https://basepaint-assist.vercel.app/_next/static/chunks/9964.4efa011d7691b9a2.js

1"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[9964],{59964:(t,e,r)=>{r.d(e,{secp256k1:()=>tq});var i=r(49760);class n extends i.Vw{constructor(t,e,r,n){super(),this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.blockLen=t,this.outputLen=e,this.padOffset=r,this.isLE=n,this.buffer=new Uint8Array(t),this.view=(0,i.O8)(this.buffer)}update(t){(0,i.CC)(this),t=(0,i.ZJ)(t),(0,i.DO)(t);let{view:e,buffer:r,blockLen:n}=this,o=t.length;for(let s=0;s<o;){let f=Math.min(n-this.pos,o-s);if(f===n){let e=(0,i.O8)(t);for(;n<=o-s;s+=n)this.process(e,s);continue}r.set(t.subarray(s,s+f),this.pos),this.pos+=f,s+=f,this.pos===n&&(this.process(e,0),this.pos=0)}return this.length+=t.length,this.roundClean(),this}digestInto(t){(0,i.CC)(this),(0,i.Ht)(t,this),this.finished=!0;let{buffer:e,view:r,blockLen:n,isLE:o}=this,{pos:s}=this;e[s++]=128,(0,i.uH)(this.buffer.subarray(s)),this.padOffset>n-s&&(this.process(r,0),s=0);for(let t=s;t<n;t++)e[t]=0;!function(t,e,r,i){if("function"==typeof t.setBigUint64)return t.setBigUint64(e,r,i);let n=BigInt(32),o=BigInt(0xffffffff),s=Number(r>>n&o),f=Number(r&o),a=4*!!i,l=4*!i;t.setUint32(e+a,s,i),t.setUint32(e+l,f,i)}(r,n-8,BigInt(8*this.length),o),this.process(r,0);let f=(0,i.O8)(t),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen should be aligned to 32bit");let l=a/4,d=this.get();if(l>d.length)throw Error("_sha2: outputLen bigger than state");for(let t=0;t<l;t++)f.setUint32(4*t,d[t],o)}digest(){let{buffer:t,outputLen:e}=this;this.digestInto(t);let r=t.slice(0,e);return this.destroy(),r}_cloneInto(t){t||(t=new this.constructor),t.set(...this.get());let{blockLen:e,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;return t.destroyed=o,t.finished=n,t.length=i,t.pos=s,i%e&&t.buffer.set(r),t}clone(){return this._cloneInto()}}let o=Uint32Array.from([0x6a09e667,0xbb67ae85,0x3c6ef372,0xa54ff53a,0x510e527f,0x9b05688c,0x1f83d9ab,0x5be0cd19]);var s=r(72151);let f=Uint32Array.from([0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,0xe49b69c1,0xefbe4786,0xfc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x6ca6351,0x14292967,0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2]),a=new Uint32Array(64);class l extends n{constructor(t=32){super(64,t,8,!1),this.A=0|o[0],this.B=0|o[1],this.C=0|o[2],this.D=0|o[3],this.E=0|o[4],this.F=0|o[5],this.G=0|o[6],this.H=0|o[7]}get(){let{A:t,B:e,C:r,D:i,E:n,F:o,G:s,H:f}=this;return[t,e,r,i,n,o,s,f]}set(t,e,r,i,n,o,s,f){this.A=0|t,this.B=0|e,this.C=0|r,this.D=0|i,this.E=0|n,this.F=0|o,this.G=0|s,this.H=0|f}process(t,e){for(let r=0;r<16;r++,e+=4)a[r]=t.getUint32(e,!1);for(let t=16;t<64;t++){let e=a[t-15],r=a[t-2],n=(0,i.Ow)(e,7)^(0,i.Ow)(e,18)^e>>>3,o=(0,i.Ow)(r,17)^(0,i.Ow)(r,19)^r>>>10;a[t]=o+a[t-7]+n+a[t-16]|0}let{A:r,B:n,C:o,D:s,E:l,F:d,G:u,H:c}=this;for(let t=0;t<64;t++){var h,b,g,p;let e=c+((0,i.Ow)(l,6)^(0,i.Ow)(l,11)^(0,i.Ow)(l,25))+((h=l)&d^~h&u)+f[t]+a[t]|0,y=((0,i.Ow)(r,2)^(0,i.Ow)(r,13)^(0,i.Ow)(r,22))+((b=r)&(g=n)^b&(p=o)^g&p)|0;c=u,u=d,d=l,l=s+e|0,s=o,o=n,n=r,r=e+y|0}r=r+this.A|0,n=n+this.B|0,o=o+this.C|0,s=s+this.D|0,l=l+this.E|0,d=d+this.F|0,u=u+this.G|0,c=c+this.H|0,this.set(r,n,o,s,l,d,u,c)}roundClean(){(0,i.uH)(a)}destroy(){this.set(0,0,0,0,0,0,0,0),(0,i.uH)(this.buffer)}}s.lD(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0

1{if(f){if(!f.includes(e.length)||e.length>d)throw Error("Field.fromBytes: expected "+f+" bytes, got "+e.length);let t=new Uint8Array(d);t.set(e,r?0:t.length-e.length),e=t}if(e.length!==d)throw Error("Field.fromBytes: expected "+d+" bytes, got "+e.length);let n=r?w(e):x(e);if(a&&(n=D(n,t)),!i&&!u.isValid(n))throw Error("invalid field element: outside of range 0..ORDER");return n},invertBatch:t=>$(u,t),cmov:(t,e,r)=>r?e:t});return Object.freeze(u)}function W(t){if("bigint"!=typeof t)throw Error("field order must be bigint");return Math.ceil(t.toString(2).length/8)}function J(t){let e=W(t);return e+Math.ceil(e/2)}let Q=BigInt(0),tt=BigInt(1);function te(t,e){let r=e.negate();return t?r:e}function tr(t,e){let r=$(t.Fp,e.map(t=>t.Z));return e.map((e,i)=>t.fromAffine(e.toAffine(r[i])))}function ti(t,e){if(!Number.isSafeInteger(t)||t<=0||t>e)throw Error("invalid window size, expected [1.."+e+"], got W="+t)}function tn(t,e){ti(t,e);let r=Math.ceil(e/t)+1,i=2**(t-1),n=2**t;return{windows:r,windowSize:i,mask:R(t),maxNumber:n,shiftBy:BigInt(t)}}function to(t,e,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,f=Number(t&n),a=t>>s;f>i&&(f-=o,a+=tt);let l=e*i,d=l+Math.abs(f)-1,u=0===f;return{nextN:a,offset:d,isZero:u,isNeg:f<0,isNegF:e%2!=0,offsetF:l}}let ts=new WeakMap,tf=new WeakMap;function ta(t){return tf.get(t)||1}function tl(t){if(t!==Q)throw Error("invalid wNAF")}class td{constructor(t,e){this.BASE=t.BASE,this.ZERO=t.ZERO,this.Fn=t.Fn,this.bits=e}_unsafeLadder(t,e,r=this.ZERO){let i=t;for(;e>Q;)e&tt&&(r=r.add(i)),i=i.double(),e>>=tt;return r}precomputeWindow(t,e){let{windows:r,windowSize:i}=tn(e,this.bits),n=[],o=t,s=o;for(let t=0;t<r;t++){s=o,n.push(s);for(let t=1;t<i;t++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(t,e,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=tn(t,this.bits);for(let t=0;t<o.windows;t++){let{nextN:s,offset:f,isZero:a,isNeg:l,isNegF:d,offsetF:u}=to(r,t,o);r=s,a?n=n.add(te(d,e[u])):i=i.add(te(l,e[f]))}return tl(r),{p:i,f:n}}wNAFUnsafe(t,e,r,i=this.ZERO){let n=tn(t,this.bits);for(let t=0;t<n.windows&&r!==Q;t++){let{nextN:o,offset:s,isZero:f,isNeg:a}=to(r,t,n);if(r=o,!f){let t=e[s];i=i.add(a?t.negate():t)}}return tl(r),i}getPrecomputes(t,e,r){let i=ts.get(e);return i||(i=this.precomputeWindow(e,t),1!==t&&("function"==typeof r&&(i=r(i)),ts.set(e,i))),i}cached(t,e,r){let i=ta(t);return this.wNAF(i,this.getPrecomputes(i,t,r),e)}unsafe(t,e,r,i){let n=ta(t);return 1===n?this._unsafeLadder(t,e,i):this.wNAFUnsafe(n,this.getPrecomputes(n,t,r),e,i)}createCache(t,e){ti(e,this.bits),tf.set(t,e),ts.delete(t)}hasCache(t){return 1!==ta(t)}}function tu(t,e,r){if(!e)return X(t,{isLE:r});if(e.ORDER!==t)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return S(e,M.reduce((t,e)=>(t[e]="function",t),{ORDER:"bigint",MASK:"bigint",BYTES:"number",BITS:"number"})),e}let tc=(t,e)=>(t+(t>=0?e:-e)/tx)/e;function th(t){if(!["compact","recovered","der"].includes(t))throw Error('Signature format must be "compact", "recovered", or "der"');return t}function tb(t,e){let r={};for(let i of Object.keys(e))r[i]=void 0===t[i]?e[i]:t[i];return g(r.lowS,"lowS"),g(r.prehash,"prehash"),void 0!==r.format&&th(r.format),r}class tg extends Error{constructor(t=""){super(t)}}let tp={Err:tg,_tlv:{encode:(t,e)=>{let{Err:r}=tp;if(t<0||t>256)throw new r("tlv.encode: wrong tag");if(1&e.length)throw new r("tlv.encode: unpadded data");let i=e.length/2,n=y(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?y(n.length/2|128):"";return y(t)+o+n+e},decode(t,e){let{Err:r}=tp,i=0;if(t<0||t>256)throw new r("tlv.encode: wrong tag");if(e.length<2||e[i++]!==t)throw new r("tlv.decode: wrong tlv");let n=e[i++],o=0;if(128&n){let t=127&n;if(!t)throw new r("tlv.decode(long): indefinite length not supported");if(t>4)throw new r("tlv.decode(long): byte length is too big");let s=e.subarray(i,i+t);if(s.length!==t)throw new r("tlv.decode: length bytes not complete");if(0===s[0])throw new r("tlv.decode(long): zero leftmost byte");for(let t of s)o=o<<8|t;if(i+=t,o<128)throw new r("tlv.decode(long): not minimal encoding")}else o=n;let s=e.subarray(i,i+o);if(s.length!==o)throw new r("tlv.decode: wrong value length");return{v:s,l:e.subarray(i+o)}}},_int:{encode(t){let{Err:e}=tp;if(t<ty)throw new e("integer: negative integers are not allowed");let r=y(t);if(8&Number.parseInt(r[0],16)&&(r="00"+r),1&r.length)throw new e("unexpected DER parsing assertion: unpadded hex");return r},decode(t){let{Err:e}=tp;if(128&t[0])throw new e("invalid signature integer: negative");if(0===t[0]&&!(128&t[1]))throw new e("invalid signature integer: unnecessary leading zero");return x(t)}},toSig(t){let{Err:e,_int:r,_tlv:i}=tp,n=v("signature",t),{v:o,l:s}=i.decode(48,n);if(s.length)throw new e("invalid signature: left bytes after parsing");let{v:f,l:a}=i.decode(2,o),{v:l,l:d}=i.decode(2,a);if(d.length)throw new e("invalid signature: left bytes after parsing");return{r:r.decode(f),s:r.decode(l)}},hexFromSig(t){let{_tlv:e,_int:r}=tp,i=e.encode(2,r.encode(t.r)),n=e.encode(2,r.encode(t.s));return e.encode(48,i+n)}},ty=BigInt(0),tm=BigInt(1),tx=BigInt(2),tw=BigInt(3),tE=BigInt(4);function tB(t,e){let r,{BYTES:i}=t;if("bigint"==typeof e)r=e;else{let n=v("private key",e);try{r=t.fromBytes(n)}catch(t){throw Error(`invalid private key: expected ui8a of size ${i}, got ${typeof e}`)}}if(!t.isValidNot0(r))throw Error("invalid private key: out of range [1..N-1]");return r}function tv(t){return Uint8Array.of(t?2:3)}function tO(t,e){return{secretKey:e.BYTES,publicKey:1+t.BYTES,publicKeyUncompressed:1+2*t.BYTES,publicKeyHasPrefix:!0,signature:2*e.BYTES}}let tI={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),n:BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),h:BigInt(1),a:BigInt(0),b:BigInt(7),Gx:BigInt("0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798"),Gy:BigInt("0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8")},tR={beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),basises:[[BigInt("0x3086d221a7d46bcde86c90e49284eb15"),-BigInt("0xe4437ed6010e88286f547fa90abfe4c3")],[BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),BigInt("0x3086d221a7d46bcde86c90e49284eb15")]]},tS=BigInt(2),tA=X(tI.p,{sqrt:function(t){let e=tI.p,r=BigInt(3),i=BigInt(6),n=BigInt(11),o=BigInt(22),s=BigInt(23),f=BigInt(44),a=BigInt(88),l=t*t*t%e,d=l*l*t%e,u=j(d,r,e)*d%e,c=j(u,r,e)*d%e,h=j(c,tS,e)*l%e,b=j(h,n,e)*h%e,g=j(b,o,e)*b%e,p=j(g,f,e)*g%e,y=j(p,a,e)*p%e,m=j(y,f,e)*g%e,x=j(m,r,e)*d%e,w=j(x,s,e)*b%e,E=j(w,i,e)*l%e,B=j(E,tS,e);if(!tA.eql(tA.sqr(B),t))throw Error("Cannot find square root");return B}}),tq=function(t,e){let r=e=>(function(t){let{CURVE:e,curveOpts:r,hash:n,ecdsaOpts:o}=function(t){let{CURVE:e,curveOpts:r}=function(t){let e={a:t.a,b:t.b,p:t.Fp.ORDER,n:t.n,h:t.h,Gx:t.Gx,Gy:t.Gy},r=t.Fp,i=t.allowedPrivateKeyLengths?Array.from(new Set(t.allowedPrivateKeyLengths.map(t=>Math.ceil(t/2)))):void 0,n={Fp:r,Fn:X(e.n,{BITS:t.nBitLength,allowedLengths:i,modFromBytes:t.wrapPrivateKey}),allowInfinityPoint:t.allowInfinityPoint,endo:t.endo,isTorsionFree:t.isTorsionFree,clearCofactor:t.clearCofactor,fromBytes:t.fromBytes,toBytes:t.toBytes};return{CURVE:e,curveOpts:n}}(t),i={hmac:t.hmac,randomBytes:t.randomBytes,lowS:t.lowS,bits2int:t.bits2int,bits2int_modN:t.bits2int_modN};return{CURVE:e,curveOpts:r,hash:t.hash,ecdsaOpts:i}}(t),s=function(t,e,r={}){(0,i.sd)(e),S(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"});let n=r.randomBytes||i.po,o=r.hmac||((t,...r)=>c(e,t,(0,i.Id)(...r))),{Fp:s,Fn:f}=t,{ORDER:a,BITS:l}=f,{keygen:d,getPublicKey:u,getSharedSecret:h,utils:b,lengths:g}=function(t,e={}){let{Fn:r}=t,n=e.randomBytes||i.po,o=Object.assign(tO(t.Fp,r),{seed:J(r.ORDER)});function s(t){try{return!!tB(r,t)}catch(t){return!1}}function f(t=n(o.seed)){return function(t,e,r=!1){let i=t.length,n=W(e),o=J(e);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=D(r?w(t):x(t),e-N)+N;return r?B(s,n):E(s,n)}(p(t,o.seed,"seed"),r.ORDER)}function a(e,i=!0){return t.BASE.multiply(tB(r,e)).toBytes(i)}function l(e){if("bigint"==typeof e)return!1;if(e instanceof t)return!0;let{secretKey:i,publicKey:n,publicKeyUncompressed:s}=o;if(r.allowedLengths||i===n)return;let f=v("key",e).length;return f===n||f===s}return Object.freeze({getPublicKey:a,getSharedSecret:function(e,i,n=!0){if(!0===l(e))throw Error("first arg must be private key");if(!1===l(i))throw Error("second arg must be public key");let o=tB(r,e);return t.fromHex(i).multiply(o).toBytes(n)},keygen:function(t){let e=f(t);return{secretKey:e,publicKey:a(e)}},Point:t,utils:{isValidSecretKey:s,isValidPublicKey:function(e,r){let{publicKey:i,publicKeyUncompressed:n}=o;try{let o=e.length;if(!0===r&&o!==i||!1===r&&o!==n)return!1;return!!t.fromBytes(e)}catch(t){return!1}},randomSecretKey:f,isValidPrivateKey:s,randomPrivateKey:f,normPrivateKeyToScalar:t=>tB(r,t),precompute:(e=8,r=t.BASE)=>r.precompute(e,!1)},lengths:o})}(t,r),y={prehash:!1,lowS:"boolean"==typeof r.lowS&&r.lowS,format:void 0,extraEntropy:!1},m="compact";function I(t,e){if(!f.isValidNot0(e))throw Error(`invalid signature ${t}: out of range 1..Point.Fn.ORDER`);return e}class A{constructor(t,e,r){this.r=I("r",t),this.s=I("s",e),null!=r&&(this.recovery=r),Object.freeze(this)}static fromBytes(t,e=m){let r;if(!function(t,e){th(e);let r=g.signature;p(t,"compact"===e?r:"recovered"===e?r+1:void 0,`${e} signature`)}(t,e),"der"===e){let{r:e,s:r}=tp.toSig(p(t));return new A(e,r)}"recovered"===e&&(r=t[0],e="compact",t=t.subarray(1));let i=f.BYTES,n=t.subarray(0,i),o=t.subarray(i,2*i);return new A(f.fromBytes(n),f.fromBytes(o),r)}static fromHex(t,e){return this.fromBytes((0,i.aT)(t),e)}addRecoveryBit(t){return new A(this.r,this.s,t)}recoverPublicKey(e){let r=s.ORDER,{r:n,s:o,recovery:l}=this;if(null==l||![0,1,2,3].includes(l))throw Error("recovery id invalid");if(a*tx<r&&l>1)throw Error("recovery id is ambiguous for h>1 curve");let d=2===l||3===l?n+a:n;

1if(!s.isValid(d))throw Error("recovery id 2 or 3 invalid");let u=s.toBytes(d),c=t.fromBytes((0,i.Id)(tv((1&l)==0),u)),h=f.inv(d),b=F(v("msgHash",e)),g=f.create(-b*h),p=f.create(o*h),y=t.BASE.multiplyUnsafe(g).add(c.multiplyUnsafe(p));if(y.is0())throw Error("point at infinify");return y.assertValidity(),y}hasHighS(){return this.s>a>>tm}toBytes(t=m){if(th(t),"der"===t)return(0,i.aT)(tp.hexFromSig(this));let e=f.toBytes(this.r),r=f.toBytes(this.s);if("recovered"===t){if(null==this.recovery)throw Error("recovery bit must be present");return(0,i.Id)(Uint8Array.of(this.recovery),e,r)}return(0,i.Id)(e,r)}toHex(t){return(0,i.My)(this.toBytes(t))}assertValidity(){}static fromCompact(t){return A.fromBytes(v("sig",t),"compact")}static fromDER(t){return A.fromBytes(v("sig",t),"der")}normalizeS(){return this.hasHighS()?new A(this.r,f.neg(this.s),this.recovery):this}toDERRawBytes(){return this.toBytes("der")}toDERHex(){return(0,i.My)(this.toBytes("der"))}toCompactRawBytes(){return this.toBytes("compact")}toCompactHex(){return(0,i.My)(this.toBytes("compact"))}}let q=r.bits2int||function(t){if(t.length>8192)throw Error("input is too large");let e=x(t),r=8*t.length-l;return r>0?e>>BigInt(r):e},F=r.bits2int_modN||function(t){return f.create(q(t))},U=R(l);function Z(t){return!function(t,e,r,i){if(!(O(e)&&O(r)&&O(i))||!(r<=e)||!(e<i))throw Error("expected valid "+t+": "+r+" <= n < "+i+", got "+e)}("num < 2^"+l,t,ty,U),f.toBytes(t)}function C(t,r){return p(t,void 0,"message"),r?p(e(t),void 0,"prehashed message"):t}return Object.freeze({keygen:d,getPublicKey:u,getSharedSecret:h,utils:b,lengths:g,Point:t,sign:function(r,s,l={}){let{seed:d,k2sig:u}=function(e,r,o){if(["recovered","canonical"].some(t=>t in o))throw Error("sign() legacy options not supported");let{lowS:s,prehash:l,extraEntropy:d}=tb(o,y),u=F(e=C(e,l)),c=tB(f,r),h=[Z(c),Z(u)];if(null!=d&&!1!==d){let t=!0===d?n(g.secretKey):d;h.push(v("extraEntropy",t))}return{seed:(0,i.Id)(...h),k2sig:function(e){let r=q(e);if(!f.isValidNot0(r))return;let i=f.inv(r),n=t.BASE.multiply(r).toAffine(),o=f.create(n.x);if(o===ty)return;let l=f.create(i*f.create(u+o*c));if(l===ty)return;let d=2*(n.x!==o)|Number(n.y&tm),h=l;return s&&l>a>>tm&&(h=f.neg(l),d^=1),new A(o,h,d)}}}(r=v("message",r),s,l);return(function(t,e,r){if("number"!=typeof t||t<2)throw Error("hashLen must be a number");if("number"!=typeof e||e<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");let n=t=>new Uint8Array(t),o=t=>Uint8Array.of(t),s=n(t),f=n(t),a=0,l=()=>{s.fill(1),f.fill(0),a=0},d=(...t)=>r(f,s,...t),u=(t=n(0))=>{f=d(o(0),t),s=d(),0!==t.length&&(f=d(o(1),t),s=d())},c=()=>{if(a++>=1e3)throw Error("drbg: tried 1000 values");let t=0,r=[];for(;t<e;){let e=(s=d()).slice();r.push(e),t+=s.length}return(0,i.Id)(...r)};return(t,e)=>{let r;for(l(),u(t);!(r=e(c()));)u();return l(),r}})(e.outputLen,f.BYTES,o)(d,u)},verify:function(e,r,n,o={}){let{lowS:s,prehash:a,format:l}=tb(o,y);if(n=v("publicKey",n),r=C(v("message",r),a),"strict"in o)throw Error("options.strict was renamed to lowS");let d=void 0===l?function(t){let e,r="string"==typeof t||(0,i.aY)(t),n=!r&&null!==t&&"object"==typeof t&&"bigint"==typeof t.r&&"bigint"==typeof t.s;if(!r&&!n)throw Error("invalid signature, expected Uint8Array, hex string or Signature instance");if(n)e=new A(t.r,t.s);else if(r){try{e=A.fromBytes(v("sig",t),"der")}catch(t){if(!(t instanceof tp.Err))throw t}if(!e)try{e=A.fromBytes(v("sig",t),"compact")}catch(t){return!1}}return!!e&&e}(e):A.fromBytes(v("sig",e),l);if(!1===d)return!1;try{let e=t.fromBytes(n);if(s&&d.hasHighS())return!1;let{r:i,s:o}=d,a=F(r),l=f.inv(o),u=f.create(a*l),c=f.create(i*l),h=t.BASE.multiplyUnsafe(u).add(e.multiplyUnsafe(c));if(h.is0())return!1;return f.create(h.x)===i}catch(t){return!1}},recoverPublicKey:function(t,e,r={}){let{prehash:i}=tb(r,y);return e=C(e,i),A.fromBytes(t,"recovered").recoverPublicKey(e).toBytes()},Signature:A,hash:e})}(function(t,e={}){let r=function(t,e,r={},i){if(void 0===i&&(i="edwards"===t),!e||"object"!=typeof e)throw Error(`expected valid ${t} CURVE object`);for(let t of["p","n","h"]){let r=e[t];if(!("bigint"==typeof r&&r>Q))throw Error(`CURVE.${t} must be positive bigint`)}let n=tu(e.p,r.Fp,i),o=tu(e.n,r.Fn,i);for(let r of["Gx","Gy","a","weierstrass"===t?"b":"d"])if(!n.isValid(e[r]))throw Error(`CURVE.${r} must be valid field element of CURVE.Fp`);return{CURVE:e=Object.freeze(Object.assign({},e)),Fp:n,Fn:o}}("weierstrass",t,e),{Fp:n,Fn:o}=r,s=r.CURVE,{h:f,n:a}=s;S(e,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object",wrapPrivateKey:"boolean"});let{endo:l}=e;if(l&&(!n.is0(s.a)||"bigint"!=typeof l.beta||!Array.isArray(l.basises)))throw Error('invalid endo: expected "beta": bigint and "basises": array');let d=tO(n,o);function u(){if(!n.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}let c=e.toBytes||function(t,e,r){let{x:o,y:s}=e.toAffine(),f=n.toBytes(o);if(g(r,"isCompressed"),!r)return(0,i.Id)(Uint8Array.of(4),f,n.toBytes(s));{u();let t=!n.isOdd(s);return(0,i.Id)(tv(t),f)}},h=e.fromBytes||function(t){p(t,void 0,"Point");let{publicKey:e,publicKeyUncompressed:r}=d,i=t.length,o=t[0],s=t.subarray(1);if(i===e&&(2===o||3===o)){let t,e=n.fromBytes(s);if(!n.isValid(e))throw Error("bad point: is not on curve, wrong x");let r=b(e);try{t=n.sqrt(r)}catch(t){throw Error("bad point: is not on curve, sqrt error"+(t instanceof Error?": "+t.message:""))}return u(),(1&o)==1!==n.isOdd(t)&&(t=n.neg(t)),{x:e,y:t}}if(i===r&&4===o){let t=n.BYTES,e=n.fromBytes(s.subarray(0,t)),r=n.fromBytes(s.subarray(t,2*t));if(!y(e,r))throw Error("bad point: is not on curve");return{x:e,y:r}}throw Error(`bad point: got length ${i}, expected compressed=${e} or uncompressed=${r}`)};function b(t){let e=n.sqr(t),r=n.mul(e,t);return n.add(n.add(r,n.mul(t,s.a)),s.b)}function y(t,e){let r=n.sqr(e),i=b(t);return n.eql(r,i)}if(!y(s.Gx,s.Gy))throw Error("bad curve params: generator point");let m=n.mul(n.pow(s.a,tw),tE),x=n.mul(n.sqr(s.b),BigInt(27));if(n.is0(n.add(m,x)))throw Error("bad curve params: a or b");function w(t,e,r=!1){if(!n.isValid(e)||r&&n.is0(e))throw Error(`bad point coordinate ${t}`);return e}function E(t){if(!(t instanceof F))throw Error("ProjectivePoint expected")}function B(t){if(!l||!l.basises)throw Error("no endo");return function(t,e,r){let[[i,n],[o,s]]=e,f=tc(s*t,r),a=tc(-n*t,r),l=t-f*i-a*o,d=-f*n-a*s,u=l<ty,c=d<ty;u&&(l=-l),c&&(d=-d);let h=R(Math.ceil(I(r)/2))+tm;if(l<ty||l>=h||d<ty||d>=h)throw Error("splitScalar (endomorphism): failed, k="+t);return{k1neg:u,k1:l,k2neg:c,k2:d}}(t,l.basises,o.ORDER)}let O=A((t,e)=>{let{X:r,Y:i,Z:o}=t;if(n.eql(o,n.ONE))return{x:r,y:i};let s=t.is0();null==e&&(e=s?n.ONE:n.inv(o));let f=n.mul(r,e),a=n.mul(i,e),l=n.mul(o,e);if(s)return{x:n.ZERO,y:n.ZERO};if(!n.eql(l,n.ONE))throw Error("invZ was invalid");return{x:f,y:a}}),q=A(t=>{if(t.is0()){if(e.allowInfinityPoint&&!n.is0(t.Y))return;throw Error("bad point: ZERO")}let{x:r,y:i}=t.toAffine();if(!n.isValid(r)||!n.isValid(i))throw Error("bad point: x or y not field elements");if(!y(r,i))throw Error("bad point: equation left != right");if(!t.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function N(t,e,r,i,o){return r=new F(n.mul(r.X,t),r.Y,r.Z),e=te(i,e),r=te(o,r),e.add(r)}class F{constructor(t,e,r){this.X=w("x",t),this.Y=w("y",e,!0),this.Z=w("z",r),Object.freeze(this)}static CURVE(){return s}static fromAffine(t){let{x:e,y:r}=t||{};if(!t||!n.isValid(e)||!n.isValid(r))throw Error("invalid affine point");if(t instanceof F)throw Error("projective point not allowed");return n.is0(e)&&n.is0(r)?F.ZERO:new F(e,r,n.ONE)}static fromBytes(t){let e=F.fromAffine(h(p(t,void 0,"point")));return e.assertValidity(),e}static fromHex(t){return F.fromBytes(v("pointHex",t))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(t=8,e=!0){return Z.createCache(this,t),e||this.multiply(tw),this}assertValidity(){q(this)}hasEvenY(){let{y:t}=this.toAffine();if(!n.isOdd)throw Error("Field doesn't support isOdd");return!n.isOdd(t)}equals(t){E(t);let{X:e,Y:r,Z:i}=this,{X:o,Y:s,Z:f}=t,a=n.eql(n.mul(e,f),n.mul(o,i)),l=n.eql(n.mul(r,f),n.mul(s,i));return a&&l}negate(){return new F(this.X,n.neg(this.Y),this.Z)}double(){let{a:t,b:e}=s,r=n.mul(e,tw),{X:i,Y:o,Z:f}=this,a=n.ZERO,l=n.ZERO,d=n.ZERO,u=n.mul(i,i),c=n.mul(o,o),h=n.mul(f,f),b=n.mul(i,o);return b=n.add(b,b),d=n.mul(i,f),d=n.add(d,d),a=n.mul(t,d),l=n.mul(r,h),l=n.add(a,l),a=n.sub(c,l),l=n.add(c,l),l=n.mul(a,l),a=n.mul(b,a),d=n.mul(r,d),h=n.mul(t,h),b=n.sub(u,h),b=n.mul(t,b),b=n.add(b,d),d=n.add(u,u),u=n.add(d,u),u=n.add(u,h),u=n.mul(u,b),l=n.add(l,u),h=n.mul(o,f),h=n.add(h,h),u=n.mul(h,b),a=n.sub(a,u),d=n.mul(h,c),d=n.add(d,d),new F(a,l,d=n.add(d,d))}add(t){E(t);let{X:e,Y:r,Z:i}=this,{X:o,Y:f,Z:a}=t,l=n.ZERO,d=n.ZERO,u=n.ZERO,c=s.a,h=n.mul(s.b,tw),b=n.mul(e,o),g=n.mul(r,f),p=n.mul(i,a),y=n.add(e,r),m=n.add(o,f);y=n.mul(y,m),m=n.add(b,g),y=n.sub(y,m),m=n.add(e,i);let x=n.add(o,a);return m=n.mul(m,x),x=n.add(b,p),m=n.sub(m,x),x=n.add(r,i),l=n.add(f,a),x=n.mul(x,l),l=n.add(g,p),x=n.sub(x,l),u=n.mul(c,m),l=n.mul(h,p),u=n.add(l,u),l=n.sub(g,u),u=n.add(g,u),d=n.mul(l,u),g=n.add(b,b),g=n.add(g,b),p=n.mul(c,p),m=n.mul(h,m),g=n.add(g,p),p=n.sub(b,p),p=n.mul(c,p),m=n.add(m,p),b=n.mul(g,m),d=n.add(d,b),b=n.mul(x,m),l=n.mul(y,l),l=n.sub(l,b),b=n.mul(y,g),u=n.mul(x,u),new F(l,d,u=n.add(u,b))}subtract(t){return this.add(t.negate())}is0(){return this.equals(F.ZERO)}multiply(t){let r,i,{endo:n}=e;if(!o.isValidNot0(t))throw Error("invalid scalar: out of range");let s=t=>Z.cached(this,t,t=>tr(F,t));if(n){let{k1neg:e,k1:o,k2neg:f,k2:a}=B(t),{p:l,f:d}=s(o),{p:u,f:c}=s(a);i=d.add(c),r=N(n.beta,l,u,e,f)}else{let{p:e,f:n}=s(t);r=e,i=n}return tr(F,[r,i])[0]}multiplyUnsafe(t){let{endo:r}=e;if(!o.isValid(t))throw Error("invalid scalar: out of range");if(t===ty||this.is0())return F.ZERO;if(t===tm)return this;if(Z.hasCache(this))return this.multiply(t);if(!r)return Z.unsafe(this,t);{let{k1neg:e,k1:i,k2neg:n,k2:o}=B(t),{p1:s,p2:f}=function(t,e,r,i){let n=e,o=t.ZERO,s=t.ZERO;for(;r>Q||i>Q;)r&tt&&(o=o.add(n)),i&tt&&(s=s.add(n)),n=n.double(),r>>=tt,i>>=tt;return{p1:o,p2:s}}(F,this,i,o);return N(r.beta,s,f,e,n)}}multiplyAndAddUnsafe(t,e,r){let i=this.multiplyUnsafe(e).add(t.multiplyUnsafe(r));return i.is0()?void 0:i}toAffine(t){return O(this,t)}isTorsionFree(){let{isTorsionFree:t}=e;return f===tm||(t?t(F,this):Z.unsafe(this,a).is0())}clearCofactor(){let{clearCofactor:t}=e;return f===tm?this:t?t(F,this):this.multiplyUnsafe(f)}isSmallOrder(){return this.multiplyUnsafe(f).is0()}toBytes(t=!0){return g(t,"isCompressed"),this.assertValidity(),c(F,this,t)}toHex(t=!0){return(0,i.My)(this.toBytes(t))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}get px(){return this.X}get py(){return this.X}get pz(){return this.Z}toRawBytes(t=!0){return this.toBytes(t)}_setWindowSize(t){this.precompute(t)}static normalizeZ(t){return tr(F,t)}static msm(t,e){return function(t,e,r,i){if(!Array.isArray(r))throw Error("array expected");r.forEach((e,r)=>{if(!(e instanceof t))throw Error("invalid point at index "+r)});if(!Array.isArray(i))throw Error("array of scalars expected");i.forEach((t,r)=>{if(!e.isValid(t))throw Error("invalid scalar at index "+r)});let n=r.length,o=i.length;if(n!==o)throw Error("arrays of points and scalars must have equal length");let s=t.ZERO,f=I(BigInt(n)),a=1;f>12?a=f-3:f>4?a=f-2:f>0&&(a=2);let l=R(a),d=Array(Number(l)+1).fill(s),u=Math.floor((e.BITS-1)/a)*a,c=s;for(let t=u;t>=0;t-=a){d.fill(s);for(let e=0;e<o;e++){let n=Number(i[e]>>BigInt(t)&l);d[n]=d[n].add(r[e])}let e=s;for(let t=d.length-1,r=s;t>0;t--)r=r.add(d[t]),e=e.add(r);if(c=c.add(e),0!==t)for(let t=0;t<a;t++)c=c.double()}return c}(F,o,t,e)}static fromPrivateKey(t){return F.BASE.multiply(tB(o,t))}}F.BASE=new F(s.Gx,s.Gy,n.ONE),F.ZERO=new F(n.ZERO,n.ONE,n.ZERO),F.Fp=n,F.Fn=o;let U=o.BITS,Z=new td(F,e.endo?Math.ceil(U/2):U);return F.BASE.precompute(8),F}(e,r),n,o),f=s.Point;return Object.assign({},s,{ProjectivePoint:f,CURVE:Object.assign({},t,G(f.Fn.ORDER,f.Fn.BITS))})})({...t,hash:e});return{...r(e),create:r}}({...tI,Fp:tA,lowS:!0,endo:tR},d)}}]);