vendor: 21,628 bytes, line 1
1(globalThis.TURBOPACK||(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,399879,e=>{"use strict";let t,r;var n,i,o=e.i(500521),f=e.i(826913),l=e.i(606852);let a=BigInt(0),u=BigInt(1);function d(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&"Uint8Array"===e.constructor.name}function s(e){if(!d(e))throw Error("Uint8Array expected")}function c(e,t){if("boolean"!=typeof t)throw Error(e+" boolean expected, got "+t)}function h(e){let t=e.toString(16);return 1&t.length?"0"+t:t}function m(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);return""===e?a:BigInt("0x"+e)}let g="function"==typeof Uint8Array.from([]).toHex&&"function"==typeof Uint8Array.fromHex,p=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function y(e){if(s(e),g)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=p[e[r]];return t}function w(e){return e>=48&&e<=57?e-48:e>=65&&e<=70?e-55:e>=97&&e<=102?e-87:void 0}function b(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);if(g)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let n=new Uint8Array(r);for(let t=0,i=0;t<r;t++,i+=2){let r=w(e.charCodeAt(i)),o=w(e.charCodeAt(i+1));if(void 0===r||void 0===o)throw Error('hex string expected, got non-hex character "'+(e[i]+e[i+1])+'" at index '+i);n[t]=16*r+o}return n}function E(e){return m(y(e))}function v(e){return s(e),m(y(Uint8Array.from(e).reverse()))}function B(e,t){return b(e.toString(16).padStart(2*t,"0"))}function x(e,t){return B(e,t).reverse()}function A(e,t,r){let n;if("string"==typeof t)try{n=b(t)}catch(t){throw Error(e+" must be hex string or Uint8Array, cause: "+t)}else if(d(t))n=Uint8Array.from(t);else throw Error(e+" must be hex string or Uint8Array");let i=n.length;if("number"==typeof r&&i!==r)throw Error(e+" of length "+r+" expected, got "+i);return n}function S(...e){let t=0;for(let r=0;r<e.length;r++){let n=e[r];s(n),t+=n.length}let r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){let i=e[t];r.set(i,n),n+=i.length}return r}let O=e=>"bigint"==typeof e&&a<=e;function R(e,t,r){return O(e)&&O(t)&&O(r)&&t<=e&&e<r}function q(e,t,r,n){if(!R(t,r,n))throw Error("expected valid "+e+": "+r+" <= n < "+n+", got "+t)}let I=e=>(u<<BigInt(e))-u,N=e=>new Uint8Array(e),P={bigint:e=>"bigint"==typeof e,function:e=>"function"==typeof e,boolean:e=>"boolean"==typeof e,string:e=>"string"==typeof e,stringOrUint8Array:e=>"string"==typeof e||d(e),isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>"function"==typeof e&&Number.isSafeInteger(e.outputLen)};function Z(e,t,r={}){let n=(t,r,n)=>{let i=P[r];if("function"!=typeof i)throw Error("invalid validator function");let o=e[t];if((!n||void 0!==o)&&!i(o,e))throw Error("param "+String(t)+" is invalid. Expected "+r+", got "+o)};for(let[e,r]of Object.entries(t))n(e,r,!1);for(let[e,t]of Object.entries(r))n(e,t,!0);return e}function U(e){let t=new WeakMap;return(r,...n)=>{let i=t.get(r);if(void 0!==i)return i;let o=e(r,...n);return t.set(r,o),o}}let z=BigInt(0),F=BigInt(1),C=BigInt(2),T=BigInt(3),V=BigInt(4),H=BigInt(5),D=BigInt(8);function j(e,t){let r=e%t;return r>=z?r:t+r}function L(e,t,r){let n=e;for(;t-- >z;)n*=n,n%=r;return n}function K(e,t){if(e===z)throw Error("invert: expected non-zero number");if(t<=z)throw Error("invert: expected positive modulus, got "+t);let r=j(e,t),n=t,i=z,o=F,f=F,l=z;for(;r!==z;){let e=n/r,t=n%r,a=i-f*e,u=o-l*e;n=r,r=t,i=f,o=l,f=a,l=u}if(n!==F)throw Error("invert: does not exist");return j(i,t)}function k(e,t){let r=(e.ORDER+F)/V,n=e.pow(t,r);if(!e.eql(e.sqr(n),t))throw Error("Cannot find square root");return n}function Y(e,t){let r=(e.ORDER-H)/D,n=e.mul(t,C),i=e.pow(n,r),o=e.mul(t,i),f=e.mul(e.mul(o,C),i),l=e.mul(o,e.sub(f,e.ONE));if(!e.eql(e.sqr(l),t))throw Error("Cannot find square root");return l}let W=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function M(e){return Z(e,W.reduce((e,t)=>(e[t]="function",e),{ORDER:"bigint",MASK:"bigint",BYTES:"isSafeInteger",BITS:"isSafeInteger"}))}function _(e,t,r=!1){let n=Array(t.length).fill(r?e.ZERO:void 0),i=t.reduce((t,r,i)=>e.is0(r)?t:(n[i]=t,e.mul(t,r)),e.ONE),o=e.inv(i);return t.reduceRight((t,r,i)=>e.is0(r)?t:(n[i]=e.mul(t,n[i]),e.mul(t,r)),o),n}function G(e,t){let r=(e.ORDER-F)/C,n=e.pow(t,r),i=e.eql(n,e.ONE),o=e.eql(n,e.ZERO),f=e.eql(n,e.neg(e.ONE));if(!i&&!o&&!f)throw Error("invalid Legendre symbol result");return i?1:o?0:-1}function J(e,t){void 0!==t&&(0,f.anumber)(t);let r=void 0!==t?t:e.toString(2).length,n=Math.ceil(r/8);return{nBitLength:r,nByteLength:n}}function Q(e,t,r=!1,n={}){let i;if(e<=z)throw Error("invalid field: expected ORDER > 0, got "+e);let{nBitLength:o,nByteLength:f}=J(e,t);if(f>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");let l=Object.freeze({ORDER:e,isLE:r,BITS:o,BYTES:f,MASK:I(o),ZERO:z,ONE:F,create:t=>j(t,e),isValid:t=>{if("bigint"!=typeof t)throw Error("invalid field element: expected bigint, got "+typeof t);return z<=t&&t<e},is0:e=>e===z,isOdd:e=>(e&F)===F,neg:t=>j(-t,e),eql:(e,t)=>e===t,sqr:t=>j(t*t,e),add:(t,r)=>j(t+r,e),sub:(t,r)=>j(t-r,e),mul:(t,r)=>j(t*r,e),pow:(e,t)=>(function(e,t,r){if(r<z)throw Error("invalid exponent, negatives unsupported");if(r===z)return e.ONE;if(r===F)return t;let n=e.ONE,i=t;for(;r>z;)r&F&&(n=e.mul(n,i)),i=e.sqr(i),r>>=F;return n})(l,e,t),div:(t,r)=>j(t*K(r,e),e),sqrN:e=>e*e,addN:(e,t)=>e+t,subN:(e,t)=>e-t,mulN:(e,t)=>e*t,inv:t=>K(t,e),sqrt:n.sqrt||(t=>(i||(i=e%V===T?k:e%D===H?Y:function(e){if(e<BigInt(3))throw Error("sqrt is not defined for small field");let t=e-F,r=0;for(;t%C===z;)t/=C,r++;let n=C,i=Q(e);for(;1===G(i,n);)if(n++>1e3)throw Error("Cannot find square root: probably non-prime P");if(1===r)return k;let o=i.pow(n,t),f=(t+F)/C;return function(e,n){if(e.is0(n))return n;if(1!==G(e,n))throw Error("Cannot find square root");let i=r,l=e.mul(e.ONE,o),a=e.pow(n,t),u=e.pow(n,f);for(;!e.eql(a,e.ONE);){if(e.is0(a))return e.ZERO;let t=1,r=e.sqr(a);for(;!e.eql(r,e.ONE);)if(t++,r=e.sqr(r),t===i)throw Error("Cannot find square root");let n=F<<BigInt(i-t-1),o=e.pow(l,n);i=t,l=e.sqr(o),a=e.mul(a,l),u=e.mul(u,o)}return u}}(e)),i(l,t))),toBytes:e=>r?x(e,f):B(e,f),fromBytes:e=>{if(e.length!==f)throw Error("Field.fromBytes: expected "+f+" bytes, got "+e.length);return r?v(e):E(e)},invertBatch:e=>_(l,e),cmov:(e,t,r)=>r?t:e});return Object.freeze(l)}function X(e){if("bigint"!=typeof e)throw Error("field order must be bigint");return Math.ceil(e.toString(2).length/8)}function $(e){let t=X(e);return t+Math.ceil(t/2)}let ee=BigInt(0),et=BigInt(1);function er(e,t){let r=t.negate();return e?r:t}function en(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function ei(e,t){en(e,t);let r=Math.ceil(t/e)+1,n=2**(e-1),i=2**e;return{windows:r,windowSize:n,mask:I(e),maxNumber:i,shiftBy:BigInt(e)}}function eo(e,t,r){let{windowSize:n,mask:i,maxNumber:o,shiftBy:f}=r,l=Number(e&i),a=e>>f;l>n&&(l-=o,a+=et);let u=t*n,d=u+Math.abs(l)-1,s=0===l;return{nextN:a,offset:d,isZero:s,isNeg:l<0,isNegF:t%2!=0,offsetF:u}}let ef=new WeakMap,el=new WeakMap;function ea(e){return el.get(e)||1}function eu(e){return M(e.Fp),Z(e,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...J(e.n,e.nBitLength),...e,...{p:e.Fp.ORDER}})}function ed(e){void 0!==e.lowS&&c("lowS",e.lowS),void 0!==e.prehash&&c("prehash",e.prehash)}let es={Err:class extends Error{constructor(e=""){super(e)}},_tlv:{encode:(e,t)=>{let{Err:r}=es;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(1&t.length)throw new r("tlv.encode: unpadded data");let n=t.length/2,i=h(n);if(i.length/2&128)throw new r("tlv.encode: long form length too big");let o=n>127?h(i.length/2|128):"";return h(e)+o+i+t},decode(e,t){let{Err:r}=es,n=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[n++]!==e)throw new r("tlv.decode: wrong tlv");let i=t[n++],o=0;if(128&i){let e=127&i;if(!e)throw new r("tlv.decode(long): indefinite length not supported");if(e>4)throw new r("tlv.decode(long): byte length is too big");let f=t.subarray(n,n+e);if(f.length!==e)throw new r("tlv.decode: length bytes not complete");if(0===f[0])throw new r("tlv.decode(long): zero leftmost byte");for(let e of f)o=o<<8|e;if(n+=e,o<128)throw new r("tlv.decode(long): not minimal encoding")}else o=i;let f=t.subarray(n,n+o);if(f.length!==o)throw new r("tlv.decode: wrong value length");return{v:f,l:t.subarray(n+o)}}},_int:{encode(e){let{Err:t}=es;if(e<ec)throw new t("integer: negative integers are not allowed");let r=h(e);if(8&Number.parseInt(r[0],16)&&(r="00"+r),1&r.length)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=es;if(128&e[0])throw new t("invalid signature integer: negative");if(0===e[0]&&!(128&e[1]))throw new t("invalid signature integer: unnecessary leading zero");return E(e)}},toSig(e){let{Err:t,_int:r,_tlv:n}=es,i=A("signature",e),{v:o,l:f}=n.decode(48,i);if(f.length)throw new t("invalid signature: left bytes after parsing");let{v:l,l:a}=n.decode(2,o),{v:u,l:d}=n.decode(2,a);if(d.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(l),s:r.decode(u)}},hexFromSig(e){let{_tlv:t,_int:r}=es,n=t.encode(2,r.encode(e.r)),i=t.encode(2,r.encode(e.s));return t.encode(48,n+i)}},ec=BigInt(0),eh=BigInt(1),em=BigInt(2),eg=BigInt(3),ep=BigInt(4),ey=BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),ew=BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),eb=BigInt(0),eE=BigInt(1),ev=BigInt(2),eB=(e,t)=>(e+t/ev)/t,ex=Q(ey,void 0,void 0,{sqrt:function(e){let t=BigInt(3),r=BigInt(6),n=BigInt(11),i=BigInt(22),o=BigInt(23),f=BigInt(44),l=BigInt(88),a=e*e*e%ey,u=a*a*e%ey,d=L(u,t,ey)*u%ey,s=L(d,t,ey)*u%ey,c=L(s,ev,ey)*a%ey,h=L(c,n,ey)*c%ey,m=L(h,i,ey)*h%ey,g=L(m,f,ey)*m%ey,p=L(g,l,ey)*g%ey,y=L(p,f,ey)*m%ey,w=L(y,t,ey)*u%ey,b=L(w,o,ey)*h%ey,E=L(b,r,ey)*a%ey,v=L(E,ev,ey);if(!ex.eql(ex.sqr(v),e))throw Error("Cannot find square root");return v}}),eA=(n={a:eb,b:BigInt(7),Fp:ex,n:ew,Gx:BigInt("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:BigInt("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:BigInt(1),lowS:!0,endo:{beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:e=>{let t=BigInt("0x3086d221a7d46bcde86c90e49284eb15"),r=-eE*BigInt("0xe4437ed6010e88286f547fa90abfe4c3"),n=BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),i=BigInt("0x100000000000000000000000000000000"),o=eB(t*e,ew),f=eB(-r*e,ew),l=j(e-o*t-f*n,ew),a=j(-o*r-f*t,ew),u=l>i,d=a>i;if(u&&(l=ew-l),d&&(a=ew-a),l>i||a>i)throw Error("splitScalar: Endomorphism failed, k="+e);return{k1neg:u,k1:l,k2neg:d,k2:a}}}},i=o.sha256,{...(t=e=>(function(e){let t,r=(Z(t=eu(e),{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...t})),{Fp:n,n:i,nByteLength:o,nBitLength:f}=r,l=n.BYTES+1,s=2*n.BYTES+1;function h(e){return j(e,i)}let{ProjectivePoint:m,normPrivateKeyToScalar:g,weierstrassEquation:p,isWithinCurveOrder:w}=function(e){var t;let r=function(e){let t=eu(e);Z(t,{a:"field",b:"field"},{allowInfinityPoint:"boolean",allowedPrivateKeyLengths:"array",clearCofactor:"function",fromBytes:"function",isTorsionFree:"function",toBytes:"function",wrapPrivateKey:"boolean"});let{endo:r,Fp:n,a:i}=t;if(r){if(!n.eql(i,n.ZERO))throw Error("invalid endo: CURVE.a must be 0");if("object"!=typeof r||"bigint"!=typeof r.beta||"function"!=typeof r.splitScalar)throw Error('invalid endo: expected "beta": bigint and "splitScalar": function')}return Object.freeze({...t})}(e),{Fp:n}=r,i=Q(r.n,r.nBitLength),o=r.toBytes||((e,t,r)=>{let i=t.toAffine();return S(Uint8Array.from([4]),n.toBytes(i.x),n.toBytes(i.y))}),f=r.fromBytes||(e=>{let t=e.subarray(1);return{x:n.fromBytes(t.subarray(0,n.BYTES)),y:n.fromBytes(t.subarray(n.BYTES,2*n.BYTES))}});function l(e){let{a:t,b:i}=r,o=n.sqr(e),f=n.mul(o,e);return n.add(n.add(f,n.mul(e,t)),i)}function s(e,t){let r=n.sqr(t),i=l(e);return n.eql(r,i)}if(!s(r.Gx,r.Gy))throw Error("bad curve params: generator point");let h=n.mul(n.pow(r.a,eg),ep),m=n.mul(n.sqr(r.b),BigInt(27));if(n.is0(n.add(h,m)))throw Error("bad curve params: a or b");function g(e){let t,{allowedPrivateKeyLengths:n,nByteLength:i,wrapPrivateKey:o,n:f}=r;if(n&&"bigint"!=typeof e){if(d(e)&&(e=y(e)),"string"!=typeof e||!n.includes(e.length))throw Error("invalid private key");e=e.padStart(2*i,"0")}try{t="bigint"==typeof e?e:E(A("private key",e,i))}catch(t){throw Error("invalid private key, expected hex or "+i+" bytes, got "+typeof e)}return o&&(t=j(t,f)),q("private key",t,eh,f),t}function p(e){if(!(e instanceof v))throw Error("ProjectivePoint expected")}let w=U((e,t)=>{let{px:r,py:i,pz:o}=e;if(n.eql(o,n.ONE))return{x:r,y:i};let f=e.is0();null==t&&(t=f?n.ONE:n.inv(o));let l=n.mul(r,t),a=n.mul(i,t),u=n.mul(o,t);if(f)return{x:n.ZERO,y:n.ZERO};if(!n.eql(u,n.ONE))throw Error("invZ was invalid");return{x:l,y:a}}),b=U(e=>{if(e.is0()){if(r.allowInfinityPoint&&!n.is0(e.py))return;throw Error("bad point: ZERO")}let{x:t,y:i}=e.toAffine();if(!n.isValid(t)||!n.isValid(i))throw Error("bad point: x or y not FE");if(!s(t,i))throw Error("bad point: equation left != right");if(!e.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});class v{constructor(e,t,r){if(null==e||!n.isValid(e))throw Error("x required");if(null==t||!n.isValid(t)||n.is0(t))throw Error("y required");if(null==r||!n.isValid(r))throw Error("z required");this.px=e,this.py=t,this.pz=r,Object.freeze(this)}static fromAffine(e){let{x:t,y:r}=e||{};if(!e||!n.isValid(t)||!n.isValid(r))throw Error("invalid affine point");if(e instanceof v)throw Error("projective point not allowed");let i=e=>n.eql(e,n.ZERO);return i(t)&&i(r)?v.ZERO:new v(t,r,n.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(e){let t=_(n,e.map(e=>e.pz));return e.map((e,r)=>e.toAffine(t[r])).map(v.fromAffine)}static fromHex(e){let t=v.fromAffine(f(A("pointHex",e)));return t.assertValidity(),t}static fromPrivateKey(e){return v.BASE.multiply(g(e))}static msm(e,t){return function(e,t,r,n){if(!Array.isArray(r))throw Error("array expected");r.forEach((t,r)=>{if(!(t instanceof e))throw Error("invalid point at index "+r)});if(!Array.isArray(n))throw Error("array of scalars expected");n.forEach((e,r)=>{if(!t.isValid(e))throw Error("invalid scalar at index "+r)});let i=r.length,o=n.length;if(i!==o)throw Error("arrays of points and scalars must have equal length");let f=e.ZERO,l=function(e){let t;for(t=0;e>a;e>>=u,t+=1);return t}(BigInt(i)),d=1;l>12?d=l-3:l>4?d=l-2:l>0&&(d=2);let s=I(d),c=Array(Number(s)+1).fill(f),h=Math.floor((t.BITS-1)/d)*d,m=f;for(let e=h;e>=0;e-=d){c.fill(f);for(let t=0;t<o;t++){let i=Number(n[t]>>BigInt(e)&s);c[i]=c[i].add(r[t])}let t=f;for(let e=c.length-1,r=f;e>0;e--)r=r.add(c[e]),t=t.add(r);if(m=m.add(t),0!==e)for(let e=0;e<d;e++)m=m.double()}return m}(v,i,e,t)}_setWindowSize(e){O.setWindowSize(this,e)}assertValidity(){b(this)}hasEvenY(){let{y:e}=this.toAffine();if(n.isOdd)return!n.isOdd(e);throw Error("Field doesn't support isOdd")}equals(e){p(e);let{px:t,py:r,pz:i}=this,{px:o,py:f,pz:l}=e,a=n.eql(n.mul(t,l),n.mul(o,i)),u=n.eql(n.mul(r,l),n.mul(f,i));return a&&u}negate(){return new v(this.px,n.neg(this.py),this.pz)}double(){let{a:e,b:t}=r,i=n.mul(t,eg),{px:o,py:f,pz:l}=this,a=n.ZERO,u=n.ZERO,d=n.ZERO,s=n.mul(o,o),c=n.mul(f,f),h=n.mul(l,l),m=n.mul(o,f);return m=n.add(m,m),d=n.mul(o,l),d=n.add(d,d),a=n.mul(e,d),u=n.mul(i,h),u=n.add(a,u),a=n.sub(c,u),u=n.add(c,u),u=n.mul(a,u),a=n.mul(m,a),d=n.mul(i,d),h=n.mul(e,h),m=n.sub(s,h),m=n.mul(e,m),m=n.add(m,d),d=n.add(s,s),s=n.add(d,s),s=n.add(s,h),s=n.mul(s,m),u=n.add(u,s),h=n.mul(f,l),h=n.add(h,h),s=n.mul(h,m),a=n.sub(a,s),d=n.mul(h,c),d=n.add(d,d),new v(a,u,d=n.add(d,d))}add(e){p(e);let{px:t,py:i,pz:o}=this,{px:f,py:l,pz:a}=e,u=n.ZERO,d=n.ZERO,s=n.ZERO,c=r.a,h=n.mul(r.b,eg),m=n.mul(t,f),g=n.mul(i,l),y=n.mul(o,a),w=n.add(t,i),b=n.add(f,l);w=n.mul(w,b),b=n.add(m,g),w=n.sub(w,b),b=n.add(t,o);let E=n.add(f,a);return b=n.mul(b,E),E=n.add(m,y),b=n.sub(b,E),E=n.add(i,o),u=n.add(l,a),E=n.mul(E,u),u=n.add(g,y),E=n.sub(E,u),s=n.mul(c,b),u=n.mul(h,y),s=n.add(u,s),u=n.sub(g,s),s=n.add(g,s),d=n.mul(u,s),g=n.add(m,m),g=n.add(g,m),y=n.mul(c,y),b=n.mul(h,b),g=n.add(g,y),y=n.sub(m,y),y=n.mul(c,y),b=n.add(b,y),m=n.mul(g,b),d=n.add(d,m),m=n.mul(E,b),u=n.mul(w,u),u=n.sub(u,m),m=n.mul(w,g),s=n.mul(E,s),new v(u,d,s=n.add(s,m))}subtract(e){return this.add(e.negate())}is0(){return this.equals(v.ZERO)}wNAF(e){return O.wNAFCached(this,e,v.normalizeZ)}multiplyUnsafe(e){let{endo:t,n:i}=r;q("scalar",e,ec,i);let o=v.ZERO;if(e===ec)return o;if(this.is0()||e===eh)return this;if(!t||O.hasPrecomputes(this))return O.wNAFCachedUnsafe(this,e,v.normalizeZ);let{k1neg:f,k1:l,k2neg:a,k2:u}=t.splitScalar(e),d=o,s=o,c=this;for(;l>ec||u>ec;)l&eh&&(d=d.add(c)),u&eh&&(s=s.add(c)),c=c.double(),l>>=eh,u>>=eh;return f&&(d=d.negate()),a&&(s=s.negate()),s=new v(n.mul(s.px,t.beta),s.py,s.pz),d.add(s)}multiply(e){let t,i,{endo:o,n:f}=r;if(q("scalar",e,eh,f),o){let{k1neg:r,k1:f,k2neg:l,k2:a}=o.splitScalar(e),{p:u,f:d}=this.wNAF(f),{p:s,f:c}=this.wNAF(a);u=O.constTimeNegate(r,u),s=O.constTimeNegate(l,s),s=new v(n.mul(s.px,o.beta),s.py,s.pz),t=u.add(s),i=d.add(c)}else{let{p:r,f:n}=this.wNAF(e);t=r,i=n}return v.normalizeZ([t,i])[0]}multiplyAndAddUnsafe(e,t,r){let n=v.BASE,i=(e,t)=>t!==ec&&t!==eh&&e.equals(n)?e.multiply(t):e.multiplyUnsafe(t),o=i(this,t).add(i(e,r));return o.is0()?void 0:o}toAffine(e){return w(this,e)}isTorsionFree(){let{h:e,isTorsionFree:t}=r;if(e===eh)return!0;if(t)return t(v,this);throw Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){let{h:e,clearCofactor:t}=r;return e===eh?this:t?t(v,this):this.multiplyUnsafe(r.h)}toRawBytes(e=!0){return c("isCompressed",e),this.assertValidity(),o(v,this,e)}toHex(e=!0){return c("isCompressed",e),y(this.toRawBytes(e))}}v.BASE=new v(r.Gx,r.Gy,n.ONE),v.ZERO=new v(n.ZERO,n.ONE,n.ZERO);let{endo:B,nBitLength:x}=r,O=(t=B?Math.ceil(x/2):x,{constTimeNegate:er,hasPrecomputes:e=>1!==ea(e),unsafeLadder(e,t,r=v.ZERO){let n=e;for(;t>ee;)t&et&&(r=r.add(n)),n=n.double(),t>>=et;return r},precomputeWindow(e,r){let{windows:n,windowSize:i}=ei(r,t),o=[],f=e,l=f;for(let e=0;e<n;e++){l=f,o.push(l);for(let e=1;e<i;e++)l=l.add(f),o.push(l);f=l.double()}return o},wNAF(e,r,n){let i=v.ZERO,o=v.BASE,f=ei(e,t);for(let e=0;e<f.windows;e++){let{nextN:t,offset:l,isZero:a,isNeg:u,isNegF:d,offsetF:s}=eo(n,e,f);n=t,a?o=o.add(er(d,r[s])):i=i.add(er(u,r[l]))}return{p:i,f:o}},wNAFUnsafe(e,r,n,i=v.ZERO){let o=ei(e,t);for(let e=0;e<o.windows&&n!==ee;e++){let{nextN:t,offset:f,isZero:l,isNeg:a}=eo(n,e,o);if(n=t,!l){let e=r[f];i=i.add(a?e.negate():e)}}return i},getPrecomputes(e,t,r){let n=ef.get(t);return n||(n=this.precomputeWindow(t,e),1!==e&&ef.set(t,r(n))),n},wNAFCached(e,t,r){let n=ea(e);return this.wNAF(n,this.getPrecomputes(n,e,r),t)},wNAFCachedUnsafe(e,t,r,n){let i=ea(e);return 1===i?this.unsafeLadder(e,t,n):this.wNAFUnsafe(i,this.getPrecomputes(i,e,r),t,n)},setWindowSize(e,r){en(r,t),el.set(e,r),ef.delete(e)}});return{CURVE:r,ProjectivePoint:v,normPrivateKeyToScalar:g,weierstrassEquation:l,isWithinCurveOrder:function(e){return R(e,eh,r.n)}}}({...r,toBytes(e,t,r){let i=t.toAffine(),o=n.toBytes(i.x);return(c("isCompressed",r),r)?S(Uint8Array.from([t.hasEvenY()?2:3]),o):S(Uint8Array.from([4]),o,n.toBytes(i.y))},fromBytes(e){let t=e.length,r=e[0],i=e.subarray(1);if(t===l&&(2===r||3===r)){let e,t=E(i);if(!R(t,eh,n.ORDER))throw Error("Point is not on curve");let o=p(t);try{e=n.sqrt(o)}catch(e){throw Error("Point is not on curve"+(e instanceof Error?": "+e.message:""))}return(1&r)==1!=((e&eh)===eh)&&(e=n.neg(e)),{x:t,y:e}}if(t===s&&4===r)return{x:n.fromBytes(i.subarray(0,n.BYTES)),y:n.fromBytes(i.subarray(n.BYTES,2*n.BYTES))};throw Error("invalid Point, expected length of "+l+", or uncompressed "+s+", got "+t)}}),O=(e,t,r)=>E(e.slice(t,r));class P{constructor(e,t,r){q("r",e,eh,i),q("s",t,eh,i),this.r=e,this.s=t,null!=r&&(this.recovery=r),Object.freeze(this)}static fromCompact(e){return new P(O(e=A("compactSignature",e,2*o),0,o),O(e,o,2*o))}static fromDER(e){let{r:t,s:r}=es.toSig(A("DER",e));return new P(t,r)}assertValidity(){}addRecoveryBit(e){return new P(this.r,this.s,e)}recoverPublicKey(e){let{r:t,s:o,recovery:f}=this,l=T(A("msgHash",e));if(null==f||![0,1,2,3].includes(f))throw Error("recovery id invalid");let a=2===f||3===f?t+r.n:t;if(a>=n.ORDER)throw Error("recovery id 2 or 3 invalid");let u=(1&f)==0?"02":"03",d=m.fromHex(u+y(B(a,n.BYTES))),s=K(a,i),c=h(-l*s),g=h(o*s),p=m.BASE.multiplyAndAddUnsafe(d,c,g);if(!p)throw Error("point at infinify");return p.assertValidity(),p}hasHighS(){return this.s>i>>eh}normalizeS(){return this.hasHighS()?new P(this.r,h(-this.s),this.recovery):this}toDERRawBytes(){return b(this.toDERHex())}toDERHex(){return es.hexFromSig(this)}toCompactRawBytes(){return b(this.toCompactHex())}toCompactHex(){return y(B(this.r,o))+y(B(this.s,o))}}function z(e){if("bigint"==typeof e)return!1;if(e instanceof m)return!0;let t=A("key",e).length,i=n.BYTES,f=i+1;if(!r.allowedPrivateKeyLengths&&o!==f)return t===f||t===2*i+1}let C=r.bits2int||function(e){if(e.length>8192)throw Error("input is too large");let t=E(e),r=8*e.length-f;return r>0?t>>BigInt(r):t},T=r.bits2int_modN||function(e){return h(C(e))},V=I(f);
vendor: 4,307 bytes, line 1
1function H(e){return q("num < 2^"+f,e,ec,V),B(e,o)}let D={lowS:r.lowS,prehash:!1},L={lowS:r.lowS,prehash:!1};return m.BASE._setWindowSize(8),{CURVE:r,getPublicKey:function(e,t=!0){return m.fromPrivateKey(e).toRawBytes(t)},getSharedSecret:function(e,t,r=!0){if(!0===z(e))throw Error("first arg must be private key");if(!1===z(t))throw Error("second arg must be public key");return m.fromHex(t).multiply(g(e)).toRawBytes(r)},sign:function(e,t,o=D){let{seed:f,k2sig:l}=function(e,t,o=D){if(["recovered","canonical"].some(e=>e in o))throw Error("sign() legacy options not supported");let{hash:f,randomBytes:l}=r,{lowS:a,prehash:u,extraEntropy:d}=o;null==a&&(a=!0),e=A("msgHash",e),ed(o),u&&(e=A("prehashed msgHash",f(e)));let s=T(e),c=g(t),p=[H(c),H(s)];if(null!=d&&!1!==d){let e=!0===d?l(n.BYTES):d;p.push(A("extraEntropy",e))}return{seed:S(...p),k2sig:function(e){var t;let r=C(e);if(!w(r))return;let n=K(r,i),o=m.BASE.multiply(r).toAffine(),f=h(o.x);if(f===ec)return;let l=h(n*h(s+f*c));if(l===ec)return;let u=2*(o.x!==f)|Number(o.y&eh),d=l;return a&&l>i>>eh&&(d=(t=l)>i>>eh?h(-t):t,u^=1),new P(f,d,u)}}}(e,t,o);return(function(e,t,r){if("number"!=typeof e||e<2)throw Error("hashLen must be a number");if("number"!=typeof t||t<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");let n=N(e),i=N(e),o=0,f=()=>{n.fill(1),i.fill(0),o=0},l=(...e)=>r(i,n,...e),a=(e=N(0))=>{let t;if(i=l((t=[0],Uint8Array.from(t)),e),n=l(),0!==e.length){let t;i=l((t=[1],Uint8Array.from(t)),e),n=l()}},u=()=>{if(o++>=1e3)throw Error("drbg: tried 1000 values");let e=0,r=[];for(;e<t;){let t=(n=l()).slice();r.push(t),e+=n.length}return S(...r)};return(e,t)=>{let r;for(f(),a(e);!(r=t(u()));)a();return f(),r}})(r.hash.outputLen,r.nByteLength,r.hmac)(f,l)},verify:function(e,t,n,o=L){let f,l;t=A("msgHash",t),n=A("publicKey",n);let{lowS:a,prehash:u,format:s}=o;if(ed(o),"strict"in o)throw Error("options.strict was renamed to lowS");if(void 0!==s&&"compact"!==s&&"der"!==s)throw Error("format must be compact or der");let c="string"==typeof e||d(e),g=!c&&!s&&"object"==typeof e&&null!==e&&"bigint"==typeof e.r&&"bigint"==typeof e.s;if(!c&&!g)throw Error("invalid signature, expected Uint8Array, hex string or Signature instance");try{if(g&&(l=new P(e.r,e.s)),c){try{"compact"!==s&&(l=P.fromDER(e))}catch(e){if(!(e instanceof es.Err))throw e}l||"der"===s||(l=P.fromCompact(e))}f=m.fromHex(n)}catch(e){return!1}if(!l||a&&l.hasHighS())return!1;u&&(t=r.hash(t));let{r:p,s:y}=l,w=T(t),b=K(y,i),E=h(w*b),v=h(p*b),B=m.BASE.multiplyAndAddUnsafe(f,E,v)?.toAffine();return!!B&&h(B.x)===p},ProjectivePoint:m,Signature:P,utils:{isValidPrivateKey(e){try{return g(e),!0}catch(e){return!1}},normPrivateKeyToScalar:g,randomPrivateKey:()=>{let e=$(r.n);return function(e,t,r=!1){let n=e.length,i=X(t),o=$(t);if(n<16||n<o||n>1024)throw Error("expected "+o+"-1024 bytes of input, got "+n);let f=j(r?v(e):E(e),t-F)+F;return r?x(f,i):B(f,i)}(r.randomBytes(e),r.n)},precompute:(e=8,t=m.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)}}})({...n,...{hash:e,hmac:(t,...r)=>(0,l.hmac)(e,t,(0,f.concatBytes)(...r)),randomBytes:f.randomBytes}}))(i),create:t});eA.ProjectivePoint;let eS=(r=[["0x8e38e38e38e38e38e38e38e38e38e38e38e38e38e38e38e38e38e38daaaaa8c7","0x7d3d4c80bc321d5b9f315cea7fd44c5d595d2fc0bf63b92dfff1044f17c6581","0x534c328d23f234e6e2a413deca25caece4506144037c40314ecbd0b53d9dd262","0x8e38e38e38e38e38e38e38e38e38e38e38e38e38e38e38e38e38e38daaaaa88c"],["0xd35771193d94918a9ca34ccbb7b640dd86cd409542f8487d9fe6b745781eb49b","0xedadc6f64383dc1df7c4b2d51b54225406d36b641f5e41bbc52a56612a8c6d14","0x0000000000000000000000000000000000000000000000000000000000000001"],["0x4bda12f684bda12f684bda12f684bda12f684bda12f684bda12f684b8e38e23c","0xc75e0c32d5cb7c0fa9d0a54b12a0a6d5647ab046d686da6fdffc90fc201d71a3","0x29a6194691f91a73715209ef6512e576722830a201be2018a765e85a9ecee931","0x2f684bda12f684bda12f684bda12f684bda12f684bda12f684bda12f38e38d84"],["0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffff93b","0x7a06534bb8bdb49fd5e9e6632722c2989467c1bfc8e8d978dfb425d2685c2573","0x6484aa716545ca2cf3a70c3fa8fe337e0a3d21162f0d6299a7bf8192bfd2a76f","0x0000000000000000000000000000000000000000000000000000000000000001"]].map(e=>e.map(e=>BigInt(e))).map(e=>Array.from(e).reverse()),(e,t)=>
1{let[n,i,o,f]=r.map(t=>t.reduce((t,r)=>ex.add(ex.mul(t,e),r))),[l,a]=_(ex,[i,f],!0);return e=ex.mul(n,l),t=ex.mul(t,ex.mul(o,a)),{x:e,y:t}}),eO=function(e,t){if(M(e),!e.isValid(t.A)||!e.isValid(t.B)||!e.isValid(t.Z))throw Error("mapToCurveSimpleSWU: invalid opts");let r=function(e,t){let r=e.ORDER,n=ec;for(let e=r-eh;e%em===ec;e/=em)n+=eh;let i=n,o=em<<i-eh-eh,f=o*em,l=(r-eh)/f,a=(l-eh)/em,u=f-eh,d=e.pow(t,l),s=e.pow(t,(l+eh)/em),c=(t,r)=>{let n=d,f=e.pow(r,u),l=e.sqr(f);l=e.mul(l,r);let c=e.mul(t,l);c=e.pow(c,a),c=e.mul(c,f),f=e.mul(c,r),l=e.mul(c,t);let h=e.mul(l,f);c=e.pow(h,o);let m=e.eql(c,e.ONE);f=e.mul(l,s),c=e.mul(h,n),l=e.cmov(f,l,m),h=e.cmov(c,h,m);for(let t=i;t>eh;t--){let r=t-em;r=em<<r-eh;let i=e.pow(h,r),o=e.eql(i,e.ONE);f=e.mul(l,n),n=e.mul(n,n),i=e.mul(h,n),l=e.cmov(f,l,o),h=e.cmov(i,h,o)}return{isValid:m,value:l}};if(e.ORDER%ep===eg){let r=(e.ORDER-eg)/ep,n=e.sqrt(e.neg(t));c=(t,i)=>{let o=e.sqr(i),f=e.mul(t,i);o=e.mul(o,f);let l=e.pow(o,r);l=e.mul(l,f);let a=e.mul(l,n),u=e.mul(e.sqr(l),i),d=e.eql(u,t),s=e.cmov(a,l,d);return{isValid:d,value:s}}}return c}(e,t.Z);if(!e.isOdd)throw Error("Fp.isOdd is not implemented!");return n=>{let i,o,f,l,a,u,d,s;i=e.sqr(n),i=e.mul(i,t.Z),o=e.sqr(i),o=e.add(o,i),f=e.add(o,e.ONE),f=e.mul(f,t.B),l=e.cmov(t.Z,e.neg(o),!e.eql(o,e.ZERO)),l=e.mul(l,t.A),o=e.sqr(f),u=e.sqr(l),a=e.mul(u,t.A),o=e.add(o,a),o=e.mul(o,f),u=e.mul(u,l),a=e.mul(u,t.B),o=e.add(o,a),d=e.mul(i,f);let{isValid:c,value:h}=r(o,u);s=e.mul(i,n),s=e.mul(s,h),d=e.cmov(d,f,c),s=e.cmov(s,h,c);let m=e.isOdd(n)===e.isOdd(s);s=e.cmov(e.neg(s),s,m);let g=_(e,[l],!0)[0];return{x:d=e.mul(d,g),y:s}}}(ex,{A:BigInt("0x3f8731abdd661adca08a5558f0f5d272e953d363cb6f0e5d405447c01a444533"),B:BigInt("1771"),Z:ex.create(BigInt("-11"))});(function(e,t,r){if("function"!=typeof t)throw Error("mapToCurve() must be defined")})(eA.ProjectivePoint,e=>{let{x:t,y:r}=eO(ex.create(e[0]));return eS(t,r)},(ex.ORDER,o.sha256)),e.s(["secp256k1",0,eA],399879)}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.