"use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports.encodeToCurve = exports.hashToCurve = exports.secp521r1 = exports.p521 = void 0; /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */ const sha512_1 = require("@noble/hashes/sha512"); const _shortw_utils_js_1 = require("./_shortw_utils.js"); const hash_to_curve_js_1 = require("./abstract/hash-to-curve.js"); const modular_js_1 = require("./abstract/modular.js"); const weierstrass_js_1 = require("./abstract/weierstrass.js"); // NIST secp521r1 aka p521 // Note that it's 521, which differs from 512 of its hash function. // https://www.secg.org/sec2-v2.pdf, https://neuromancer.sk/std/nist/P-521 // Field over which we'll do calculations. // prettier-ignore const P = BigInt('0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff'); const Fp = (0, modular_js_1.Field)(P); const CURVE = { a: Fp.create(BigInt('-3')), b: BigInt('0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00'), Fp, n: BigInt('0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409'), Gx: BigInt('0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66'), Gy: BigInt('0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650'), h: BigInt(1), }; // prettier-ignore exports.p521 = (0, _shortw_utils_js_1.createCurve)({ a: CURVE.a, // Equation params: a, b b: CURVE.b, Fp, // Field: 2n**521n - 1n // Curve order, total count of valid points in the field n: CURVE.n, Gx: CURVE.Gx, // Base point (x, y) aka generator point Gy: CURVE.Gy, h: CURVE.h, lowS: false, allowedPrivateKeyLengths: [130, 131, 132] // P521 keys are variable-length. Normalize to 132b }, sha512_1.sha512); exports.secp521r1 = exports.p521; const mapSWU = /* @__PURE__ */ (() => (0, weierstrass_js_1.mapToCurveSimpleSWU)(Fp, { A: CURVE.a, B: CURVE.b, Z: Fp.create(BigInt('-4')), }))(); const htf = /* @__PURE__ */ (() => (0, hash_to_curve_js_1.createHasher)(exports.secp521r1.ProjectivePoint, (scalars) => mapSWU(scalars[0]), { DST: 'P521_XMD:SHA-512_SSWU_RO_', encodeDST: 'P521_XMD:SHA-512_SSWU_NU_', p: Fp.ORDER, m: 1, k: 256, expand: 'xmd', hash: sha512_1.sha512, }))(); exports.hashToCurve = (() => htf.hashToCurve)(); exports.encodeToCurve = (() => htf.encodeToCurve)(); //# sourceMappingURL=p521.js.map