)" - js_secp256k1_addPrvTweak :: TA.Uint8Array -- ^ Private key. - -> TA.Uint8Array -- ^ Tweak. - -> Nullable JSVal -- ^ Nullable Uint8Array - --------------------------------------------------------------------------------- - --- | Public key. --- --- Construct with 'pub'. -newtype Pub = Pub TA.Uint8Array - -instance Eq Pub where - Pub a == Pub b = - byteStringFromUint8Array a == byteStringFromUint8Array b - -instance Show Pub where - showsPrec n (Pub u) = showParen (n > 10) $ - let b = byteStringFromUint8Array u - in showString "Pub " . - showsPrec 0 (BB.toLazyByteString (BB.byteStringHex b)) - --- | Obtain the 33 raw bytes inside a 'Pub'. See 'pub'. --- --- Corresponds to BIP-0032's \(ser_{P}(P)\). -unPub :: Pub -> B.ByteString -{-# INLINE unPub #-} -unPub (Pub x) = byteStringFromUint8Array x - --- | Construct a 'Pub' key from its raw bytes. --- --- * 33 bytes in total, containing \(ser_{P}(P)\). --- --- * The leftmost byte is either @0x02@ or @0x03@, depending on the parity --- of the omitted @y@ coordinate. --- --- * The remaining 32 bytes are \(ser_{256}(x)\). --- --- See Bitcoin's [BIP-0032](https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki) --- for details. --- --- 'Nothing' if something is not satisfied. -pub :: B.ByteString -> Maybe Pub -pub b = do - guard (B.length b == 33) - let u = byteStringToUint8Array b - guard (js_secp256k1_verifyPub u) - pure (Pub u) - -foreign import javascript unsafe - "h$bip32.secp256k1.verifyPub($1)" - js_secp256k1_verifyPub :: TA.Uint8Array -> Bool - --- | Tweak a 'Pub'lic key by adding 'Tweak' times the generator to it. -addPubTweak :: Pub -> Tweak -> Maybe Pub -{-# INLINE addPubTweak #-} -addPubTweak (Pub p) (Tweak t) = do - jsv <- nullableToMaybe (js_secp256k1_addPubTweak p t) - pure $ Pub (js_unsafe_JSVal_to_UInt8Array jsv) - -foreign import javascript unsafe - "h$bip32.secp256k1.addPubTweak($1, $2)" - js_secp256k1_addPubTweak :: TA.Uint8Array -- ^ Public key. - -> TA.Uint8Array -- ^ Tweak. - -> Nullable JSVal -- ^ Nullable Uint8Array - --------------------------------------------------------------------------------- - -newtype Tweak = Tweak TA.Uint8Array - --- | Convert a 32-Byte 'B.ByteString' to a 'Tweak'. -tweak :: B.ByteString -> Maybe Tweak -tweak b = do - guard (B.length b == 32) - pure $ Tweak (byteStringToUint8Array b) - --------------------------------------------------------------------------------- - -byteStringToUint8Array :: B.ByteString -> TA.Uint8Array -byteStringToUint8Array x - | B.length x == 0 = js_emptyUint8Array - | otherwise = let (buf, off, len) = Buf.fromByteString x - in js_newUint8Array (Buf.getArrayBuffer buf) off len - -foreign import javascript unsafe - "new Uint8Array($1, $2, $3)" - js_newUint8Array :: AB.ArrayBuffer - -> Int -- ^ Byte offset. - -> Int -- ^ Byte length. - -> TA.Uint8Array - -foreign import javascript unsafe - "new Uint8Array(0)" - js_emptyUint8Array :: TA.Uint8Array - --------------------------------------------------------------------------------- - -byteStringFromUint8Array :: TA.Uint8Array -> B.ByteString -byteStringFromUint8Array x = - Buf.toByteString (TA.byteOffset x) - (Just (TA.byteLength x)) - (Buf.createFromArrayBuffer (TA.buffer x)) - --------------------------------------------------------------------------------- - -foreign import javascript unsafe - "$r = $1;" - js_unsafe_JSVal_to_UInt8Array :: JSVal -> TA.Uint8Array - diff --git a/test/Main.hs b/test/Main.hs --- a/test/Main.hs +++ b/test/Main.hs @@ -6,6 +6,7 @@ module Main (main) where +import qualified Bitcoin.Keys as K import qualified Data.ByteString as B import qualified Data.ByteString.Base16 as B16 import qualified Data.ByteString.Base58 as B58 @@ -91,7 +92,7 @@ Just xprv === S.decodeXPrv xprvB , testCase "Pub invalid" $ do - Nothing @=? S.pub "\x03hxxqhlivzpapqhxguwpftplfduateosa" + Nothing @=? K.parsePub "\x03hxxqhlivzpapqhxguwpftplfduateosa" , testProperty "subPubPub with normal index" $ property $ do S.XPub v d f i c p <- forAll genXPub @@ -109,6 +110,50 @@ ih :: S.Index <- forAll genIndexHardened Nothing === S.subXPubXPub xpub ih + , testProperty "subsPubPub" $ property $ do + pubP :: K.Pub <- forAll genPub + i0 :: S.Index <- forAll genIndexNormal + chP :: S.Chain <- forAll genChain + let mindTheGap = do + (c0, pub0) <- S.subPubPub chP pubP i0 + i1 <- S.indexNext i0 + (c1, pub1) <- S.subPubPub chP pubP i1 + i2 <- S.indexNext i1 + (c2, pub2) <- S.subPubPub chP pubP i2 + pure [(i0, c0, pub0), (i1, c1, pub1), (i2, c2, pub2)] + case mindTheGap of + Nothing -> pure () -- We found some gaps. Testing is hard. Skip. + Just x -> x === take 3 (S.subsPubPub chP pubP i0) + + , testCase "indexIsHardened" $ do + False @=? S.indexIsHardened (S.Index 0x00000000) + False @=? S.indexIsHardened (S.Index 0x00000001) + False @=? S.indexIsHardened (S.Index 0x7ffffffe) + False @=? S.indexIsHardened (S.Index 0x7fffffff) + + True @=? S.indexIsHardened (S.Index 0x80000000) + True @=? S.indexIsHardened (S.Index 0x80000001) + True @=? S.indexIsHardened (S.Index 0xfffffffe) + True @=? S.indexIsHardened (S.Index 0xffffffff) + + , testCase "indexNext" $ do + S.Index 0x00000000 @=? S.Index minBound + S.Index 0xffffffff @=? S.Index maxBound + -- Normal + Just (S.Index 0x00000001) @=? S.indexNext (S.Index 0x00000000) + Just (S.Index 0x00000002) @=? S.indexNext (S.Index 0x00000001) + Just (S.Index 0x7ffffffe) @=? S.indexNext (S.Index 0x7ffffffd) + Just (S.Index 0x7fffffff) @=? S.indexNext (S.Index 0x7ffffffe) + -- Normal upper bound + Nothing @=? S.indexNext (S.Index 0x7fffffff) + -- Hardened in bounds + Just (S.Index 0x80000001) @=? S.indexNext (S.Index 0x80000000) + Just (S.Index 0x80000002) @=? S.indexNext (S.Index 0x80000001) + Just (S.Index 0x7ffffffe) @=? S.indexNext (S.Index 0x7ffffffd) + Just (S.Index 0xffffffff) @=? S.indexNext (S.Index 0xfffffffe) + -- Hardened upper bound + Nothing @=? S.indexNext (S.Index 0xffffffff) + , tt_vectors ] @@ -192,12 +237,12 @@ (S.chain (fromBase16 (tv_chain x))) , testCase "prv" $ do - Just (tv_prv x) @=? fmap (toBase16 . S.unPrv) - (S.prv (fromBase16 (tv_prv x))) + Just (tv_prv x) @=? fmap (toBase16 . K.prvRaw) + (K.parsePrv (fromBase16 (tv_prv x))) , testCase "pub" $ do - Just (tv_pub x) @=? fmap (toBase16 . S.unPub) - (S.pub (fromBase16 (tv_pub x))) + Just (tv_pub x) @=? fmap (toBase16 . K.pubCompressed) + (K.parsePub (fromBase16 (tv_pub x))) , testCase "xprvToXPub" $ do let Just xprv = S.decodeXPrv (tv_xprv x) @@ -212,7 +257,7 @@ f @?= S.Fingerprint (tv_fingerp x) i @?= S.Index (tv_index x) Just c @?= S.chain (fromBase16 ((tv_chain x))) - Just k @?= S.prv (fromBase16 (tv_prv x)) + Just k @?= K.parsePrv (fromBase16 (tv_prv x)) , testCase "xpub" $ do Just xpub@(S.XPub v d f i c k) <- pure $ S.decodeXPub (tv_xpub x) @@ -222,7 +267,7 @@ f @?= S.Fingerprint (tv_fingerp x) i @?= S.Index (tv_index x) Just c @?= S.chain (fromBase16 ((tv_chain x))) - Just k @?= S.pub (fromBase16 (tv_pub x)) + Just k @?= K.parsePub (fromBase16 (tv_pub x)) , testCase "subPubPub" $ do let Just xpub0@(S.XPub v0 d0 _ _ _ _) = S.decodeXPub (tv_xpub x) @@ -234,6 +279,54 @@ i1' @?= i1 S.encodeXPub xpub1 @?= xpub1B + , testCase "subsPubPub" $ do + let Just xpub0@(S.XPub v0 d0 _ _ _ _) = S.decodeXPub (tv_xpub x) + case filter (not . S.indexIsHardened . S.Index . fst) (tv_subPrvPrvs x) of + [] -> pure () + xxx -> do + let i0 = S.Index (minimum (fmap fst xxx)) + subs = take 10 $ S.subsXPubXPub xpub0 i0 + for_ (tv_subPubPubs x) $ \(i1w, xpub1B) -> do + let i1 = S.Index i1w + Just xpub1@(S.XPub v1 d1 _ i1' _ _) = + find ((i1 ==) . S.xpub_index) subs + v1 @?= v0 + d1 @?= S.Depth (1 + S.unDepth d0) + i1' @?= i1 + S.encodeXPub xpub1 @?= xpub1B + + , testCase "subsPrvPrv: hardened" $ do + let Just xprv0@(S.XPrv v0 d0 _ _ _ _) = S.decodeXPrv (tv_xprv x) + case filter (S.indexIsHardened . S.Index . fst) (tv_subPrvPrvs x) of + [] -> pure () + xxx -> do + let i0 = S.Index (minimum (fmap fst xxx)) + subs = take 10 $ S.subsXPrvXPrv xprv0 i0 + for_ xxx $ \(i1w, xprv1B) -> do + let i1 = S.Index i1w + Just xprv1@(S.XPrv v1 d1 _ i1' _ _) = + find ((i1 ==) . S.xprv_index) subs + v1 @?= v0 + d1 @?= S.Depth (1 + S.unDepth d0) + i1' @?= i1 + S.encodeXPrv xprv1 @?= xprv1B + + , testCase "subsPrvPrv: normal" $ do + let Just xprv0@(S.XPrv v0 d0 _ _ _ _) = S.decodeXPrv (tv_xprv x) + case filter (not . S.indexIsHardened . S.Index . fst) (tv_subPrvPrvs x) of + [] -> pure () + xxx -> do + let i0 = S.Index (minimum (fmap fst xxx)) + subs = take 10 $ S.subsXPrvXPrv xprv0 i0 + for_ xxx $ \(i1w, xprv1B) -> do + let i1 = S.Index i1w + Just xprv1@(S.XPrv v1 d1 _ i1' _ _) = + find ((i1 ==) . S.xprv_index) subs + v1 @?= v0 + d1 @?= S.Depth (1 + S.unDepth d0) + i1' @?= i1 + S.encodeXPrv xprv1 @?= xprv1B + , testCase "subPrvPrv" $ do let Just xprv0@(S.XPrv v0 d0 _ _ _ _) = S.decodeXPrv (tv_xprv x) for_ (tv_subPrvPrvs x) $ \(i1w, xprv1B) -> do @@ -281,19 +374,19 @@ let Just c = S.chain b pure c -genPrv :: MonadGen m => m S.Prv +genPrv :: MonadGen m => m K.Prv genPrv = do b <- Gen.bytes (Range.singleton 32) - let Just k = S.prv b + let Just k = K.parsePrv b pure k -genPub :: MonadGen m => m S.Pub +genPub :: MonadGen m => m K.Pub genPub = go 10000 where go 0 = error "genPub: too many attempts" go n = do h <- Gen.element [2, 3 :: Word8] b <- Gen.bytes (Range.singleton 32) - case S.pub (B.cons h b) of + case K.parsePub (B.cons h b) of Just k -> pure k Nothing -> go (n - 1)