https://sideshift.ai/_next/static/chunks/706.867c3d104df2c497.js

1}wNAFUnsafe(t,e,r,n=this.ZERO){let i=f(t,this.bits);for(let t=0;t<i.windows&&r!==o;t++){let{nextN:o,offset:s,isZero:l,isNeg:u}=d(r,t,i);if(r=o,!l){let t=e[s];n=n.add(u?t.negate():t)}}return y(r),n}getPrecomputes(t,e,r){let n=c.get(e);return n||(n=this.precomputeWindow(e,t),1!==t&&("function"==typeof r&&(n=r(n)),c.set(e,n))),n}cached(t,e,r){let n=m(t);return this.wNAF(n,this.getPrecomputes(n,t,r),e)}unsafe(t,e,r,n){let i=m(t);return 1===i?this._unsafeLadder(t,e,n):this.wNAFUnsafe(i,this.getPrecomputes(i,t,r),e,n)}createCache(t,e){a(e,this.bits),h.set(t,e),c.delete(t)}hasCache(t){return 1!==m(t)}}function p(t,e,r,n){let i=e,l=t.ZERO,u=t.ZERO;for(;r>o||n>o;)r&s&&(l=l.add(i)),n&s&&(u=u.add(i)),i=i.double(),r>>=s,n>>=s;return{p1:l,p2:u}}function w(t,e,r,i){if(!Array.isArray(r))throw Error("array expected");r.forEach((e,r)=>{if(!(e instanceof t))throw Error("invalid point at index "+r)});if(!Array.isArray(i))throw Error("array of scalars expected");i.forEach((t,r)=>{if(!e.isValid(t))throw Error("invalid scalar at index "+r)});let o=r.length,s=i.length;if(o!==s)throw Error("arrays of points and scalars must have equal length");let l=t.ZERO,u=(0,n.dJ)(BigInt(o)),a=1;u>12?a=u-3:u>4?a=u-2:u>0&&(a=2);let f=(0,n.OG)(a),d=Array(Number(f)+1).fill(l),c=Math.floor((e.BITS-1)/a)*a,h=l;for(let t=c;t>=0;t-=a){d.fill(l);for(let e=0;e<s;e++){let n=Number(i[e]>>BigInt(t)&f);d[n]=d[n].add(r[e])}let e=l;for(let t=d.length-1,r=l;t>0;t--)r=r.add(d[t]),e=e.add(r);if(h=h.add(e),0!==t)for(let t=0;t<a;t++)h=h.double()}return h}function E(t,e,r){if(!e)return(0,i.D0)(t,{isLE:r});if(e.ORDER!==t)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return(0,i.jr)(e),e}function b(t,e,r={},n){if(void 0===n&&(n="edwards"===t),!e||"object"!=typeof e)throw Error(`expected valid ${t} CURVE object`);for(let t of["p","n","h"]){let r=e[t];if(!("bigint"==typeof r&&r>o))throw Error(`CURVE.${t} must be positive bigint`)}let i=E(e.p,r.Fp,n),s=E(e.n,r.Fn,n);for(let r of["Gx","Gy","a","weierstrass"===t?"b":"d"])if(!i.isValid(e[r]))throw Error(`CURVE.${r} must be valid field element of CURVE.Fp`);return{CURVE:e=Object.freeze(Object.assign({},e)),Fp:i,Fn:s}}},70706:(t,e,r)=>{r.d(e,{s:()=>v});var n=r(22920),i=r(62731),o=r(1138),s=r(28803),l=r(72414);let u=(t,e)=>(t+(t>=0?e:-e)/y)/e;function a(t){if(!["compact","recovered","der"].includes(t))throw Error('Signature format must be "compact", "recovered", or "der"');return t}function f(t,e){let r={};for(let n of Object.keys(e))r[n]=void 0===t[n]?e[n]:t[n];return(0,o.d6)(r.lowS,"lowS"),(0,o.d6)(r.prehash,"prehash"),void 0!==r.format&&a(r.format),r}class d extends Error{constructor(t=""){super(t)}}let c={Err:d,_tlv:{encode:(t,e)=>{let{Err:r}=c;if(t<0||t>256)throw new r("tlv.encode: wrong tag");if(1&e.length)throw new r("tlv.encode: unpadded data");let n=e.length/2,i=(0,o.zW)(n);if(i.length/2&128)throw new r("tlv.encode: long form length too big");let s=n>127?(0,o.zW)(i.length/2|128):"";return(0,o.zW)(t)+s+i+e},decode(t,e){let{Err:r}=c,n=0;if(t<0||t>256)throw new r("tlv.encode: wrong tag");if(e.length<2||e[n++]!==t)throw new r("tlv.decode: wrong tlv");let i=e[n++],o=0;if(128&i){let t=127&i;if(!t)throw new r("tlv.decode(long): indefinite length not supported");if(t>4)throw new r("tlv.decode(long): byte length is too big");let s=e.subarray(n,n+t);if(s.length!==t)throw new r("tlv.decode: length bytes not complete");if(0===s[0])throw new r("tlv.decode(long): zero leftmost byte");for(let t of s)o=o<<8|t;if(n+=t,o<128)throw new r("tlv.decode(long): not minimal encoding")}else o=i;let s=e.subarray(n,n+o);if(s.length!==o)throw new r("tlv.decode: wrong value length");return{v:s,l:e.subarray(n+o)}}},_int:{encode(t){let{Err:e}=c;if(t<h)throw new e("integer: negative integers are not allowed");let r=(0,o.zW)(t);if(8&Number.parseInt(r[0],16)&&(r="00"+r),1&r.length)throw new e("unexpected DER parsing assertion: unpadded hex");return r},decode(t){let{Err:e}=c;if(128&t[0])throw new e("invalid signature integer: negative");if(0===t[0]&&!(128&t[1]))throw new e("invalid signature integer: unnecessary leading zero");return(0,o.Ph)(t)}},toSig(t){let{Err:e,_int:r,_tlv:n}=c,i=(0,o.qj)("signature",t),{v:s,l:l}=n.decode(48,i);if(l.length)throw new e("invalid signature: left bytes after parsing");let{v:u,l:a}=n.decode(2,s),{v:f,l:d}=n.decode(2,a);if(d.length)throw new e("invalid signature: left bytes after parsing");return{r:r.decode(u),s:r.decode(f)}},hexFromSig(t){let{_tlv:e,_int:r}=c,n=e.encode(2,r.encode(t.r)),i=e.encode(2,r.encode(t.s));return e.encode(48,n+i)}},h=BigInt(0),m=BigInt(1),y=BigInt(2),g=BigInt(3),p=BigInt(4);function w(t,e){let r,{BYTES:n}=t;if("bigint"==typeof e)r=e;else{let i=(0,o.qj)("private key",e);try{r=t.fromBytes(i)}catch(t){throw Error(`invalid private key: expected ui8a of size ${n}, got ${typeof e}`)}}if(!t.isValidNot0(r))throw Error("invalid private key: out of range [1..N-1]");return r}function E(t){return Uint8Array.of(t?2:3)}function b(t,e){return{secretKey:e.BYTES,publicKey:1+t.BYTES,publicKeyUncompressed:1+2*t.BYTES,publicKeyHasPrefix:!0,signature:2*e.BYTES}}function v(t,e){let r=e=>(function(t){let{CURVE:e,curveOpts:r,hash:d,ecdsaOpts:v}=function(t){let{CURVE:e,curveOpts:r}=function(t){let e={a:t.a,b:t.b,p:t.Fp.ORDER,n:t.n,h:t.h,Gx:t.Gx,Gy:t.Gy},r=t.Fp,n=t.allowedPrivateKeyLengths?Array.from(new Set(t.allowedPrivateKeyLengths.map(t=>Math.ceil(t/2)))):void 0,i={Fp:r,Fn:(0,l.D0)(e.n,{BITS:t.nBitLength,allowedLengths:n,modFromBytes:t.wrapPrivateKey}),allowInfinityPoint:t.allowInfinityPoint,endo:t.endo,isTorsionFree:t.isTorsionFree,clearCofactor:t.clearCofactor,fromBytes:t.fromBytes,toBytes:t.toBytes};return{CURVE:e,curveOpts:i}}(t),n={hmac:t.hmac,randomBytes:t.randomBytes,lowS:t.lowS,bits2int:t.bits2int,bits2int_modN:t.bits2int_modN};return{CURVE:e,curveOpts:r,hash:t.hash,ecdsaOpts:n}}(t),B=function(t,e,r={}){(0,i.sd)(e),(0,o.DS)(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"});let s=r.randomBytes||i.po,u=r.hmac||((t,...r)=>(0,n.w)(e,t,(0,i.Id)(...r))),{Fp:d,Fn:g}=t,{ORDER:p,BITS:v}=g,{keygen:B,getPublicKey:O,getSharedSecret:R,utils:q,lengths:x}=function(t,e={}){let{Fn:r}=t,n=e.randomBytes||i.po,s=Object.assign(b(t.Fp,r),{seed:(0,l.Tp)(r.ORDER)});function u(t){try{return!!w(r,t)}catch(t){return!1}}function a(t=n(s.seed)){return(0,l.qy)((0,o.eV)(t,s.seed,"seed"),r.ORDER)}function f(e,n=!0){return t.BASE.multiply(w(r,e)).toBytes(n)}function d(e){if("bigint"==typeof e)return!1;if(e instanceof t)return!0;let{secretKey:n,publicKey:i,publicKeyUncompressed:l}=s;if(r.allowedLengths||n===i)return;let u=(0,o.qj)("key",e).length;return u===i||u===l}return Object.freeze({getPublicKey:f,getSharedSecret:function(e,n,i=!0){if(!0===d(e))throw Error("first arg must be private key");if(!1===d(n))throw Error("second arg must be public key");let o=w(r,e);return t.fromHex(n).multiply(o).toBytes(i)},keygen:function(t){let e=a(t);return{secretKey:e,publicKey:f(e)}},Point:t,utils:{isValidSecretKey:u,isValidPublicKey:function(e,r){let{publicKey:n,publicKeyUncompressed:i}=s;try{let o=e.length;if(!0===r&&o!==n||!1===r&&o!==i)return!1;return!!t.fromBytes(e)}catch(t){return!1}},randomSecretKey:a,isValidPrivateKey:u,randomPrivateKey:a,normPrivateKeyToScalar:t=>w(r,t),precompute:(e=8,r=t.BASE)=>r.precompute(e,!1)},lengths:s})}(t,r),S={prehash:!1,lowS:"boolean"==typeof r.lowS&&r.lowS,format:void 0,extraEntropy:!1},A="compact";function I(t,e){if(!g.isValidNot0(e))throw Error(`invalid signature ${t}: out of range 1..Point.Fn.ORDER`);return e}class N{constructor(t,e,r){this.r=I("r",t),this.s=I("s",e),null!=r&&(this.recovery=r),Object.freeze(this)}static fromBytes(t,e=A){let r;if(!function(t,e){a(e);let r=x.signature;(0,o.eV)(t,"compact"===e?r:"recovered"===e?r+1:void 0,`${e} signature`)}(t,e),"der"===e){let{r:e,s:r}=c.toSig((0,o.eV)(t));return new N(e,r)}"recovered"===e&&(r=t[0],e="compact",t=t.subarray(1));let n=g.BYTES,i=t.subarray(0,n),s=t.subarray(n,2*n);return new N(g.fromBytes(i),g.fromBytes(s),r)}static fromHex(t,e){return this.fromBytes((0,i.aT)(t),e)}addRecoveryBit(t){return new N(this.r,this.s,t)}recoverPublicKey(e){let r=d.ORDER,{r:n,s,recovery:l}=this;if(null==l||![0,1,2,3].includes(l))throw Error("recovery id invalid");if(p*y<r&&l>1)throw Error("recovery id is ambiguous for h>1 curve");let u=2===l||3===l?n+p:n;if(!d.isValid(u))throw Error("recovery id 2 or 3 invalid");let a=d.toBytes(u),f=t.fromBytes((0,i.Id)(E((1&l)==0),a)),c=g.inv(u),h=F((0,o.qj)("msgHash",e)),m=g.create(-h*c),w=g.create(s*c),b=t.BASE.multiplyUnsafe(m).add(f.multiplyUnsafe(w));if(b.is0())throw Error("point at infinify");return b.assertValidity(),b}hasHighS(){return this.s>p>>m}toBytes(t=A){if(a(t),"der"===t)return(0,i.aT)(c.hexFromSig(this));let e=g.toBytes(this.r),r=g.toBytes(this.s);if("recovered"===t){if(null==this.recovery)throw Error("recovery bit must be present");return(0,i.Id)(Uint8Array.of(this.recovery),e,r)}return(0,i.Id)(e,r)}toHex(t){return(0,i.My)(this.toBytes(t))}assertValidity(){}static fromCompact(t){return N.fromBytes((0,o.qj)("sig",t),"compact")}static fromDER(t){return N.fromBytes((0,o.qj)("sig",t),"der")}normalizeS(){return this.hasHighS()?new N(this.r,g.neg(this.s),this.recovery):this}toDERRawBytes(){return this.toBytes("der")}toDERHex(){return(0,i.My)(this.toBytes("der"))}toCompactRawBytes(){return this.toBytes("compact")}toCompactHex(){return(0,i.My)(this.toBytes("compact"))}}let V=r.bits2int||function(t){if(t.length>8192)throw Error("input is too large");let e=(0,o.Ph)(t),r=8*t.length-v;return r>0?e>>BigInt(r):e},F=r.bits2int_modN||function(t){return g.create(V(t))},j=(0,o.OG)(v);function Z(t){return(0,o.aK)("num < 2^"+v,t,h,j),g.toBytes(t)}function U(t,r){return(0,o.eV)(t,void 0,"message"),r?(0,o.eV)(e(t),void 0,"prehashed message"):t}return Object.freeze({keygen:B,getPublicKey:O,getSharedSecret:R,utils:q,lengths:x,Point:t,sign:function(r,n,l={}){let{seed:a,k2sig:d}=function(e,r,n){if(["recovered","canonical"].some(t=>t in n))throw Error("sign() legacy options not supported");let{lowS:l,prehash:u,extraEntropy:a}=f(n,S),d=F(e=U(e,u)),c=w(g,r),y=[Z(c),Z(d)];if(null!=a&&!1!==a){let t=!0===a?s(x.secretKey):a;y.push((0,o.qj)("extraEntropy",t))}return{seed:(0,i.Id)(...y),k2sig:function(e){let r=V(e);if(!g.isValidNot0(r))return;let n=g.inv(r),i=t.BASE.multiply(r).toAffine(),o=g.create(i.x);if(o===h)return;let s=g.create(n*g.create(d+o*c));if(s===h)return;let u=2*(i.x!==o)|Number(i.y&m),a=s;return l&&s>p>>m&&(a=g.neg(s),u^=1),new N(o,a,u)}}}(r=(0,o.qj)("message",r),n,l);return(0,o.fg)(e.outputLen,g.BYTES,u)(a,d)},verify:function(e,r,n,s={}){let{lowS:l,prehash:u,format:a}=f(s,S);if(n=(0,o.qj)("publicKey",n),r=U((0,o.qj)("message",r),u),"strict"in s)throw Error("options.strict was renamed to lowS");let d=void 0===a?function(t){let e,r="string"==typeof t||(0,i.aY)(t),n=!r&&null!==t&&"object"==typeof t&&"bigint"==typeof t.r&&"bigint"==typeof t.s;if(!r&&!n)throw Error("invalid signature, expected Uint8Array, hex string or Signature instance");if(n)e=new N(t.r,t.s);else if(r){try{e=N.fromBytes((0,o.qj)("sig",t),"der")}catch(t){if(!(t instanceof c.Err))throw t}if(!e)try{e=N.fromBytes((0,o.qj)("sig",t),"compact")}catch(t){return!1}}return!!e&&e}(e):N.fromBytes((0,o.qj)("sig",e),a);if(!1===d)return!1;try{let e=t.fromBytes(n);if(l&&d.hasHighS())return!1;let{r:i,s:o}=d,s=F(r),u=g.inv(o),a=g.create(s*u),f=g.create(i*u),c=t.BASE.multiplyUnsafe(a).add(e.multiplyUnsafe(f));if(c.is0())return!1;return g.create(c.x)===i}catch(t){return!1}},recoverPublicKey:function(t,e,r={}){let{prehash:n}=f(r,S);return e=U(e,n),N.fromBytes(t,"recovered").recoverPublicKey(e).toBytes()},Signature:N,hash:e})}(function(t,e={}){let r=(0,s.UT)("weierstrass",t,e),{Fp:n,Fn:l}=r,a=r.CURVE,{h:f,n:d}=a;(0,o.DS)(e,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object",wrapPrivateKey:"boolean"});let{endo:c}=e;if(c&&(!n.is0(a.a)||"bigint"!=typeof c.beta||!Array.isArray(c.basises)))throw Error('invalid endo: expected "beta": bigint and "basises": array');let y=b(n,l);function v(){if(!n.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}let B=e.toBytes||function(t,e,r){let{x:s,y:l}=e.toAffine(),u=n.toBytes(s);if((0,o.d6)(r,"isCompressed"),!r)return(0,i.Id)(Uint8Array.of(4),u,n.toBytes(l));{v();let t=!n.isOdd(l);return(0,i.Id)(E(t),u)}},O=e.fromBytes||function(t){(0,o.eV)(t,void 0,"Point");let{publicKey:e,publicKeyUncompressed:r}=y,i=t.length,s=t[0],l=t.subarray(1);if(i===e&&(2===s||3===s)){let t,e=n.fromBytes(l);if(!n.isValid(e))throw Error("bad point: is not on curve, wrong x");let r=R(e);try{t=n.sqrt(r)}catch(t){throw Error("bad point: is not on curve, sqrt error"+(t instanceof Error?": "+t.message:""))}return v(),(1&s)==1!==n.isOdd(t)&&(t=n.neg(t)),{x:e,y:t}}if(i===r&&4===s){let t=n.BYTES,e=n.fromBytes(l.subarray(0,t)),r=n.fromBytes(l.subarray(t,2*t));if(!q(e,r))throw Error("bad point: is not on curve");return{x:e,y:r}}throw Error(`bad point: got length ${i}, expected compressed=${e} or uncompressed=${r}`)};function R(t){let e=n.sqr(t),r=n.mul(e,t);return n.add(n.add(r,n.mul(t,a.a)),a.b)}function q(t,e){let r=n.sqr(e),i=R(t);return n.eql(r,i)}if(!q(a.Gx,a.Gy))throw Error("bad curve params: generator point");let x=n.mul(n.pow(a.a,g),p),S=n.mul(n.sqr(a.b),BigInt(27));if(n.is0(n.add(x,S)))throw Error("bad curve params: a or b");function A(t,e,r=!1){if(!n.isValid(e)||r&&n.is0(e))throw Error(`bad point coordinate ${t}`);return e}function I(t){if(!(t instanceof Z))throw Error("ProjectivePoint expected")}function N(t){if(!c||!c.basises)throw Error("no endo");return function(t,e,r){let[[n,i],[s,l]]=e,a=u(l*t,r),f=u(-i*t,r),d=t-a*n-f*s,c=-a*i-f*l,y=d<h,g=c<h;y&&(d=-d),g&&(c=-c);let p=(0,o.OG)(Math.ceil((0,o.dJ)(r)/2))+m;if(d<h||d>=p||c<h||c>=p)throw Error("splitScalar (endomorphism): failed, k="+t);return{k1neg:y,k1:d,k2neg:g,k2:c}}(t,c.basises,l.ORDER)}let V=(0,o.x)((t,e)=>{let{X:r,Y:i,Z:o}=t;if(n.eql(o,n.ONE))return{x:r,y:i};let s=t.is0();null==e&&(e=s?n.ONE:n.inv(o));let l=n.mul(r,e),u=n.mul(i,e),a=n.mul(o,e);if(s)return{x:n.ZERO,y:n.ZERO};if(!n.eql(a,n.ONE))throw Error("invZ was invalid");return{x:l,y:u}}),F=(0,o.x)(t=>{if(t.is0()){if(e.allowInfinityPoint&&!n.is0(t.Y))return;throw Error("bad point: ZERO")}let{x:r,y:i}=t.toAffine();if(!n.isValid(r)||!n.isValid(i))throw Error("bad point: x or y not field elements");if(!q(r,i))throw Error("bad point: equation left != right");if(!t.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function j(t,e,r,i,o){return r=new Z(n.mul(r.X,t),r.Y,r.Z),e=(0,s.u0)(i,e),r=(0,s.u0)(o,r),e.add(r)}class Z{constructor(t,e,r){this.X=A("x",t),this.Y=A("y",e,!0),this.Z=A("z",r),Object.freeze(this)}static CURVE(){return a}static fromAffine(t){let{x:e,y:r}=t||{};if(!t||!n.isValid(e)||!n.isValid(r))throw Error("invalid affine point");if(t instanceof Z)throw Error("projective point not allowed");return n.is0(e)&&n.is0(r)?Z.ZERO:new Z(e,r,n.ONE)}static fromBytes(t){let e=Z.fromAffine(O((0,o.eV)(t,void 0,"point")));return e.assertValidity(),e}static fromHex(t){return Z.fromBytes((0,o.qj)("pointHex",t))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(t=8,e=!0){return P.createCache(this,t),e||this.multiply(g),this}assertValidity(){F(this)}hasEvenY(){let{y:t}=this.toAffine();if(!n.isOdd)throw Error("Field doesn't support isOdd");return!n.isOdd(t)}equals(t){I(t);let{X:e,Y:r,Z:i}=this,{X:o,Y:s,Z:l}=t,u=n.eql(n.mul(e,l),n.mul(o,i)),a=n.eql(n.mul(r,l),n.mul(s,i));return u&&a}negate(){return new Z(this.X,n.neg(this.Y),this.Z)}double(){let{a:t,b:e}=a,r=n.mul(e,g),{X:i,Y:o,Z:s}=this,l=n.ZERO,u=n.ZERO,f=n.ZERO,d=n.mul(i,i),c=n.mul(o,o),h=n.mul(s,s),m=n.mul(i,o);return m=n.add(m,m),f=n.mul(i,s),f=n.add(f,f),l=n.mul(t,f),u=n.mul(r,h),u=n.add(l,u),l=n.sub(c,u),u=n.add(c,u),u=n.mul(l,u),l=n.mul(m,l),f=n.mul(r,f),h=n.mul(t,h),m=n.sub(d,h),m=n.mul(t,m),m=n.add(m,f),f=n.add(d,d),d=n.add(f,d),d=n.add(d,h),d=n.mul(d,m),u=n.add(u,d),h=n.mul(o,s),h=n.add(h,h),d=n.mul(h,m),l=n.sub(l,d),f=n.mul(h,c),f=n.add(f,f),new Z(l,u,f=n.add(f,f))}add(t){I(t);let{X:e,Y:r,Z:i}=this,{X:o,Y:s,Z:l}=t,u=n.ZERO,f=n.ZERO,d=n.ZERO,c=a.a,h=n.mul(a.b,g),m=n.mul(e,o),y=n.mul(r,s),p=n.mul(i,l),w=n.add(e,r),E=n.add(o,s);w=n.mul(w,E),E=n.add(m,y),w=n.sub(w,E),E=n.add(e,i);let b=n.add(o,l);return E=n.mul(E,b),b=n.add(m,p),E=n.sub(E,b),b=n.add(r,i),u=n.add(s,l),b=n.mul(b,u),u=n.add(y,p),b=n.sub(b,u),d=n.mul(c,E),u=n.mul(h,p),d=n.add(u,d),u=n.sub(y,d),d=n.add(y,d),f=n.mul(u,d),y=n.add(m,m),y=n.add(y,m),p=n.mul(c,p),E=n.mul(h,E),y=n.add(y,p),p=n.sub(m,p),p=n.mul(c,p),E=n.add(E,p),m=n.mul(y,E),f=n.add(f,m),m=n.mul(b,E),u=n.mul(w,u),u=n.sub(u,m),m=n.mul(w,y),d=n.mul(b,d),new Z(u,f,d=n.add(d,m))}subtract(t){return this.add(t.negate())}is0(){return this.equals(Z.ZERO)}multiply(t){let r,n,{endo:i}=e;if(!l.isValidNot0(t))throw Error("invalid scalar: out of range");let o=t=>P.cached(this,t,t=>(0,s.Ak)(Z,t));if(i){let{k1neg:e,k1:s,k2neg:l,k2:u}=N(t),{p:a,f:f}=o(s),{p:d,f:c}=o(u);n=f.add(c),r=j(i.beta,a,d,e,l)}else{let{p:e,f:i}=o(t);r=e,n=i}return(0,s.Ak)(Z,[r,n])[0]}multiplyUnsafe(t){let{endo:r}=e;if(!l.isValid(t))throw Error("invalid scalar: out of range");if(t===h||this.is0())return Z.ZERO;if(t===m)return this;if(P.hasCache(this))return this.multiply(t);if(!r)return P.unsafe(this,t);{let{k1neg:e,k1:n,k2neg:i,k2:o}=N(t),{p1:l,p2:u}=(0,s.fH)(Z,this,n,o);return j(r.beta,l,u,e,i)}}multiplyAndAddUnsafe(t,e,r){let n=this.multiplyUnsafe(e).add(t.multiplyUnsafe(r));return n.is0()?void 0:n}toAffine(t){return V(this,t)}isTorsionFree(){let{isTorsionFree:t}=e;return f===m||(t?t(Z,this):P.unsafe(this,d).is0())}clearCofactor(){let{clearCofactor:t}=e;return f===m?this:t?t(Z,this):this.multiplyUnsafe(f)}isSmallOrder(){return this.multiplyUnsafe(f).is0()}toBytes(t=!0){return(0,o.d6)(t,"isCompressed"),this.assertValidity(),B(Z,this,t)}toHex(t=!0){return(0,i.My)(this.toBytes(t))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}get px(){return this.X}get py(){return this.X}get pz(){return this.Z}toRawBytes(t=!0){return this.toBytes(t)}

1o,t.sub(s,t.ONE));return w(t,u,e),u}function v(t){if(t<u)throw Error("sqrt is not defined for small field");let e=t-s,r=0;for(;e%l===o;)e/=l,r++;let n=l,i=A(t);for(;1===x(i,n);)if(n++>1e3)throw Error("Cannot find square root: probably non-prime P");if(1===r)return E;let a=i.pow(n,e),f=(e+s)/l;return function(t,n){if(t.is0(n))return n;if(1!==x(t,n))throw Error("Cannot find square root");let i=r,o=t.mul(t.ONE,a),l=t.pow(n,e),u=t.pow(n,f);for(;!t.eql(l,t.ONE);){if(t.is0(l))return t.ZERO;let e=1,r=t.sqr(l);for(;!t.eql(r,t.ONE);)if(e++,r=t.sqr(r),e===i)throw Error("Cannot find square root");let n=s<<BigInt(i-e-1),a=t.pow(o,n);i=e,o=t.sqr(a),l=t.mul(l,o),u=t.mul(u,a)}return u}}let B=(t,e)=>(y(t,e)&s)===s,O=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function R(t){let e=O.reduce((t,e)=>(t[e]="function",t),{ORDER:"bigint",MASK:"bigint",BYTES:"number",BITS:"number"});return(0,n.DS)(t,e),t}function q(t,e,r=!1){let n=Array(e.length).fill(r?t.ZERO:void 0),i=e.reduce((e,r,i)=>t.is0(r)?e:(n[i]=e,t.mul(e,r)),t.ONE),o=t.inv(i);return e.reduceRight((e,r,i)=>t.is0(r)?e:(n[i]=t.mul(e,n[i]),t.mul(e,r)),o),n}function x(t,e){let r=(t.ORDER-s)/l,n=t.pow(e,r),i=t.eql(n,t.ONE),o=t.eql(n,t.ZERO),u=t.eql(n,t.neg(t.ONE));if(!i&&!o&&!u)throw Error("invalid Legendre symbol result");return i?1:o?0:-1}function S(t,e){void 0!==e&&(0,i.Fe)(e);let r=void 0!==e?e:t.toString(2).length,n=Math.ceil(r/8);return{nBitLength:r,nByteLength:n}}function A(t,e,r=!1,i={}){let l,g,B,O;if(t<=o)throw Error("invalid field: expected ORDER > 0, got "+t);let R=!1;if("object"==typeof e&&null!=e){if(i.sqrt||r)throw Error("cannot specify opts in two arguments");e.BITS&&(g=e.BITS),e.sqrt&&(B=e.sqrt),"boolean"==typeof e.isLE&&(r=e.isLE),"boolean"==typeof e.modFromBytes&&(R=e.modFromBytes),O=e.allowedLengths}else"number"==typeof e&&(g=e),i.sqrt&&(B=i.sqrt);let{nBitLength:x,nByteLength:I}=S(t,g);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");let N=Object.freeze({ORDER:t,isLE:r,BITS:x,BYTES:I,MASK:(0,n.OG)(x),ZERO:o,ONE:s,allowedLengths:O,create:e=>y(e,t),isValid:e=>{if("bigint"!=typeof e)throw Error("invalid field element: expected bigint, got "+typeof e);return o<=e&&e<t},is0:t=>t===o,isValidNot0:t=>!N.is0(t)&&N.isValid(t),isOdd:t=>(t&s)===s,neg:e=>y(-e,t),eql:(t,e)=>t===e,sqr:e=>y(e*e,t),add:(e,r)=>y(e+r,t),sub:(e,r)=>y(e-r,t),mul:(e,r)=>y(e*r,t),pow:(t,e)=>(function(t,e,r){if(r<o)throw Error("invalid exponent, negatives unsupported");if(r===o)return t.ONE;if(r===s)return e;let n=t.ONE,i=e;for(;r>o;)r&s&&(n=t.mul(n,i)),i=t.sqr(i),r>>=s;return n})(N,t,e),div:(e,r)=>y(e*p(r,t),t),sqrN:t=>t*t,addN:(t,e)=>t+e,subN:(t,e)=>t-e,mulN:(t,e)=>t*e,inv:e=>p(e,t),sqrt:B||(e=>(l||(l=t%a===u?E:t%c===f?b:t%m===h?function(t){let e=A(t),r=v(t),n=r(e,e.neg(e.ONE)),i=r(e,n),o=r(e,e.neg(n)),s=(t+d)/m;return(t,e)=>{let r=t.pow(e,s),l=t.mul(r,n),u=t.mul(r,i),a=t.mul(r,o),f=t.eql(t.sqr(l),e),d=t.eql(t.sqr(u),e);r=t.cmov(r,l,f),l=t.cmov(a,u,d);let c=t.eql(t.sqr(l),e),h=t.cmov(r,l,c);return w(t,h,e),h}}(t):v(t)),l(N,e))),toBytes:t=>r?(0,n.z)(t,I):(0,n.lq)(t,I),fromBytes:(e,i=!0)=>{if(O){if(!O.includes(e.length)||e.length>I)throw Error("Field.fromBytes: expected "+O+" bytes, got "+e.length);let t=new Uint8Array(I);t.set(e,r?0:t.length-e.length),e=t}if(e.length!==I)throw Error("Field.fromBytes: expected "+I+" bytes, got "+e.length);let o=r?(0,n.lX)(e):(0,n.Ph)(e);if(R&&(o=y(o,t)),!i&&!N.isValid(o))throw Error("invalid field element: outside of range 0..ORDER");return o},invertBatch:t=>q(N,t),cmov:(t,e,r)=>r?e:t});return Object.freeze(N)}function I(t){if("bigint"!=typeof t)throw Error("field order must be bigint");return Math.ceil(t.toString(2).length/8)}function N(t){let e=I(t);return e+Math.ceil(e/2)}function V(t,e,r=!1){let i=t.length,o=I(e),l=N(e);if(i<16||i<l||i>1024)throw Error("expected "+l+"-1024 bytes of input, got "+i);let u=y(r?(0,n.lX)(t):(0,n.Ph)(t),e-s)+s;return r?(0,n.z)(u,o):(0,n.lq)(u,o)}}}]);