"use strict"; var sjcl = { cipher: {}, hash: {}, keyexchange: {}, mode: {}, misc: {}, codec: {}, exception: { corrupt: function(a) { this.toString = function() { return "CORRUPT: " + this.message }; this.message = a }, invalid: function(a) { this.toString = function() { return "INVALID: " + this.message }; this.message = a }, bug: function(a) { this.toString = function() { return "BUG: " + this.message }; this.message = a }, notReady: function(a) { this.toString = function() { return "NOT READY: " + this.message }; this.message = a } } }; sjcl.cipher.aes = function(a) { this.s[0][0][0] || this.O(); var b, c, d, e, f = this.s[0][4], g = this.s[1]; b = a.length; var h = 1; if (4 !== b && 6 !== b && 8 !== b) throw new sjcl.exception.invalid("invalid aes key size"); this.b = [d = a.slice(0), e = []]; for (a = b; a < 4 * b + 28; a++) { c = d[a - 1]; if (0 === a % b || 8 === b && 4 === a % b) c = f[c >>> 24] << 24 ^ f[c >> 16 & 255] << 16 ^ f[c >> 8 & 255] << 8 ^ f[c & 255], 0 === a % b && (c = c << 8 ^ c >>> 24 ^ h << 24, h = h << 1 ^ 283 * (h >> 7)); d[a] = d[a - b] ^ c } for (b = 0; a; b++, a--) c = d[b & 3 ? a : a - 4], e[b] = 4 >= a || 4 > b ? c : g[0][f[c >>> 24]] ^ g[1][f[c >> 16 & 255]] ^ g[2][f[c >> 8 & 255]] ^ g[3][f[c & 255]] }; sjcl.cipher.aes.prototype = { encrypt: function(a) { return t(this, a, 0) }, decrypt: function(a) { return t(this, a, 1) }, s: [ [ [], [], [], [], [] ], [ [], [], [], [], [] ] ], O: function() { var a = this.s[0], b = this.s[1], c = a[4], d = b[4], e, f, g, h = [], k = [], l, n, m, p; for (e = 0; 0x100 > e; e++) k[(h[e] = e << 1 ^ 283 * (e >> 7)) ^ e] = e; for (f = g = 0; !c[f]; f ^= l || 1, g = k[g] || 1) for (m = g ^ g << 1 ^ g << 2 ^ g << 3 ^ g << 4, m = m >> 8 ^ m & 255 ^ 99, c[f] = m, d[m] = f, n = h[e = h[l = h[f]]], p = 0x1010101 * n ^ 0x10001 * e ^ 0x101 * l ^ 0x1010100 * f, n = 0x101 * h[m] ^ 0x1010100 * m, e = 0; 4 > e; e++) a[e][f] = n = n << 24 ^ n >>> 8, b[e][m] = p = p << 24 ^ p >>> 8; for (e = 0; 5 > e; e++) a[e] = a[e].slice(0), b[e] = b[e].slice(0) } }; function t(a, b, c) { if (4 !== b.length) throw new sjcl.exception.invalid("invalid aes block size"); var d = a.b[c], e = b[0] ^ d[0], f = b[c ? 3 : 1] ^ d[1], g = b[2] ^ d[2]; b = b[c ? 1 : 3] ^ d[3]; var h, k, l, n = d.length / 4 - 2, m, p = 4, r = [0, 0, 0, 0]; h = a.s[c]; a = h[0]; var q = h[1], v = h[2], w = h[3], x = h[4]; for (m = 0; m < n; m++) h = a[e >>> 24] ^ q[f >> 16 & 255] ^ v[g >> 8 & 255] ^ w[b & 255] ^ d[p], k = a[f >>> 24] ^ q[g >> 16 & 255] ^ v[b >> 8 & 255] ^ w[e & 255] ^ d[p + 1], l = a[g >>> 24] ^ q[b >> 16 & 255] ^ v[e >> 8 & 255] ^ w[f & 255] ^ d[p + 2], b = a[b >>> 24] ^ q[e >> 16 & 255] ^ v[f >> 8 & 255] ^ w[g & 255] ^ d[p + 3], p += 4, e = h, f = k, g = l; for (m = 0; 4 > m; m++) r[c ? 3 & -m : m] = x[e >>> 24] << 24 ^ x[f >> 16 & 255] << 16 ^ x[g >> 8 & 255] << 8 ^ x[b & 255] ^ d[p++], h = e, e = f, f = g, g = b, b = h; return r } sjcl.bitArray = { bitSlice: function(a, b, c) { a = sjcl.bitArray.$(a.slice(b / 32), 32 - (b & 31)).slice(1); return void 0 === c ? a : sjcl.bitArray.clamp(a, c - b) }, extract: function(a, b, c) { var d = Math.floor(-b - c & 31); return ((b + c - 1 ^ b) & -32 ? a[b / 32 | 0] << 32 - d ^ a[b / 32 + 1 | 0] >>> d : a[b / 32 | 0] >>> d) & (1 << c) - 1 }, concat: function(a, b) { if (0 === a.length || 0 === b.length) return a.concat(b); var c = a[a.length - 1], d = sjcl.bitArray.getPartial(c); return 32 === d ? a.concat(b) : sjcl.bitArray.$(b, d, c | 0, a.slice(0, a.length - 1)) }, bitLength: function(a) { var b = a.length; return 0 === b ? 0 : 32 * (b - 1) + sjcl.bitArray.getPartial(a[b - 1]) }, clamp: function(a, b) { if (32 * a.length < b) return a; a = a.slice(0, Math.ceil(b / 32)); var c = a.length; b = b & 31; 0 < c && b && (a[c - 1] = sjcl.bitArray.partial(b, a[c - 1] & 2147483648 >> b - 1, 1)); return a }, partial: function(a, b, c) { return 32 === a ? b : (c ? b | 0 : b << 32 - a) + 0x10000000000 * a }, getPartial: function(a) { return Math.round(a / 0x10000000000) || 32 }, equal: function(a, b) { if (sjcl.bitArray.bitLength(a) !== sjcl.bitArray.bitLength(b)) return !1; var c = 0, d; for (d = 0; d < a.length; d++) c |= a[d] ^ b[d]; return 0 === c }, $: function(a, b, c, d) { var e; e = 0; for (void 0 === d && (d = []); 32 <= b; b -= 32) d.push(c), c = 0; if (0 === b) return d.concat(a); for (e = 0; e < a.length; e++) d.push(c | a[e] >>> b), c = a[e] << 32 - b; e = a.length ? a[a.length - 1] : 0; a = sjcl.bitArray.getPartial(e); d.push(sjcl.bitArray.partial(b + a & 31, 32 < b + a ? c : d.pop(), 1)); return d }, i: function(a, b) { return [a[0] ^ b[0], a[1] ^ b[1], a[2] ^ b[2], a[3] ^ b[3]] }, byteswapM: function(a) { var b, c; for (b = 0; b < a.length; ++b) c = a[b], a[b] = c >>> 24 | c >>> 8 & 0xff00 | (c & 0xff00) << 8 | c << 24; return a } }; sjcl.codec.utf8String = { fromBits: function(a) { var b = "", c = sjcl.bitArray.bitLength(a), d, e; for (d = 0; d < c / 8; d++) 0 === (d & 3) && (e = a[d / 4]), b += String.fromCharCode(e >>> 8 >>> 8 >>> 8), e <<= 8; return decodeURIComponent(escape(b)) }, toBits: function(a) { a = unescape(encodeURIComponent(a)); var b = [], c, d = 0; for (c = 0; c < a.length; c++) d = d << 8 | a.charCodeAt(c), 3 === (c & 3) && (b.push(d), d = 0); c & 3 && b.push(sjcl.bitArray.partial(8 * (c & 3), d)); return b } }; sjcl.codec.hex = { fromBits: function(a) { var b = "", c; for (c = 0; c < a.length; c++) b += ((a[c] | 0) + 0xf00000000000).toString(16).substr(4); return b.substr(0, sjcl.bitArray.bitLength(a) / 4) }, toBits: function(a) { var b, c = [], d; a = a.replace(/\s|0x/g, ""); d = a.length; a = a + "00000000"; for (b = 0; b < a.length; b += 8) c.push(parseInt(a.substr(b, 8), 16) ^ 0); return sjcl.bitArray.clamp(c, 4 * d) } }; sjcl.codec.base32 = { B: "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567", X: "0123456789ABCDEFGHIJKLMNOPQRSTUV", BITS: 32, BASE: 5, REMAINING: 27, fromBits: function(a, b, c) { var d = sjcl.codec.base32.BASE, e = sjcl.codec.base32.REMAINING, f = "", g = 0, h = sjcl.codec.base32.B, k = 0, l = sjcl.bitArray.bitLength(a); c && (h = sjcl.codec.base32.X); for (c = 0; f.length * d < l;) f += h.charAt((k ^ a[c] >>> g) >>> e), g < d ? (k = a[c] << d - g, g += e, c++) : (k <<= d, g -= d); for (; f.length & 7 && !b;) f += "="; return f }, toBits: function(a, b) { a = a.replace(/\s|=/g, "").toUpperCase(); var c = sjcl.codec.base32.BITS, d = sjcl.codec.base32.BASE, e = sjcl.codec.base32.REMAINING, f = [], g, h = 0, k = sjcl.codec.base32.B, l = 0, n, m = "base32"; b && (k = sjcl.codec.base32.X, m = "base32hex"); for (g = 0; g < a.length; g++) { n = k.indexOf(a.charAt(g)); if (0 > n) { if (!b) try { return sjcl.codec.base32hex.toBits(a) } catch (p) {} throw new sjcl.exception.invalid("this isn't " + m + "!"); } h > e ? (h -= e, f.push(l ^ n >>> h), l = n << c - h) : (h += d, l ^= n << c - h) } h & 56 && f.push(sjcl.bitArray.partial(h & 56, l, 1)); return f } }; sjcl.codec.base32hex = { fromBits: function(a, b) { return sjcl.codec.base32.fromBits(a, b, 1) }, toBits: function(a) { return sjcl.codec.base32.toBits(a, 1) } }; sjcl.codec.base64 = { B: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/", fromBits: function(a, b, c) { var d = "", e = 0, f = sjcl.codec.base64.B, g = 0, h = sjcl.bitArray.bitLength(a); c && (f = f.substr(0, 62) + "-_"); for (c = 0; 6 * d.length < h;) d += f.charAt((g ^ a[c] >>> e) >>> 26), 6 > e ? (g = a[c] << 6 - e, e += 26, c++) : (g <<= 6, e -= 6); for (; d.length & 3 && !b;) d += "="; return d }, toBits: function(a, b) { a = a.replace(/\s|=/g, ""); var c = [], d, e = 0, f = sjcl.codec.base64.B, g = 0, h; b && (f = f.substr(0, 62) + "-_"); for (d = 0; d < a.length; d++) { h = f.indexOf(a.charAt(d)); if (0 > h) throw new sjcl.exception.invalid("this isn't base64!"); 26 < e ? (e -= 26, c.push(g ^ h >>> e), g = h << 32 - e) : (e += 6, g ^= h << 32 - e) } e & 56 && c.push(sjcl.bitArray.partial(e & 56, g, 1)); return c } }; sjcl.codec.base64url = { fromBits: function(a) { return sjcl.codec.base64.fromBits(a, 1, 1) }, toBits: function(a) { return sjcl.codec.base64.toBits(a, 1) } }; sjcl.hash.sha256 = function(a) { this.b[0] || this.O(); a ? (this.F = a.F.slice(0), this.A = a.A.slice(0), this.l = a.l) : this.reset() }; sjcl.hash.sha256.hash = function(a) { return (new sjcl.hash.sha256).update(a).finalize() }; sjcl.hash.sha256.prototype = { blockSize: 512, reset: function() { this.F = this.Y.slice(0); this.A = []; this.l = 0; return this }, update: function(a) { "string" === typeof a && (a = sjcl.codec.utf8String.toBits(a)); var b, c = this.A = sjcl.bitArray.concat(this.A, a); b = this.l; a = this.l = b + sjcl.bitArray.bitLength(a); if (0x1fffffffffffff < a) throw new sjcl.exception.invalid("Cannot hash more than 2^53 - 1 bits"); if ("undefined" !== typeof Uint32Array) { var d = new Uint32Array(c), e = 0; for (b = 512 + b - (512 + b & 0x1ff); b <= a; b += 512) u(this, d.subarray(16 * e, 16 * (e + 1))), e += 1; c.splice(0, 16 * e) } else for (b = 512 + b - (512 + b & 0x1ff); b <= a; b += 512) u(this, c.splice(0, 16)); return this }, finalize: function() { var a, b = this.A, c = this.F, b = sjcl.bitArray.concat(b, [sjcl.bitArray.partial(1, 1)]); for (a = b.length + 2; a & 15; a++) b.push(0); b.push(Math.floor(this.l / 0x100000000)); for (b.push(this.l | 0); b.length;) u(this, b.splice(0, 16)); this.reset(); return c }, Y: [], b: [], O: function() { function a(a) { return 0x100000000 * (a - Math.floor(a)) | 0 } for (var b = 0, c = 2, d, e; 64 > b; c++) { e = !0; for (d = 2; d * d <= c; d++) if (0 === c % d) { e = !1; break } e && (8 > b && (this.Y[b] = a(Math.pow(c, .5))), this.b[b] = a(Math.pow(c, 1 / 3)), b++) } } }; function u(a, b) { var c, d, e, f = a.F, g = a.b, h = f[0], k = f[1], l = f[2], n = f[3], m = f[4], p = f[5], r = f[6], q = f[7]; for (c = 0; 64 > c; c++) 16 > c ? d = b[c] : (d = b[c + 1 & 15], e = b[c + 14 & 15], d = b[c & 15] = (d >>> 7 ^ d >>> 18 ^ d >>> 3 ^ d << 25 ^ d << 14) + (e >>> 17 ^ e >>> 19 ^ e >>> 10 ^ e << 15 ^ e << 13) + b[c & 15] + b[c + 9 & 15] | 0), d = d + q + (m >>> 6 ^ m >>> 11 ^ m >>> 25 ^ m << 26 ^ m << 21 ^ m << 7) + (r ^ m & (p ^ r)) + g[c], q = r, r = p, p = m, m = n + d | 0, n = l, l = k, k = h, h = d + (k & l ^ n & (k ^ l)) + (k >>> 2 ^ k >>> 13 ^ k >>> 22 ^ k << 30 ^ k << 19 ^ k << 10) | 0; f[0] = f[0] + h | 0; f[1] = f[1] + k | 0; f[2] = f[2] + l | 0; f[3] = f[3] + n | 0; f[4] = f[4] + m | 0; f[5] = f[5] + p | 0; f[6] = f[6] + r | 0; f[7] = f[7] + q | 0 } sjcl.mode.ccm = { name: "ccm", G: [], listenProgress: function(a) { sjcl.mode.ccm.G.push(a) }, unListenProgress: function(a) { a = sjcl.mode.ccm.G.indexOf(a); - 1 < a && sjcl.mode.ccm.G.splice(a, 1) }, fa: function(a) { var b = sjcl.mode.ccm.G.slice(), c; for (c = 0; c < b.length; c += 1) b[c](a) }, encrypt: function(a, b, c, d, e) { var f, g = b.slice(0), h = sjcl.bitArray, k = h.bitLength(c) / 8, l = h.bitLength(g) / 8; e = e || 64; d = d || []; if (7 > k) throw new sjcl.exception.invalid("ccm: iv must be at least 7 bytes"); for (f = 2; 4 > f && l >>> 8 * f; f++); f < 15 - k && (f = 15 - k); c = h.clamp(c, 8 * (15 - f)); b = sjcl.mode.ccm.V(a, b, c, d, e, f); g = sjcl.mode.ccm.C(a, g, c, b, e, f); return h.concat(g.data, g.tag) }, decrypt: function(a, b, c, d, e) { e = e || 64; d = d || []; var f = sjcl.bitArray, g = f.bitLength(c) / 8, h = f.bitLength(b), k = f.clamp(b, h - e), l = f.bitSlice(b, h - e), h = (h - e) / 8; if (7 > g) throw new sjcl.exception.invalid("ccm: iv must be at least 7 bytes"); for (b = 2; 4 > b && h >>> 8 * b; b++); b < 15 - g && (b = 15 - g); c = f.clamp(c, 8 * (15 - b)); k = sjcl.mode.ccm.C(a, k, c, l, e, b); a = sjcl.mode.ccm.V(a, k.data, c, d, e, b); if (!f.equal(k.tag, a)) throw new sjcl.exception.corrupt("ccm: tag doesn't match"); return k.data }, na: function(a, b, c, d, e, f) { var g = [], h = sjcl.bitArray, k = h.i; d = [h.partial(8, (b.length ? 64 : 0) | d - 2 << 2 | f - 1)]; d = h.concat(d, c); d[3] |= e; d = a.encrypt(d); if (b.length) for (c = h.bitLength(b) / 8, 65279 >= c ? g = [h.partial(16, c)] : 0xffffffff >= c && (g = h.concat([h.partial(16, 65534)], [c])), g = h.concat(g, b), b = 0; b < g.length; b += 4) d = a.encrypt(k(d, g.slice(b, b + 4).concat([0, 0, 0]))); return d }, V: function(a, b, c, d, e, f) { var g = sjcl.bitArray, h = g.i; e /= 8; if (e % 2 || 4 > e || 16 < e) throw new sjcl.exception.invalid("ccm: invalid tag length"); if (0xffffffff < d.length || 0xffffffff < b.length) throw new sjcl.exception.bug("ccm: can't deal with 4GiB or more data"); c = sjcl.mode.ccm.na(a, d, c, e, g.bitLength(b) / 8, f); for (d = 0; d < b.length; d += 4) c = a.encrypt(h(c, b.slice(d, d + 4).concat([0, 0, 0]))); return g.clamp(c, 8 * e) }, C: function(a, b, c, d, e, f) { var g, h = sjcl.bitArray; g = h.i; var k = b.length, l = h.bitLength(b), n = k / 50, m = n; c = h.concat([h.partial(8, f - 1)], c).concat([0, 0, 0]).slice(0, 4); d = h.bitSlice(g(d, a.encrypt(c)), 0, e); if (!k) return { tag: d, data: [] }; for (g = 0; g < k; g += 4) g > n && (sjcl.mode.ccm.fa(g / k), n += m), c[3]++, e = a.encrypt(c), b[g] ^= e[0], b[g + 1] ^= e[1], b[g + 2] ^= e[2], b[g + 3] ^= e[3]; return { tag: d, data: h.clamp(b, l) } } }; sjcl.mode.ocb2 = { name: "ocb2", encrypt: function(a, b, c, d, e, f) { if (128 !== sjcl.bitArray.bitLength(c)) throw new sjcl.exception.invalid("ocb iv must be 128 bits"); var g, h = sjcl.mode.ocb2.S, k = sjcl.bitArray, l = k.i, n = [0, 0, 0, 0]; c = h(a.encrypt(c)); var m, p = []; d = d || []; e = e || 64; for (g = 0; g + 4 < b.length; g += 4) m = b.slice(g, g + 4), n = l(n, m), p = p.concat(l(c, a.encrypt(l(c, m)))), c = h(c); m = b.slice(g); b = k.bitLength(m); g = a.encrypt(l(c, [0, 0, 0, b])); m = k.clamp(l(m.concat([0, 0, 0]), g), b); n = l(n, l(m.concat([0, 0, 0]), g)); n = a.encrypt(l(n, l(c, h(c)))); d.length && (n = l(n, f ? d : sjcl.mode.ocb2.pmac(a, d))); return p.concat(k.concat(m, k.clamp(n, e))) }, decrypt: function(a, b, c, d, e, f) { if (128 !== sjcl.bitArray.bitLength(c)) throw new sjcl.exception.invalid("ocb iv must be 128 bits"); e = e || 64; var g = sjcl.mode.ocb2.S, h = sjcl.bitArray, k = h.i, l = [0, 0, 0, 0], n = g(a.encrypt(c)), m, p, r = sjcl.bitArray.bitLength(b) - e, q = []; d = d || []; for (c = 0; c + 4 < r / 32; c += 4) m = k(n, a.decrypt(k(n, b.slice(c, c + 4)))), l = k(l, m), q = q.concat(m), n = g(n); p = r - 32 * c; m = a.encrypt(k(n, [0, 0, 0, p])); m = k(m, h.clamp(b.slice(c), p).concat([0, 0, 0 ])); l = k(l, m); l = a.encrypt(k(l, k(n, g(n)))); d.length && (l = k(l, f ? d : sjcl.mode.ocb2.pmac(a, d))); if (!h.equal(h.clamp(l, e), h.bitSlice(b, r))) throw new sjcl.exception.corrupt("ocb: tag doesn't match"); return q.concat(h.clamp(m, p)) }, pmac: function(a, b) { var c, d = sjcl.mode.ocb2.S, e = sjcl.bitArray, f = e.i, g = [0, 0, 0, 0], h = a.encrypt([0, 0, 0, 0]), h = f(h, d(d(h))); for (c = 0; c + 4 < b.length; c += 4) h = d(h), g = f(g, a.encrypt(f(h, b.slice(c, c + 4)))); c = b.slice(c); 128 > e.bitLength(c) && (h = f(h, d(h)), c = e.concat(c, [-2147483648, 0, 0, 0])); g = f(g, c); return a.encrypt(f(d(f(h, d(h))), g)) }, S: function(a) { return [a[0] << 1 ^ a[1] >>> 31, a[1] << 1 ^ a[2] >>> 31, a[2] << 1 ^ a[3] >>> 31, a[3] << 1 ^ 135 * (a[0] >>> 31)] } }; sjcl.mode.gcm = { name: "gcm", encrypt: function(a, b, c, d, e) { var f = b.slice(0); b = sjcl.bitArray; d = d || []; a = sjcl.mode.gcm.C(!0, a, f, d, c, e || 128); return b.concat(a.data, a.tag) }, decrypt: function(a, b, c, d, e) { var f = b.slice(0), g = sjcl.bitArray, h = g.bitLength(f); e = e || 128; d = d || []; e <= h ? (b = g.bitSlice(f, h - e), f = g.bitSlice(f, 0, h - e)) : (b = f, f = []); a = sjcl.mode.gcm.C(!1, a, f, d, c, e); if (!g.equal(a.tag, b)) throw new sjcl.exception.corrupt("gcm: tag doesn't match"); return a.data }, ka: function(a, b) { var c, d, e, f, g, h = sjcl.bitArray.i; e = [0, 0, 0, 0 ]; f = b.slice(0); for (c = 0; 128 > c; c++) { (d = 0 !== (a[Math.floor(c / 32)] & 1 << 31 - c % 32)) && (e = h(e, f)); g = 0 !== (f[3] & 1); for (d = 3; 0 < d; d--) f[d] = f[d] >>> 1 | (f[d - 1] & 1) << 31; f[0] >>>= 1; g && (f[0] ^= -0x1f000000) } return e }, j: function(a, b, c) { var d, e = c.length; b = b.slice(0); for (d = 0; d < e; d += 4) b[0] ^= 0xffffffff & c[d], b[1] ^= 0xffffffff & c[d + 1], b[2] ^= 0xffffffff & c[d + 2], b[3] ^= 0xffffffff & c[d + 3], b = sjcl.mode.gcm.ka(b, a); return b }, C: function(a, b, c, d, e, f) { var g, h, k, l, n, m, p, r, q = sjcl.bitArray; m = c.length; p = q.bitLength(c); r = q.bitLength(d); h = q.bitLength(e); g = b.encrypt([0, 0, 0, 0]); 96 === h ? (e = e.slice(0), e = q.concat(e, [1])) : (e = sjcl.mode.gcm.j(g, [0, 0, 0, 0], e), e = sjcl.mode.gcm.j(g, e, [0, 0, Math.floor(h / 0x100000000), h & 0xffffffff])); h = sjcl.mode.gcm.j(g, [0, 0, 0, 0], d); n = e.slice(0); d = h.slice(0); a || (d = sjcl.mode.gcm.j(g, h, c)); for (l = 0; l < m; l += 4) n[3]++, k = b.encrypt(n), c[l] ^= k[0], c[l + 1] ^= k[1], c[l + 2] ^= k[2], c[l + 3] ^= k[3]; c = q.clamp(c, p); a && (d = sjcl.mode.gcm.j(g, h, c)); a = [Math.floor(r / 0x100000000), r & 0xffffffff, Math.floor(p / 0x100000000), p & 0xffffffff]; d = sjcl.mode.gcm.j(g, d, a); k = b.encrypt(e); d[0] ^= k[0]; d[1] ^= k[1]; d[2] ^= k[2]; d[3] ^= k[3]; return { tag: q.bitSlice(d, 0, f), data: c } } }; sjcl.misc.hmac = function(a, b) { this.W = b = b || sjcl.hash.sha256; var c = [ [], [] ], d, e = b.prototype.blockSize / 32; this.w = [new b, new b]; a.length > e && (a = b.hash(a)); for (d = 0; d < e; d++) c[0][d] = a[d] ^ 909522486, c[1][d] = a[d] ^ 1549556828; this.w[0].update(c[0]); this.w[1].update(c[1]); this.R = new b(this.w[0]) }; sjcl.misc.hmac.prototype.encrypt = sjcl.misc.hmac.prototype.mac = function(a) { if (this.aa) throw new sjcl.exception.invalid("encrypt on already updated hmac called!"); this.update(a); return this.digest(a) }; sjcl.misc.hmac.prototype.reset = function() { this.R = new this.W(this.w[0]); this.aa = !1 }; sjcl.misc.hmac.prototype.update = function(a) { this.aa = !0; this.R.update(a) }; sjcl.misc.hmac.prototype.digest = function() { var a = this.R.finalize(), a = (new this.W(this.w[1])).update(a).finalize(); this.reset(); return a }; sjcl.misc.pbkdf2 = function(a, b, c, d, e) { c = c || 1E4; if (0 > d || 0 > c) throw new sjcl.exception.invalid("invalid params to pbkdf2"); "string" === typeof a && (a = sjcl.codec.utf8String.toBits(a)); "string" === typeof b && (b = sjcl.codec.utf8String.toBits(b)); e = e || sjcl.misc.hmac; a = new e(a); var f, g, h, k, l = [], n = sjcl.bitArray; for (k = 1; 32 * l.length < (d || 1); k++) { e = f = a.encrypt(n.concat(b, [k])); for (g = 1; g < c; g++) for (f = a.encrypt(f), h = 0; h < f.length; h++) e[h] ^= f[h]; l = l.concat(e) } d && (l = n.clamp(l, d)); return l }; sjcl.prng = function(a) { this.c = [new sjcl.hash.sha256]; this.m = [0]; this.P = 0; this.H = {}; this.N = 0; this.U = {}; this.Z = this.f = this.o = this.ha = 0; this.b = [0, 0, 0, 0, 0, 0, 0, 0]; this.h = [0, 0, 0, 0]; this.L = void 0; this.M = a; this.D = !1; this.K = { progress: {}, seeded: {} }; this.u = this.ga = 0; this.I = 1; this.J = 2; this.ca = 0x10000; this.T = [0, 48, 64, 96, 128, 192, 0x100, 384, 512, 768, 1024]; this.da = 3E4; this.ba = 80 }; sjcl.prng.prototype = { randomWords: function(a, b) { var c = [], d; d = this.isReady(b); var e; if (d === this.u) throw new sjcl.exception.notReady("generator isn't seeded"); if (d & this.J) { d = !(d & this.I); e = []; var f = 0, g; this.Z = e[0] = (new Date).valueOf() + this.da; for (g = 0; 16 > g; g++) e.push(0x100000000 * Math.random() | 0); for (g = 0; g < this.c.length && (e = e.concat(this.c[g].finalize()), f += this.m[g], this.m[g] = 0, d || !(this.P & 1 << g)); g++); this.P >= 1 << this.c.length && (this.c.push(new sjcl.hash.sha256), this.m.push(0)); this.f -= f; f > this.o && (this.o = f); this.P++; this.b = sjcl.hash.sha256.hash(this.b.concat(e)); this.L = new sjcl.cipher.aes(this.b); for (d = 0; 4 > d && (this.h[d] = this.h[d] + 1 | 0, !this.h[d]); d++); } for (d = 0; d < a; d += 4) 0 === (d + 1) % this.ca && y(this), e = z(this), c.push(e[0], e[1], e[2], e[3]); y(this); return c.slice(0, a) }, setDefaultParanoia: function(a, b) { if (0 === a && "Setting paranoia=0 will ruin your security; use it only for testing" !== b) throw new sjcl.exception.invalid("Setting paranoia=0 will ruin your security; use it only for testing"); this.M = a }, addEntropy: function(a, b, c) { c = c || "user"; var d, e, f = (new Date).valueOf(), g = this.H[c], h = this.isReady(), k = 0; d = this.U[c]; void 0 === d && (d = this.U[c] = this.ha++); void 0 === g && (g = this.H[c] = 0); this.H[c] = (this.H[c] + 1) % this.c.length; switch (typeof a) { case "number": void 0 === b && (b = 1); this.c[g].update([d, this.N++, 1, b, f, 1, a | 0]); break; case "object": c = Object.prototype.toString.call(a); if ("[object Uint32Array]" === c) { e = []; for (c = 0; c < a.length; c++) e.push(a[c]); a = e } else for ("[object Array]" !== c && (k = 1), c = 0; c < a.length && !k; c++) "number" !== typeof a[c] && (k = 1); if (!k) { if (void 0 === b) for (c = b = 0; c < a.length; c++) for (e = a[c]; 0 < e;) b++, e = e >>> 1; this.c[g].update([d, this.N++, 2, b, f, a.length].concat(a)) } break; case "string": void 0 === b && (b = a.length); this.c[g].update([d, this.N++, 3, b, f, a.length]); this.c[g].update(a); break; default: k = 1 } if (k) throw new sjcl.exception.bug("random: addEntropy only supports number, array of numbers or string"); this.m[g] += b; this.f += b; h === this.u && (this.isReady() !== this.u && A("seeded", Math.max(this.o, this.f)), A("progress", this.getProgress())) }, isReady: function(a) { a = this.T[void 0 !== a ? a : this.M]; return this.o && this.o >= a ? this.m[0] > this.ba && (new Date).valueOf() > this.Z ? this.J | this.I : this.I : this.f >= a ? this.J | this.u : this.u }, getProgress: function(a) { a = this.T[a ? a : this.M]; return this.o >= a ? 1 : this.f > a ? 1 : this.f / a }, startCollectors: function() { if (!this.D) { this.a = { loadTimeCollector: B(this, this.ma), mouseCollector: B(this, this.oa), keyboardCollector: B(this, this.la), accelerometerCollector: B(this, this.ea), touchCollector: B(this, this.qa) }; if (window.addEventListener) window.addEventListener("load", this.a.loadTimeCollector, !1), window.addEventListener("mousemove", this.a.mouseCollector, !1), window.addEventListener("keypress", this.a.keyboardCollector, !1), window.addEventListener("devicemotion", this.a.accelerometerCollector, !1), window.addEventListener("touchmove", this.a.touchCollector, !1); else if (document.attachEvent) document.attachEvent("onload", this.a.loadTimeCollector), document.attachEvent("onmousemove", this.a.mouseCollector), document.attachEvent("keypress", this.a.keyboardCollector); else throw new sjcl.exception.bug("can't attach event"); this.D = !0 } }, stopCollectors: function() { this.D && (window.removeEventListener ? (window.removeEventListener("load", this.a.loadTimeCollector, !1), window.removeEventListener("mousemove", this.a.mouseCollector, !1), window.removeEventListener("keypress", this.a.keyboardCollector, !1), window.removeEventListener("devicemotion", this.a.accelerometerCollector, !1), window.removeEventListener("touchmove", this.a.touchCollector, !1)) : document.detachEvent && (document.detachEvent("onload", this.a.loadTimeCollector), document.detachEvent("onmousemove", this.a.mouseCollector), document.detachEvent("keypress", this.a.keyboardCollector)), this.D = !1) }, addEventListener: function(a, b) { this.K[a][this.ga++] = b }, removeEventListener: function(a, b) { var c, d, e = this.K[a], f = []; for (d in e) e.hasOwnProperty(d) && e[d] === b && f.push(d); for (c = 0; c < f.length; c++) d = f[c], delete e[d] }, la: function() { C(this, 1) }, oa: function(a) { var b, c; try { b = a.x || a.clientX || a.offsetX || 0, c = a.y || a.clientY || a.offsetY || 0 } catch (d) { c = b = 0 } 0 != b && 0 != c && this.addEntropy([b, c], 2, "mouse"); C(this, 0) }, qa: function(a) { a = a.touches[0] || a.changedTouches[0]; this.addEntropy([a.pageX || a.clientX, a.pageY || a.clientY], 1, "touch"); C(this, 0) }, ma: function() { C(this, 2) }, ea: function(a) { a = a.accelerationIncludingGravity.x || a.accelerationIncludingGravity.y || a.accelerationIncludingGravity.z; if (window.orientation) { var b = window.orientation; "number" === typeof b && this.addEntropy(b, 1, "accelerometer") } a && this.addEntropy(a, 2, "accelerometer"); C(this, 0) } }; function A(a, b) { var c, d = sjcl.random.K[a], e = []; for (c in d) d.hasOwnProperty(c) && e.push(d[c]); for (c = 0; c < e.length; c++) e[c](b) } function C(a, b) { "undefined" !== typeof window && window.performance && "function" === typeof window.performance.now ? a.addEntropy(window.performance.now(), b, "loadtime") : a.addEntropy((new Date).valueOf(), b, "loadtime") } function y(a) { a.b = z(a).concat(z(a)); a.L = new sjcl.cipher.aes(a.b) } function z(a) { for (var b = 0; 4 > b && (a.h[b] = a.h[b] + 1 | 0, !a.h[b]); b++); return a.L.encrypt(a.h) } function B(a, b) { return function() { b.apply(a, arguments) } } sjcl.random = new sjcl.prng(6); a: try { var D, E, F, G; if (G = "undefined" !== typeof module && module.exports) { var H; try { H = require("crypto") } catch (a) { H = null } G = E = H } if (G && E.randomBytes) D = E.randomBytes(128), D = new Uint32Array((new Uint8Array(D)).buffer), sjcl.random.addEntropy(D, 1024, "crypto['randomBytes']"); else if ("undefined" !== typeof window && "undefined" !== typeof Uint32Array) { F = new Uint32Array(32); if (window.crypto && window.crypto.getRandomValues) window.crypto.getRandomValues(F); else if (window.msCrypto && window.msCrypto.getRandomValues) window.msCrypto.getRandomValues(F); else break a; sjcl.random.addEntropy(F, 1024, "crypto['getRandomValues']") } } catch (a) { "undefined" !== typeof window && window.console && (console.log("There was an error collecting entropy from the browser:"), console.log(a)) } sjcl.json = { defaults: { v: 1, iter: 1E4, ks: 128, ts: 64, mode: "ccm", adata: "", cipher: "aes" }, ja: function(a, b, c, d) { c = c || {}; d = d || {}; var e = sjcl.json, f = e.g({ iv: sjcl.random.randomWords(4, 0) }, e.defaults), g; e.g(f, c); c = f.adata; "string" === typeof f.salt && (f.salt = sjcl.codec.base64.toBits(f.salt)); "string" === typeof f.iv && (f.iv = sjcl.codec.base64.toBits(f.iv)); if (!sjcl.mode[f.mode] || !sjcl.cipher[f.cipher] || "string" === typeof a && 100 >= f.iter || 64 !== f.ts && 96 !== f.ts && 128 !== f.ts || 128 !== f.ks && 192 !== f.ks && 0x100 !== f.ks || 2 > f.iv.length || 4 < f.iv.length) throw new sjcl.exception.invalid("json encrypt: invalid parameters"); "string" === typeof a ? (g = sjcl.misc.cachedPbkdf2(a, f), a = g.key.slice(0, f.ks / 32), f.salt = g.salt) : sjcl.ecc && a instanceof sjcl.ecc.elGamal.publicKey && (g = a.kem(), f.kemtag = g.tag, a = g.key.slice(0, f.ks / 32)); "string" === typeof b && (b = sjcl.codec.utf8String.toBits(b)); "string" === typeof c && (f.adata = c = sjcl.codec.utf8String.toBits(c)); g = new sjcl.cipher[f.cipher](a); e.g(d, f); d.key = a; f.ct = "ccm" === f.mode && sjcl.arrayBuffer && sjcl.arrayBuffer.ccm && b instanceof ArrayBuffer ? sjcl.arrayBuffer.ccm.encrypt(g, b, f.iv, c, f.ts) : sjcl.mode[f.mode].encrypt(g, b, f.iv, c, f.ts); return f }, encrypt: function(a, b, c, d) { var e = sjcl.json, f = e.ja.apply(e, arguments); return e.encode(f) }, ia: function(a, b, c, d) { c = c || {}; d = d || {}; var e = sjcl.json; b = e.g(e.g(e.g({}, e.defaults), b), c, !0); var f, g; f = b.adata; "string" === typeof b.salt && (b.salt = sjcl.codec.base64.toBits(b.salt)); "string" === typeof b.iv && (b.iv = sjcl.codec.base64.toBits(b.iv)); if (!sjcl.mode[b.mode] || !sjcl.cipher[b.cipher] || "string" === typeof a && 100 >= b.iter || 64 !== b.ts && 96 !== b.ts && 128 !== b.ts || 128 !== b.ks && 192 !== b.ks && 0x100 !== b.ks || !b.iv || 2 > b.iv.length || 4 < b.iv.length) throw new sjcl.exception.invalid("json decrypt: invalid parameters"); "string" === typeof a ? (g = sjcl.misc.cachedPbkdf2(a, b), a = g.key.slice(0, b.ks / 32), b.salt = g.salt) : sjcl.ecc && a instanceof sjcl.ecc.elGamal.secretKey && (a = a.unkem(sjcl.codec.base64.toBits(b.kemtag)).slice(0, b.ks / 32)); "string" === typeof f && (f = sjcl.codec.utf8String.toBits(f)); g = new sjcl.cipher[b.cipher](a); f = "ccm" === b.mode && sjcl.arrayBuffer && sjcl.arrayBuffer.ccm && b.ct instanceof ArrayBuffer ? sjcl.arrayBuffer.ccm.decrypt(g, b.ct, b.iv, b.tag, f, b.ts) : sjcl.mode[b.mode].decrypt(g, b.ct, b.iv, f, b.ts); e.g(d, b); d.key = a; return 1 === c.raw ? f : sjcl.codec.utf8String.fromBits(f) }, decrypt: function(a, b, c, d) { var e = sjcl.json; return e.ia(a, e.decode(b), c, d) }, encode: function(a) { var b, c = "{", d = ""; for (b in a) if (a.hasOwnProperty(b)) { if (!b.match(/^[a-z0-9]+$/i)) throw new sjcl.exception.invalid("json encode: invalid property name"); c += d + '"' + b + '":'; d = ","; switch (typeof a[b]) { case "number": case "boolean": c += a[b]; break; case "string": c += '"' + escape(a[b]) + '"'; break; case "object": c += '"' + sjcl.codec.base64.fromBits(a[b], 0) + '"'; break; default: throw new sjcl.exception.bug("json encode: unsupported type"); } } return c + "}" }, decode: function(a) { a = a.replace(/\s/g, ""); if (!a.match(/^\{.*\}$/)) throw new sjcl.exception.invalid("json decode: this isn't json!"); a = a.replace(/^\{|\}$/g, "").split(/,/); var b = {}, c, d; for (c = 0; c < a.length; c++) { if (!(d = a[c].match(/^\s*(?:(["']?)([a-z][a-z0-9]*)\1)\s*:\s*(?:(-?\d+)|"([a-z0-9+\/%*_.@=\-]*)"|(true|false))$/i))) throw new sjcl.exception.invalid("json decode: this isn't json!"); null != d[3] ? b[d[2]] = parseInt(d[3], 10) : null != d[4] ? b[d[2]] = d[2].match(/^(ct|adata|salt|iv)$/) ? sjcl.codec.base64.toBits(d[4]) : unescape(d[4]) : null != d[5] && (b[d[2]] = "true" === d[5]) } return b }, g: function(a, b, c) { void 0 === a && (a = {}); if (void 0 === b) return a; for (var d in b) if (b.hasOwnProperty(d)) { if (c && void 0 !== a[d] && a[d] !== b[d]) throw new sjcl.exception.invalid("required parameter overridden"); a[d] = b[d] } return a }, sa: function(a, b) { var c = {}, d; for (d in a) a.hasOwnProperty(d) && a[d] !== b[d] && (c[d] = a[d]); return c }, ra: function(a, b) { var c = {}, d; for (d = 0; d < b.length; d++) void 0 !== a[b[d]] && (c[b[d]] = a[b[d]]); return c } }; sjcl.encrypt = sjcl.json.encrypt; sjcl.decrypt = sjcl.json.decrypt; sjcl.misc.pa = {}; sjcl.misc.cachedPbkdf2 = function(a, b) { var c = sjcl.misc.pa, d; b = b || {}; d = b.iter || 1E3; c = c[a] = c[a] || {}; d = c[d] = c[d] || { firstSalt: b.salt && b.salt.length ? b.salt.slice(0) : sjcl.random.randomWords(2, 0) }; c = void 0 === b.salt ? d.firstSalt : b.salt; d[c] = d[c] || sjcl.misc.pbkdf2(a, c, b.iter); return { key: d[c].slice(0), salt: c.slice(0) } }; "undefined" !== typeof module && module.exports && (module.exports = sjcl); "function" === typeof define && define([], function() { return sjcl });