https://076.ai/_next/static/chunks/69.9e0f127e39a8fb8b.js

1"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[69],{95069:function(t,e,r){r.d(e,{secp256k1:function(){return tx}});var n={};r.r(n),r.d(n,{Fy:function(){return R},uw:function(){return g},gk:function(){return c},Dd:function(){return H},dQ:function(){return z},ci:function(){return y},bytesToNumberBE:function(){return v},ty:function(){return x},eV:function(){return O},n$:function(){return F},ql:function(){return I},hexToBytes:function(){return B},Z2:function(){return N},_t:function(){return h},H9:function(){return k},tL:function(){return S},S5:function(){return A},uz:function(){return m},FF:function(){return U}});var i=r(25559),o=r(29248),l=r(15232);class f extends l.kb{constructor(t,e){super(),this.finished=!1,this.destroyed=!1,(0,o.z3)(t);let r=(0,l.O0)(e);if(this.iHash=t.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let n=this.blockLen,i=new Uint8Array(n);i.set(r.length>n?t.create().update(r).digest():r);for(let t=0;t<i.length;t++)i[t]^=54;this.iHash.update(i),this.oHash=t.create();for(let t=0;t<i.length;t++)i[t]^=106;this.oHash.update(i),i.fill(0)}update(t){return(0,o.$h)(this),this.iHash.update(t),this}digestInto(t){(0,o.$h)(this),(0,o.gk)(t,this.outputLen),this.finished=!0,this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let t=new Uint8Array(this.oHash.outputLen);return this.digestInto(t),t}_cloneInto(t){t||(t=Object.create(Object.getPrototypeOf(this),{}));let{oHash:e,iHash:r,finished:n,destroyed:i,blockLen:o,outputLen:l}=this;return t.finished=n,t.destroyed=i,t.blockLen=o,t.outputLen=l,t.oHash=e._cloneInto(t.oHash),t.iHash=r._cloneInto(t.iHash),t}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}let s=(t,e,r)=>new f(t,e).update(r).digest();s.create=(t,e)=>new f(t,e);let u=BigInt(0),a=BigInt(1),d=BigInt(2);function h(t){return t instanceof Uint8Array||ArrayBuffer.isView(t)&&"Uint8Array"===t.constructor.name}function c(t){if(!h(t))throw Error("Uint8Array expected")}function g(t,e){if("boolean"!=typeof e)throw Error(t+" boolean expected, got "+e)}let p=Array.from({length:256},(t,e)=>e.toString(16).padStart(2,"0"));function y(t){c(t);let e="";for(let r=0;r<t.length;r++)e+=p[t[r]];return e}function m(t){let e=t.toString(16);return 1&e.length?"0"+e:e}function w(t){if("string"!=typeof t)throw Error("hex string expected, got "+typeof t);return""===t?u:BigInt("0x"+t)}let E={_0:48,_9:57,A:65,F:70,a:97,f:102};function b(t){return t>=E._0&&t<=E._9?t-E._0:t>=E.A&&t<=E.F?t-(E.A-10):t>=E.a&&t<=E.f?t-(E.a-10):void 0}function B(t){if("string"!=typeof t)throw Error("hex string expected, got "+typeof t);let e=t.length,r=e/2;if(e%2)throw Error("hex string expected, got unpadded hex of length "+e);let n=new Uint8Array(r);for(let e=0,i=0;e<r;e++,i+=2){let r=b(t.charCodeAt(i)),o=b(t.charCodeAt(i+1));if(void 0===r||void 0===o)throw Error('hex string expected, got non-hex character "'+(t[i]+t[i+1])+'" at index '+i);n[e]=16*r+o}return n}function v(t){return w(y(t))}function x(t){return c(t),w(y(Uint8Array.from(t).reverse()))}function S(t,e){return B(t.toString(16).padStart(2*e,"0"))}function A(t,e){return S(t,e).reverse()}function I(t,e,r){let n;if("string"==typeof e)try{n=B(e)}catch(e){throw Error(t+" must be hex string or Uint8Array, cause: "+e)}else if(h(e))n=Uint8Array.from(e);else throw Error(t+" must be hex string or Uint8Array");let i=n.length;if("number"==typeof r&&i!==r)throw Error(t+" of length "+r+" expected, got "+i);return n}function O(...t){let e=0;for(let r=0;r<t.length;r++){let n=t[r];c(n),e+=n.length}let r=new Uint8Array(e);for(let e=0,n=0;e<t.length;e++){let i=t[e];r.set(i,n),n+=i.length}return r}let q=t=>"bigint"==typeof t&&u<=t;function N(t,e,r){return q(t)&&q(e)&&q(r)&&e<=t&&t<r}function R(t,e,r,n){if(!N(e,r,n))throw Error("expected valid "+t+": "+r+" <= n < "+n+", got "+e)}function H(t){let e;for(e=0;t>u;t>>=a,e+=1);return e}let z=t=>(d<<BigInt(t-1))-a,L=t=>new Uint8Array(t),P=t=>Uint8Array.from(t);function F(t,e,r){if("number"!=typeof t||t<2)throw Error("hashLen must be a number");if("number"!=typeof e||e<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");let n=L(t),i=L(t),o=0,l=()=>{n.fill(1),i.fill(0),o=0},f=(...t)=>r(i,n,...t),s=(t=L())=>{i=f(P([0]),t),n=f(),0!==t.length&&(i=f(P([1]),t),n=f())},u=()=>{if(o++>=1e3)throw Error("drbg: tried 1000 values");let t=0,r=[];for(;t<e;){let e=(n=f()).slice();r.push(e),t+=n.length}return O(...r)};return(t,e)=>{let r;for(l(),s(t);!(r=e(u()));)s();return l(),r}}let Z={bigint:t=>"bigint"==typeof t,function:t=>"function"==typeof t,boolean:t=>"boolean"==typeof t,string:t=>"string"==typeof t,stringOrUint8Array:t=>"string"==typeof t||h(t),isSafeInteger:t=>Number.isSafeInteger(t),array:t=>Array.isArray(t),field:(t,e)=>e.Fp.isValid(t),hash:t=>"function"==typeof t&&Number.isSafeInteger(t.outputLen)};function U(t,e,r={}){let n=(e,r,n)=>{let i=Z[r];if("function"!=typeof i)throw Error("invalid validator function");let o=t[e];if((!n||void 0!==o)&&!i(o,t))throw Error("param "+String(e)+" is invali

1d. Expected "+r+", got "+o)};for(let[t,r]of Object.entries(e))n(t,r,!1);for(let[t,e]of Object.entries(r))n(t,e,!0);return t}function k(t){let e=new WeakMap;return(r,...n)=>{let i=e.get(r);if(void 0!==i)return i;let o=t(r,...n);return e.set(r,o),o}}let C=BigInt(0),_=BigInt(1),T=BigInt(2),V=BigInt(3),j=BigInt(4),D=BigInt(5),K=BigInt(8);function M(t,e){let r=t%e;return r>=C?r:e+r}function W(t,e,r){let n=t;for(;e-- >C;)n*=n,n%=r;return n}function Y(t,e){if(t===C)throw Error("invert: expected non-zero number");if(e<=C)throw Error("invert: expected positive modulus, got "+e);let r=M(t,e),n=e,i=C,o=_,l=_,f=C;for(;r!==C;){let t=n/r,e=n%r,s=i-l*t,u=o-f*t;n=r,r=e,i=l,o=f,l=s,f=u}if(n!==_)throw Error("invert: does not exist");return M(i,e)}let G=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function $(t,e){let r=void 0!==e?e:t.toString(2).length;return{nBitLength:r,nByteLength:Math.ceil(r/8)}}function Q(t,e,r=!1,n={}){let i;if(t<=C)throw Error("invalid field: expected ORDER > 0, got "+t);let{nBitLength:o,nByteLength:l}=$(t,e);if(l>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");let f=Object.freeze({ORDER:t,isLE:r,BITS:o,BYTES:l,MASK:z(o),ZERO:C,ONE:_,create:e=>M(e,t),isValid:e=>{if("bigint"!=typeof e)throw Error("invalid field element: expected bigint, got "+typeof e);return C<=e&&e<t},is0:t=>t===C,isOdd:t=>(t&_)===_,neg:e=>M(-e,t),eql:(t,e)=>t===e,sqr:e=>M(e*e,t),add:(e,r)=>M(e+r,t),sub:(e,r)=>M(e-r,t),mul:(e,r)=>M(e*r,t),pow:(t,e)=>(function(t,e,r){if(r<C)throw Error("invalid exponent, negatives unsupported");if(r===C)return t.ONE;if(r===_)return e;let n=t.ONE,i=e;for(;r>C;)r&_&&(n=t.mul(n,i)),i=t.sqr(i),r>>=_;return n})(f,t,e),div:(e,r)=>M(e*Y(r,t),t),sqrN:t=>t*t,addN:(t,e)=>t+e,subN:(t,e)=>t-e,mulN:(t,e)=>t*e,inv:e=>Y(e,t),sqrt:n.sqrt||(e=>(i||(i=function(t){if(t%j===V){let e=(t+_)/j;return function(t,r){let n=t.pow(r,e);if(!t.eql(t.sqr(n),r))throw Error("Cannot find square root");return n}}if(t%K===D){let e=(t-D)/K;return function(t,r){let n=t.mul(r,T),i=t.pow(n,e),o=t.mul(r,i),l=t.mul(t.mul(o,T),i),f=t.mul(o,t.sub(l,t.ONE));if(!t.eql(t.sqr(f),r))throw Error("Cannot find square root");return f}}return function(t){let e,r,n;let i=(t-_)/T;for(e=t-_,r=0;e%T===C;e/=T,r++);for(n=T;n<t&&function(t,e,r){if(e<C)throw Error("invalid exponent, negatives unsupported");if(r<=C)throw Error("invalid modulus");if(r===_)return C;let n=_;for(;e>C;)e&_&&(n=n*t%r),t=t*t%r,e>>=_;return n}(n,i,t)!==t-_;n++)if(n>1e3)throw Error("Cannot find square root: likely non-prime P");if(1===r){let e=(t+_)/j;return function(t,r){let n=t.pow(r,e);if(!t.eql(t.sqr(n),r))throw Error("Cannot find square root");return n}}let o=(e+_)/T;return function(t,l){if(t.pow(l,i)===t.neg(t.ONE))throw Error("Cannot find square root");let f=r,s=t.pow(t.mul(t.ONE,n),e),u=t.pow(l,o),a=t.pow(l,e);for(;!t.eql(a,t.ONE);){if(t.eql(a,t.ZERO))return t.ZERO;let e=1;for(let r=t.sqr(a);e<f&&!t.eql(r,t.ONE);e++)r=t.sqr(r);let r=t.pow(s,_<<BigInt(f-e-1));s=t.sqr(r),u=t.mul(u,r),a=t.mul(a,s),f=e}return u}}(t)}(t)),i(f,e))),invertBatch:t=>(function(t,e){let r=Array(e.length),n=e.reduce((e,n,i)=>t.is0(n)?e:(r[i]=e,t.mul(e,n)),t.ONE),i=t.inv(n);return e.reduceRight((e,n,i)=>t.is0(n)?e:(r[i]=t.mul(e,r[i]),t.mul(e,n)),i),r})(f,t),cmov:(t,e,r)=>r?e:t,toBytes:t=>r?A(t,l):S(t,l),fromBytes:t=>{if(t.length!==l)throw Error("Field.fromBytes: expected "+l+" bytes, got "+t.length);return r?x(t):v(t)}});return Object.freeze(f)}function J(t){if("bigint"!=typeof t)throw Error("field order must be bigint");return Math.ceil(t.toString(2).length/8)}function X(t){let e=J(t);return e+Math.ceil(e/2)}let tt=BigInt(0),te=BigInt(1);function tr(t,e){let r=e.negate();return t?r:e}function tn(t,e){if(!Number.isSafeInteger(t)||t<=0||t>e)throw Error("invalid window size, expected [1.."+e+"], got W="+t)}function ti(t,e){return tn(t,e),{windows:Math.ceil(e/t)+1,windowSize:2**(t-1)}}let to=new WeakMap,tl=new WeakMap;function tf(t){return tl.get(t)||1}function ts(t){return U(t.Fp,G.reduce((t,e)=>(t[e]="function",t),{ORDER:"bigint",MASK:"bigint",BYTES:"isSafeInteger",BITS:"isSafeInteger"})),U(t,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...$(t.n,t.nBitLength),...t,p:t.Fp.ORDER})}function tu(t){void 0!==t.lowS&&g("lowS",t.lowS),void 0!==t.prehash&&g("prehash",t.prehash)}let{bytesToNumberBE:ta,hexToBytes:td}=n;

1class th extends Error{constructor(t=""){super(t)}}let tc={Err:th,_tlv:{encode:(t,e)=>{let{Err:r}=tc;if(t<0||t>256)throw new r("tlv.encode: wrong tag");if(1&e.length)throw new r("tlv.encode: unpadded data");let n=e.length/2,i=m(n);if(i.length/2&128)throw new r("tlv.encode: long form length too big");let o=n>127?m(i.length/2|128):"";return m(t)+o+i+e},decode(t,e){let{Err:r}=tc,n=0;if(t<0||t>256)throw new r("tlv.encode: wrong tag");if(e.length<2||e[n++]!==t)throw new r("tlv.decode: wrong tlv");let i=e[n++],o=0;if(128&i){let t=127&i;if(!t)throw new r("tlv.decode(long): indefinite length not supported");if(t>4)throw new r("tlv.decode(long): byte length is too big");let l=e.subarray(n,n+t);if(l.length!==t)throw new r("tlv.decode: length bytes not complete");if(0===l[0])throw new r("tlv.decode(long): zero leftmost byte");for(let t of l)o=o<<8|t;if(n+=t,o<128)throw new r("tlv.decode(long): not minimal encoding")}else o=i;let l=e.subarray(n,n+o);if(l.length!==o)throw new r("tlv.decode: wrong value length");return{v:l,l:e.subarray(n+o)}}},_int:{encode(t){let{Err:e}=tc;if(t<tg)throw new e("integer: negative integers are not allowed");let r=m(t);if(8&Number.parseInt(r[0],16)&&(r="00"+r),1&r.length)throw new e("unexpected DER parsing assertion: unpadded hex");return r},decode(t){let{Err:e}=tc;if(128&t[0])throw new e("invalid signature integer: negative");if(0===t[0]&&!(128&t[1]))throw new e("invalid signature integer: unnecessary leading zero");return ta(t)}},toSig(t){let{Err:e,_int:r,_tlv:n}=tc,i="string"==typeof t?td(t):t;c(i);let{v:o,l:l}=n.decode(48,i);if(l.length)throw new e("invalid signature: left bytes after parsing");let{v:f,l:s}=n.decode(2,o),{v:u,l:a}=n.decode(2,s);if(a.length)throw new e("invalid signature: left bytes after parsing");return{r:r.decode(f),s:r.decode(u)}},hexFromSig(t){let{_tlv:e,_int:r}=tc,n=e.encode(2,r.encode(t.r)),i=e.encode(2,r.encode(t.s));return e.encode(48,n+i)}},tg=BigInt(0),tp=BigInt(1),ty=(BigInt(2),BigInt(3));BigInt(4);let tm=BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),tw=BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),tE=BigInt(1),tb=BigInt(2),tB=(t,e)=>(t+e/tb)/e,tv=Q(tm,void 0,void 0,{sqrt:function(t){let e=BigInt(3),r=BigInt(6),n=BigInt(11),i=BigInt(22),o=BigInt(23),l=BigInt(44),f=BigInt(88),s=t*t*t%tm,u=s*s*t%tm,a=W(u,e,tm)*u%tm,d=W(a,e,tm)*u%tm,h=W(d,tb,tm)*s%tm,c=W(h,n,tm)*h%tm,g=W(c,i,tm)*c%tm,p=W(g,l,tm)*g%tm,y=W(p,f,tm)*p%tm,m=W(y,l,tm)*g%tm,w=W(m,e,tm)*u%tm,E=W(w,o,tm)*c%tm,b=W(E,r,tm)*s%tm,B=W(b,tb,tm);if(!tv.eql(tv.sqr(B),t))throw Error("Cannot find square root");return B}}),tx=function(t,e){let r=e=>(function(t){let e=function(t){let e=ts(t);return U(e,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...e})}(t),{Fp:r,n:n}=e,i=r.BYTES+1,o=2*r.BYTES+1;function l(t){return M(t,n)}let{ProjectivePoint:f,normPrivateKeyToScalar:s,weierstrassEquation:u,isWithinCurveOrder:a}=function(t){var e;let r=function(t){let e=ts(t);U(e,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});let{endo:r,Fp:n,a:i}=e;if(r){if(!n.eql(i,n.ZERO))throw Error("invalid endomorphism, can only be defined for Koblitz curves that have a=0");if("object"!=typeof r||"bigint"!=typeof r.beta||"function"!=typeof r.splitScalar)throw Error("invalid endomorphism, expected beta: bigint and splitScalar: function")}return Object.freeze({...e})}(t),{Fp:n}=r,i=Q(r.n,r.nBitLength),o=r.toBytes||((t,e,r)=>{let i=e.toAffine();return O(Uint8Array.from([4]),n.toBytes(i.x),n.toBytes(i.y))}),l=r.fromBytes||(t=>{let e=t.subarray(1);return{x:n.fromBytes(e.subarray(0,n.BYTES)),y:n.fromBytes(e.subarray(n.BYTES,2*n.BYTES))}});function f(t){let{a:e,b:i}=r,o=n.sqr(t),l=n.mul(o,t);return n.add(n.add(l,n.mul(t,e)),i)}if(!n.eql(n.sqr(r.Gy),f(r.Gx)))throw Error("bad generator point: equation left != right");function s(t){let e;let{allowedPrivateKeyLengths:n,nByteLength:i,wrapPrivateKey:o,n:l}=r;if(n&&"bigint"!=typeof t){if(h(t)&&(t=y(t)),"string"!=typeof t||!n.includes(t.length))throw Error("invalid private key");t=t.padStart(2*i,"0")}try{e="bigint"==typeof t?t:v(I("private key",t,i))}catch(e){throw Error("invalid private key, expected hex or "+i+" bytes, got "+typeof t)}return o&&(e=M(e,l)),R("private key",e,tp,l),e}function u(t){if(!(t instanceof c))throw Error("ProjectivePoint expected")}let a=k((t,e)=>{let{px:r,py:i,pz:o}=t;if(n.eql(o,n.ONE))return{x:r,y:i};let l=t.is0();null==e&&(e=l?n.ONE:n.inv(o));let f=n.mul(r,e),s=n.mul(i,e),u=n.mul(o,e);if(l)return{x:n.ZERO,y:n.ZERO};

1if(!n.eql(u,n.ONE))throw Error("invZ was invalid");return{x:f,y:s}}),d=k(t=>{if(t.is0()){if(r.allowInfinityPoint&&!n.is0(t.py))return;throw Error("bad point: ZERO")}let{x:e,y:i}=t.toAffine();if(!n.isValid(e)||!n.isValid(i))throw Error("bad point: x or y not FE");let o=n.sqr(i),l=f(e);if(!n.eql(o,l))throw Error("bad point: equation left != right");if(!t.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});class c{constructor(t,e,r){if(this.px=t,this.py=e,this.pz=r,null==t||!n.isValid(t))throw Error("x required");if(null==e||!n.isValid(e))throw Error("y required");if(null==r||!n.isValid(r))throw Error("z required");Object.freeze(this)}static fromAffine(t){let{x:e,y:r}=t||{};if(!t||!n.isValid(e)||!n.isValid(r))throw Error("invalid affine point");if(t instanceof c)throw Error("projective point not allowed");let i=t=>n.eql(t,n.ZERO);return i(e)&&i(r)?c.ZERO:new c(e,r,n.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(t){let e=n.invertBatch(t.map(t=>t.pz));return t.map((t,r)=>t.toAffine(e[r])).map(c.fromAffine)}static fromHex(t){let e=c.fromAffine(l(I("pointHex",t)));return e.assertValidity(),e}static fromPrivateKey(t){return c.BASE.multiply(s(t))}static msm(t,e){return function(t,e,r,n){if(!function(t,e){if(!Array.isArray(t))throw Error("array expected");t.forEach((t,r)=>{if(!(t instanceof e))throw Error("invalid point at index "+r)})}(r,t),!function(t,e){if(!Array.isArray(t))throw Error("array of scalars expected");t.forEach((t,r)=>{if(!e.isValid(t))throw Error("invalid scalar at index "+r)})}(n,e),r.length!==n.length)throw Error("arrays of points and scalars must have equal length");let i=t.ZERO,o=H(BigInt(r.length)),l=o>12?o-3:o>4?o-2:o?2:1,f=(1<<l)-1,s=Array(f+1).fill(i),u=Math.floor((e.BITS-1)/l)*l,a=i;for(let t=u;t>=0;t-=l){s.fill(i);for(let e=0;e<n.length;e++){let i=Number(n[e]>>BigInt(t)&BigInt(f));s[i]=s[i].add(r[e])}let e=i;for(let t=s.length-1,r=i;t>0;t--)r=r.add(s[t]),e=e.add(r);if(a=a.add(e),0!==t)for(let t=0;t<l;t++)a=a.double()}return a}(c,i,t,e)}_setWindowSize(t){m.setWindowSize(this,t)}assertValidity(){d(this)}hasEvenY(){let{y:t}=this.toAffine();if(n.isOdd)return!n.isOdd(t);throw Error("Field doesn't support isOdd")}equals(t){u(t);let{px:e,py:r,pz:i}=this,{px:o,py:l,pz:f}=t,s=n.eql(n.mul(e,f),n.mul(o,i)),a=n.eql(n.mul(r,f),n.mul(l,i));return s&&a}negate(){return new c(this.px,n.neg(this.py),this.pz)}double(){let{a:t,b:e}=r,i=n.mul(e,ty),{px:o,py:l,pz:f}=this,s=n.ZERO,u=n.ZERO,a=n.ZERO,d=n.mul(o,o),h=n.mul(l,l),g=n.mul(f,f),p=n.mul(o,l);return p=n.add(p,p),a=n.mul(o,f),a=n.add(a,a),s=n.mul(t,a),u=n.mul(i,g),u=n.add(s,u),s=n.sub(h,u),u=n.add(h,u),u=n.mul(s,u),s=n.mul(p,s),a=n.mul(i,a),g=n.mul(t,g),p=n.sub(d,g),p=n.mul(t,p),p=n.add(p,a),a=n.add(d,d),d=n.add(a,d),d=n.add(d,g),d=n.mul(d,p),u=n.add(u,d),g=n.mul(l,f),g=n.add(g,g),d=n.mul(g,p),s=n.sub(s,d),a=n.mul(g,h),a=n.add(a,a),new c(s,u,a=n.add(a,a))}add(t){u(t);let{px:e,py:i,pz:o}=this,{px:l,py:f,pz:s}=t,a=n.ZERO,d=n.ZERO,h=n.ZERO,g=r.a,p=n.mul(r.b,ty),y=n.mul(e,l),m=n.mul(i,f),w=n.mul(o,s),E=n.add(e,i),b=n.add(l,f);E=n.mul(E,b),b=n.add(y,m),E=n.sub(E,b),b=n.add(e,o);let B=n.add(l,s);return b=n.mul(b,B),B=n.add(y,w),b=n.sub(b,B),B=n.add(i,o),a=n.add(f,s),B=n.mul(B,a),a=n.add(m,w),B=n.sub(B,a),h=n.mul(g,b),a=n.mul(p,w),h=n.add(a,h),a=n.sub(m,h),h=n.add(m,h),d=n.mul(a,h),m=n.add(y,y),m=n.add(m,y),w=n.mul(g,w),b=n.mul(p,b),m=n.add(m,w),w=n.sub(y,w),w=n.mul(g,w),b=n.add(b,w),y=n.mul(m,b),d=n.add(d,y),y=n.mul(B,b),a=n.mul(E,a),a=n.sub(a,y),y=n.mul(E,m),h=n.mul(B,h),new c(a,d,h=n.add(h,y))}subtract(t){return this.add(t.negate())}is0(){return this.equals(c.ZERO)}wNAF(t){return m.wNAFCached(this,t,c.normalizeZ)}multiplyUnsafe(t){let{endo:e,n:i}=r;R("scalar",t,tg,i);let o=c.ZERO;if(t===tg)return o;if(this.is0()||t===tp)return this;if(!e||m.hasPrecomputes(this))return m.wNAFCachedUnsafe(this,t,c.normalizeZ);let{k1neg:l,k1:f,k2neg:s,k2:u}=e.splitScalar(t),a=o,d=o,h=this;for(;f>tg||u>tg;)f&tp&&(a=a.add(h)),u&tp&&(d=d.add(h)),h=h.double(),f>>=tp,u>>=tp;return l&&(a=a.negate()),s&&(d=d.negate()),d=new c(n.mul(d.px,e.beta),d.py,d.pz),a.add(d)}multiply(t){let e,i;let{endo:o,n:l}=r;

1if(R("scalar",t,tp,l),o){let{k1neg:r,k1:l,k2neg:f,k2:s}=o.splitScalar(t),{p:u,f:a}=this.wNAF(l),{p:d,f:h}=this.wNAF(s);u=m.constTimeNegate(r,u),d=m.constTimeNegate(f,d),d=new c(n.mul(d.px,o.beta),d.py,d.pz),e=u.add(d),i=a.add(h)}else{let{p:r,f:n}=this.wNAF(t);e=r,i=n}return c.normalizeZ([e,i])[0]}multiplyAndAddUnsafe(t,e,r){let n=c.BASE,i=(t,e)=>e!==tg&&e!==tp&&t.equals(n)?t.multiply(e):t.multiplyUnsafe(e),o=i(this,e).add(i(t,r));return o.is0()?void 0:o}toAffine(t){return a(this,t)}isTorsionFree(){let{h:t,isTorsionFree:e}=r;if(t===tp)return!0;if(e)return e(c,this);throw Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){let{h:t,clearCofactor:e}=r;return t===tp?this:e?e(c,this):this.multiplyUnsafe(r.h)}toRawBytes(t=!0){return g("isCompressed",t),this.assertValidity(),o(c,this,t)}toHex(t=!0){return g("isCompressed",t),y(this.toRawBytes(t))}}c.BASE=new c(r.Gx,r.Gy,n.ONE),c.ZERO=new c(n.ZERO,n.ONE,n.ZERO);let p=r.nBitLength,m=(e=r.endo?Math.ceil(p/2):p,{constTimeNegate:tr,hasPrecomputes:t=>1!==tf(t),unsafeLadder(t,e,r=c.ZERO){let n=t;for(;e>tt;)e&te&&(r=r.add(n)),n=n.double(),e>>=te;return r},precomputeWindow(t,r){let{windows:n,windowSize:i}=ti(r,e),o=[],l=t,f=l;for(let t=0;t<n;t++){f=l,o.push(f);for(let t=1;t<i;t++)f=f.add(l),o.push(f);l=f.double()}return o},wNAF(t,r,n){let{windows:i,windowSize:o}=ti(t,e),l=c.ZERO,f=c.BASE,s=BigInt(2**t-1),u=2**t,a=BigInt(t);for(let t=0;t<i;t++){let e=t*o,i=Number(n&s);n>>=a,i>o&&(i-=u,n+=te);let d=e+Math.abs(i)-1,h=t%2!=0,c=i<0;0===i?f=f.add(tr(h,r[e])):l=l.add(tr(c,r[d]))}return{p:l,f}},wNAFUnsafe(t,r,n,i=c.ZERO){let{windows:o,windowSize:l}=ti(t,e),f=BigInt(2**t-1),s=2**t,u=BigInt(t);for(let t=0;t<o;t++){let e=t*l;if(n===tt)break;let o=Number(n&f);if(n>>=u,o>l&&(o-=s,n+=te),0===o)continue;let a=r[e+Math.abs(o)-1];o<0&&(a=a.negate()),i=i.add(a)}return i},getPrecomputes(t,e,r){let n=to.get(e);return n||(n=this.precomputeWindow(e,t),1!==t&&to.set(e,r(n))),n},wNAFCached(t,e,r){let n=tf(t);return this.wNAF(n,this.getPrecomputes(n,t,r),e)},wNAFCachedUnsafe(t,e,r,n){let i=tf(t);return 1===i?this.unsafeLadder(t,e,n):this.wNAFUnsafe(i,this.getPrecomputes(i,t,r),e,n)},setWindowSize(t,r){tn(r,e),tl.set(t,r),to.delete(t)}});return{CURVE:r,ProjectivePoint:c,normPrivateKeyToScalar:s,weierstrassEquation:f,isWithinCurveOrder:function(t){return N(t,tp,r.n)}}}({...e,toBytes(t,e,n){let i=e.toAffine(),o=r.toBytes(i.x),l=O;return(g("isCompressed",n),n)?l(Uint8Array.from([e.hasEvenY()?2:3]),o):l(Uint8Array.from([4]),o,r.toBytes(i.y))},fromBytes(t){let e=t.length,n=t[0],l=t.subarray(1);if(e===i&&(2===n||3===n)){let t;let e=v(l);if(!N(e,tp,r.ORDER))throw Error("Point is not on curve");let i=u(e);try{t=r.sqrt(i)}catch(t){throw Error("Point is not on curve"+(t instanceof Error?": "+t.message:""))}return(1&n)==1!=((t&tp)===tp)&&(t=r.neg(t)),{x:e,y:t}}if(e===o&&4===n)return{x:r.fromBytes(l.subarray(0,r.BYTES)),y:r.fromBytes(l.subarray(r.BYTES,2*r.BYTES))};throw Error("invalid Point, expected length of "+i+", or uncompressed "+o+", got "+e)}}),d=t=>y(S(t,e.nByteLength)),c=(t,e,r)=>v(t.slice(e,r));class p{constructor(t,e,r){this.r=t,this.s=e,this.recovery=r,this.assertValidity()}static fromCompact(t){let r=e.nByteLength;return new p(c(t=I("compactSignature",t,2*r),0,r),c(t,r,2*r))}static fromDER(t){let{r:e,s:r}=tc.toSig(I("DER",t));return new p(e,r)}assertValidity(){R("r",this.r,tp,n),R("s",this.s,tp,n)}addRecoveryBit(t){return new p(this.r,this.s,t)}recoverPublicKey(t){let{r:i,s:o,recovery:s}=this,u=E(I("msgHash",t));if(null==s||![0,1,2,3].includes(s))throw Error("recovery id invalid");let a=2===s||3===s?i+e.n:i;if(a>=r.ORDER)throw Error("recovery id 2 or 3 invalid");let h=(1&s)==0?"02":"03",c=f.fromHex(h+d(a)),g=Y(a,n),p=l(-u*g),y=l(o*g),m=f.BASE.multiplyAndAddUnsafe(c,p,y);if(!m)throw Error("point at infinify");return m.assertValidity(),m}hasHighS(){return this.s>n>>tp}normalizeS(){return this.hasHighS()?new p(this.r,l(-this.s),this.recovery):this}toDERRawBytes(){return B(this.toDERHex())}toDERHex(){return tc.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return B(this.toCompactHex())}toCompactHex(){return d(this.r)+d(this.s)}}function m(t){let e=h(t),r="string"==typeof t,n=(e||r)&&t.length;return e?n===i||n===o:r?n===2*i||n===2*o:t instanceof f}

1let w=e.bits2int||function(t){if(t.length>8192)throw Error("input is too large");let r=v(t),n=8*t.length-e.nBitLength;return n>0?r>>BigInt(n):r},E=e.bits2int_modN||function(t){return l(w(t))},b=z(e.nBitLength);function q(t){return R("num < 2^"+e.nBitLength,t,tg,b),S(t,e.nByteLength)}let L={lowS:e.lowS,prehash:!1},P={lowS:e.lowS,prehash:!1};return f.BASE._setWindowSize(8),{CURVE:e,getPublicKey:function(t,e=!0){return f.fromPrivateKey(t).toRawBytes(e)},getSharedSecret:function(t,e,r=!0){if(m(t))throw Error("first arg must be private key");if(!m(e))throw Error("second arg must be public key");return f.fromHex(e).multiply(s(t)).toRawBytes(r)},sign:function(t,i,o=L){let{seed:u,k2sig:d}=function(t,i,o=L){if(["recovered","canonical"].some(t=>t in o))throw Error("sign() legacy options not supported");let{hash:u,randomBytes:d}=e,{lowS:h,prehash:c,extraEntropy:g}=o;null==h&&(h=!0),t=I("msgHash",t),tu(o),c&&(t=I("prehashed msgHash",u(t)));let y=E(t),m=s(i),b=[q(m),q(y)];if(null!=g&&!1!==g){let t=!0===g?d(r.BYTES):g;b.push(I("extraEntropy",t))}return{seed:O(...b),k2sig:function(t){let e=w(t);if(!a(e))return;let r=Y(e,n),i=f.BASE.multiply(e).toAffine(),o=l(i.x);if(o===tg)return;let s=l(r*l(y+o*m));if(s===tg)return;let u=(i.x===o?0:2)|Number(i.y&tp),d=s;if(h&&s>n>>tp)d=s>n>>tp?l(-s):s,u^=1;return new p(o,d,u)}}}(t,i,o);return F(e.hash.outputLen,e.nByteLength,e.hmac)(u,d)},verify:function(t,r,i,o=P){let s,u;r=I("msgHash",r),i=I("publicKey",i);let{lowS:a,prehash:d,format:c}=o;if(tu(o),"strict"in o)throw Error("options.strict was renamed to lowS");if(void 0!==c&&"compact"!==c&&"der"!==c)throw Error("format must be compact or der");let g="string"==typeof t||h(t),y=!g&&!c&&"object"==typeof t&&null!==t&&"bigint"==typeof t.r&&"bigint"==typeof t.s;if(!g&&!y)throw Error("invalid signature, expected Uint8Array, hex string or Signature instance");try{if(y&&(u=new p(t.r,t.s)),g){try{"compact"!==c&&(u=p.fromDER(t))}catch(t){if(!(t instanceof tc.Err))throw t}u||"der"===c||(u=p.fromCompact(t))}s=f.fromHex(i)}catch(t){return!1}if(!u||a&&u.hasHighS())return!1;d&&(r=e.hash(r));let{r:m,s:w}=u,b=E(r),B=Y(w,n),v=l(b*B),x=l(m*B),S=f.BASE.multiplyAndAddUnsafe(s,v,x)?.toAffine();return!!S&&l(S.x)===m},ProjectivePoint:f,Signature:p,utils:{isValidPrivateKey(t){try{return s(t),!0}catch(t){return!1}},normPrivateKeyToScalar:s,randomPrivateKey:()=>{let t=X(e.n);return function(t,e,r=!1){let n=t.length,i=J(e),o=X(e);if(n<16||n<o||n>1024)throw Error("expected "+o+"-1024 bytes of input, got "+n);let l=M(r?x(t):v(t),e-_)+_;return r?A(l,i):S(l,i)}(e.randomBytes(t),e.n)},precompute:(t=8,e=f.BASE)=>(e._setWindowSize(t),e.multiply(BigInt(3)),e)}}})({...t,hash:e,hmac:(t,...r)=>s(e,t,(0,l.eV)(...r)),randomBytes:l.O6});return{...r(e),create:r}}({a:BigInt(0),b:BigInt(7),Fp:tv,n:tw,Gx:BigInt("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:BigInt("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:BigInt(1),lowS:!0,endo:{beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:t=>{let e=BigInt("0x3086d221a7d46bcde86c90e49284eb15"),r=-tE*BigInt("0xe4437ed6010e88286f547fa90abfe4c3"),n=BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),i=BigInt("0x100000000000000000000000000000000"),o=tB(e*t,tw),l=tB(-r*t,tw),f=M(t-o*e-l*n,tw),s=M(-o*r-l*e,tw),u=f>i,a=s>i;if(u&&(f=tw-f),a&&(s=tw-s),f>i||s>i)throw Error("splitScalar: Endomorphism failed, k="+t);return{k1neg:u,k1:f,k2neg:a,k2:s}}}},i.JQ);BigInt(0),tx.ProjectivePoint}}]);