import { assertUint8 } from './assert.js' import { nativeEncoder, E_STRING } from './fallback/_utils.js' import { decodeAscii, encodeAscii, encodeLatin1 } from './fallback/latin1.js' const alphabet = [...'qpzry9x8gf2tvdw0s3jn54khce6mua7l'] const BECH32 = 1 const BECH32M = 0x2b_c8_30_a3 const E_SIZE = 'Input length is out of range' const E_PREFIX = 'Missing or invalid prefix' const E_MIXED = 'Mixed-case string' const E_PADDING = 'Padding is invalid' const E_CHECKSUM = 'Invalid checksum' const E_CHARACTER = 'Non-bech32 character' // nativeEncoder path uses encodeAscii which asserts ascii, otherwise we have 0-255 bytes from encodeLatin1 const c2x = new Int8Array(nativeEncoder ? 128 : 256).fill(-1) const x2c = new Uint8Array(32) for (let i = 0; i < alphabet.length; i++) { const c = alphabet[i].charCodeAt(0) c2x[c] = i x2c[i] = c } // checksum size is 30 bits, 0x3f_ff_ff_ff // The good thing about the checksum is that it's linear over every bit const poly0 = new Uint32Array(32) // just precache all possible ones, it's only 1 KiB const p = (x) => ((x & 0x1_ff_ff_ff) << 5) ^ poly0[x >> 25] for (let i = 0; i < 32; i++) { poly0[i] = (i & 0b0_0001 ? 0x3b_6a_57_b2 : 0) ^ (i & 0b0_0010 ? 0x26_50_8e_6d : 0) ^ (i & 0b0_0100 ? 0x1e_a1_19_fa : 0) ^ (i & 0b0_1000 ? 0x3d_42_33_dd : 0) ^ (i & 0b1_0000 ? 0x2a_14_62_b3 : 0) } // 7 KiB more for faster p6/p8 const poly1 = new Uint32Array(32) const poly2 = new Uint32Array(32) const poly3 = new Uint32Array(32) const poly4 = new Uint32Array(32) const poly5 = new Uint32Array(32) const poly6 = new Uint32Array(32) const poly7 = new Uint32Array(32) for (let i = 0; i < 32; i++) { // poly0[i] === p(p(p(p(p(p(i)))))) poly1[i] = p(poly0[i]) // aka p(p(p(p(p(p(i << 5)))))) poly2[i] = p(poly1[i]) // aka p(p(p(p(p(p(i << 10)))))) poly3[i] = p(poly2[i]) // aka p(p(p(p(p(p(i << 15)))))) poly4[i] = p(poly3[i]) // aka p(p(p(p(p(p(i << 20)))))) poly5[i] = p(poly4[i]) // aka p(p(p(p(p(p(i << 25)))))) poly6[i] = p(poly5[i]) poly7[i] = p(poly6[i]) } function p6(x) { // Same as: return p(p(p(p(p(p(x)))))) const x0 = x & 0x1f const x1 = (x >> 5) & 0x1f const x2 = (x >> 10) & 0x1f const x3 = (x >> 15) & 0x1f const x4 = (x >> 20) & 0x1f const x5 = (x >> 25) & 0x1f return poly0[x0] ^ poly1[x1] ^ poly2[x2] ^ poly3[x3] ^ poly4[x4] ^ poly5[x5] } function p8(x) { // Same as: return p(p(p(p(p(p(p(p(x)))))))) const x0 = x & 0x1f const x1 = (x >> 5) & 0x1f const x2 = (x >> 10) & 0x1f const x3 = (x >> 15) & 0x1f const x4 = (x >> 20) & 0x1f const x5 = (x >> 25) & 0x1f return poly2[x0] ^ poly3[x1] ^ poly4[x2] ^ poly5[x3] ^ poly6[x4] ^ poly7[x5] } // p(p(p(p(p(p(chk) ^ x0) ^ x1) ^ x2) ^ x3) ^ x4) ^ x5 === p6(chk) ^ merge(x0, x1, x2, x3, x4, x5) const merge = (a, b, c, d, e, f) => f ^ (e << 5) ^ (d << 10) ^ (c << 15) ^ (b << 20) ^ (a << 25) const prefixCache = new Map() // Cache 10 of them function pPrefix(prefix) { if (prefix === 'bc') return 0x2_31_80_43 // perf const cached = prefixCache.get(prefix) if (cached !== undefined) return cached // bech32_hrp_expand(s): [ord(x) >> 5 for x in s] + [0] + [ord(x) & 31 for x in s] // We can do this in a single scan due to linearity, but it's not very beneficial let chk = 1 // it starts with one (see def bech32_polymod in BIP_0173) const length = prefix.length for (let i = 0; i < length; i++) { const c = prefix.charCodeAt(i) if (c < 33 || c > 126) throw new Error(E_PREFIX) // each character having a value in the range [33-126] chk = p(chk) ^ (c >> 5) } chk = p(chk) // <= for + [0] for (let i = 0; i < length; i++) { const c = prefix.charCodeAt(i) chk = p(chk) ^ (c & 0x1f) } if (prefixCache.size < 10) prefixCache.set(prefix, chk) return chk } function toBech32enc(prefix, bytes, limit, encoding) { if (typeof prefix !== 'string' || !prefix) throw new TypeError(E_PREFIX) if (typeof limit !== 'number') throw new TypeError(E_SIZE) assertUint8(bytes) const bytesLength = bytes.length const wordsLength = Math.ceil((bytesLength * 8) / 5) if (!(prefix.length + 7 + wordsLength <= limit)) throw new TypeError(E_SIZE) prefix = prefix.toLowerCase() const out = new Uint8Array(wordsLength + 6) let chk = pPrefix(prefix) let i = 0, j = 0 // prettier-ignore // This loop is just an optimization of the next one for (const length4 = bytesLength - 4; i < length4; i += 5, j += 8) { const b0 = bytes[i], b1 = bytes[i + 1], b2 = bytes[i + 2], b3 = bytes[i + 3], b4 = bytes[i + 4] // prettier-ignore const x0 = b0 >> 3 const x1 = ((b0 << 2) & 0x1f) | (b1 >> 6) const x2 = (b1 >> 1) & 0x1f const x3 = ((b1 << 4) & 0x1f) | (b2 >> 4) const x4 = ((b2 << 1) & 0x1f) | (b3 >> 7) const x5 = (b3 >> 2) & 0x1f const x6 = ((b3 << 3) & 0x1f) | (b4 >> 5) const x7 = b4 & 0x1f chk = merge(x2, x3, x4, x5, x6, x7) ^ poly0[x1] ^ poly1[x0] ^ p8(chk) out[j] = x2c[x0] out[j + 1] = x2c[x1] out[j + 2] = x2c[x2] out[j + 3] = x2c[x3] out[j + 4] = x2c[x4] out[j + 5] = x2c[x5] out[j + 6] = x2c[x6] out[j + 7] = x2c[x7] } let value = 0, bits = 0 // prettier-ignore for (; i < bytesLength; i++) { value = ((value & 0xf) << 8) | bytes[i] bits += 3 const x = (value >> bits) & 0x1f chk = p(chk) ^ x out[j++] = x2c[x] if (bits >= 5) { bits -= 5 const x = (value >> bits) & 0x1f chk = p(chk) ^ x out[j++] = x2c[x] } } if (bits > 0) { const x = (value << (5 - bits)) & 0x1f chk = p(chk) ^ x out[j++] = x2c[x] } chk = encoding ^ p6(chk) out[j++] = x2c[(chk >> 25) & 0x1f] out[j++] = x2c[(chk >> 20) & 0x1f] out[j++] = x2c[(chk >> 15) & 0x1f] out[j++] = x2c[(chk >> 10) & 0x1f] out[j++] = x2c[(chk >> 5) & 0x1f] out[j++] = x2c[(chk >> 0) & 0x1f] return prefix + '1' + decodeAscii(out) // suboptimal in barebones, but actually ok in Hermes for not to care atm } function assertDecodeArgs(str, limit) { if (typeof str !== 'string') throw new TypeError(E_STRING) if (typeof limit !== 'number' || str.length < 8 || !(str.length <= limit)) throw new Error(E_SIZE) } // this is instant on 8-bit strings const NON_LATIN = /[^\x00-\xFF]/ // eslint-disable-line no-control-regex function fromBech32enc(str, limit, encoding) { assertDecodeArgs(str, limit) const lower = str.toLowerCase() if (str !== lower) { if (str !== str.toUpperCase()) throw new Error(E_MIXED) str = lower } const split = str.lastIndexOf('1') if (split <= 0) throw new Error(E_PREFIX) const prefix = str.slice(0, split) const charsLength = str.length - split - 1 const wordsLength = charsLength - 6 if (wordsLength < 0) throw new Error(E_SIZE) const bytesLength = (wordsLength * 5) >> 3 const slice = str.slice(split + 1) if (!nativeEncoder && NON_LATIN.test(slice)) throw new SyntaxError(E_CHARACTER) // otherwise can't use encodeLatin1 const c = nativeEncoder ? encodeAscii(slice, E_CHARACTER) : encodeLatin1(slice) // suboptimal, but only affects non-Hermes barebones const bytes = new Uint8Array(bytesLength) let chk = pPrefix(prefix) let i = 0, j = 0 // prettier-ignore // This loop is just an optimization of the next one for (const length7 = wordsLength - 7; i < length7; i += 8, j += 5) { const c0 = c[i], c1 = c[i + 1], c2 = c[i + 2], c3 = c[i + 3], c4 = c[i + 4], c5 = c[i + 5], c6 = c[i + 6], c7 = c[i + 7] // prettier-ignore const x0 = c2x[c0], x1 = c2x[c1], x2 = c2x[c2], x3 = c2x[c3], x4 = c2x[c4], x5 = c2x[c5], x6 = c2x[c6], x7 = c2x[c7] // prettier-ignore if (x0 < 0 || x1 < 0 || x2 < 0 || x3 < 0 || x4 < 0 || x5 < 0 || x6 < 0 || x7 < 0) throw new SyntaxError(E_CHARACTER) // prettier-ignore chk = merge(x2, x3, x4, x5, x6, x7) ^ poly0[x1] ^ poly1[x0] ^ p8(chk) bytes[j] = (x0 << 3) | (x1 >> 2) bytes[j + 1] = (((x1 << 6) | (x2 << 1)) & 0xff) | (x3 >> 4) bytes[j + 2] = ((x3 << 4) & 0xff) | (x4 >> 1) bytes[j + 3] = ((((x4 << 5) | x5) << 2) & 0xff) | (x6 >> 3) bytes[j + 4] = ((x6 << 5) & 0xff) | x7 } let value = 0, bits = 0 // prettier-ignore for (; i < wordsLength; i++) { const x = c2x[c[i]] if (x < 0) throw new SyntaxError(E_CHARACTER) chk = p(chk) ^ x value = (value << 5) | x bits += 5 if (bits >= 8) { bits -= 8 bytes[j++] = (value >> bits) & 0xff } } if (bits >= 5 || (value << (8 - bits)) & 0xff) throw new Error(E_PADDING) // Checksum { const c0 = c[i], c1 = c[i + 1], c2 = c[i + 2], c3 = c[i + 3], c4 = c[i + 4], c5 = c[i + 5] // prettier-ignore const x0 = c2x[c0], x1 = c2x[c1], x2 = c2x[c2], x3 = c2x[c3], x4 = c2x[c4], x5 = c2x[c5] // prettier-ignore if (x0 < 0 || x1 < 0 || x2 < 0 || x3 < 0 || x4 < 0 || x5 < 0) throw new SyntaxError(E_CHARACTER) if ((merge(x0, x1, x2, x3, x4, x5) ^ p6(chk)) !== encoding) throw new Error(E_CHECKSUM) } return { prefix, bytes } } // This is designed to be a very quick check, skipping all other validation export function getPrefix(str, limit = 90) { assertDecodeArgs(str, limit) const split = str.lastIndexOf('1') if (split <= 0) throw new Error(E_PREFIX) return str.slice(0, split).toLowerCase() } export const toBech32 = (prefix, bytes, limit = 90) => toBech32enc(prefix, bytes, limit, BECH32) export const fromBech32 = (str, limit = 90) => fromBech32enc(str, limit, BECH32) export const toBech32m = (prefix, bytes, limit = 90) => toBech32enc(prefix, bytes, limit, BECH32M) export const fromBech32m = (str, limit = 90) => fromBech32enc(str, limit, BECH32M)