joplin/ReactNativeClient/lib/vendor/sjcl-rn.js

// https://github.com/bitwiseshiftleft/sjcl
// Commit: 4fc74ff92fd6b836cc596cc0ee940ef6cc8db7c6
//
// NOTE: Need a special version of this lib for React Native. The following patch has been applied to the below code:
//
// - try{H=require('crypto')}catch(a){H=null}
// + try{H=null}catch(a){H=null}
//
// This is because crypto is not part of React Native and that code will throw an exception.
// The crypto module is apparently used only for random number generation - https://github.com/pouchdb/pouchdb/issues/3787
"use strict";
var sjcl = {
	cipher: {},
	hash: {},
	keyexchange: {},
	mode: {},
	misc: {},
	codec: {},
	exception: {
		corrupt: function(a) {
			this.toString = function() {
				return "CORRUPT: " + this.message;
			};
			this.message = a;
		},
		invalid: function(a) {
			this.toString = function() {
				return "INVALID: " + this.message;
			};
			this.message = a;
		},
		bug: function(a) {
			this.toString = function() {
				return "BUG: " + this.message;
			};
			this.message = a;
		},
		notReady: function(a) {
			this.toString = function() {
				return "NOT READY: " + this.message;
			};
			this.message = a;
		},
	},
};
sjcl.cipher.aes = function(a) {
	this.s[0][0][0] || this.O();
	var b,
		c,
		d,
		e,
		f = this.s[0][4],
		g = this.s[1];
	b = a.length;
	var h = 1;
	if (4 !== b && 6 !== b && 8 !== b) throw new sjcl.exception.invalid("invalid aes key size");
	this.b = [(d = a.slice(0)), (e = [])];
	for (a = b; a < 4 * b + 28; a++) {
		c = d[a - 1];
		if (0 === a % b || (8 === b && 4 === a % b))
			(c = (f[c >>> 24] << 24) ^ (f[(c >> 16) & 255] << 16) ^ (f[(c >> 8) & 255] << 8) ^ f[c & 255]), 0 === a % b && ((c = (c << 8) ^ (c >>> 24) ^ (h << 24)), (h = (h << 1) ^ (283 * (h >> 7))));
		d[a] = d[a - b] ^ c;
	}
	for (b = 0; a; b++, a--) (c = d[b & 3 ? a : a - 4]), (e[b] = 4 >= a || 4 > b ? c : g[0][f[c >>> 24]] ^ g[1][f[(c >> 16) & 255]] ^ g[2][f[(c >> 8) & 255]] ^ g[3][f[c & 255]]);
};
sjcl.cipher.aes.prototype = {
	encrypt: function(a) {
		return t(this, a, 0);
	},
	decrypt: function(a) {
		return t(this, a, 1);
	},
	s: [[[], [], [], [], []], [[], [], [], [], []]],
	O: function() {
		var a = this.s[0],
			b = this.s[1],
			c = a[4],
			d = b[4],
			e,
			f,
			g,
			h = [],
			k = [],
			l,
			n,
			m,
			p;
		for (e = 0; 0x100 > e; e++) k[(h[e] = (e << 1) ^ (283 * (e >> 7))) ^ e] = e;
		for (f = g = 0; !c[f]; f ^= l || 1, g = k[g] || 1)
			for (
				m = g ^ (g << 1) ^ (g << 2) ^ (g << 3) ^ (g << 4),
					m = (m >> 8) ^ (m & 255) ^ 99,
					c[f] = m,
					d[m] = f,
					n = h[(e = h[(l = h[f])])],
					p = (0x1010101 * n) ^ (0x10001 * e) ^ (0x101 * l) ^ (0x1010100 * f),
					n = (0x101 * h[m]) ^ (0x1010100 * m),
					e = 0;
				4 > e;
				e++
			)
				(a[e][f] = n = (n << 24) ^ (n >>> 8)), (b[e][m] = p = (p << 24) ^ (p >>> 8));
		for (e = 0; 5 > e; e++) (a[e] = a[e].slice(0)), (b[e] = b[e].slice(0));
	},
};
function t(a, b, c) {
	if (4 !== b.length) throw new sjcl.exception.invalid("invalid aes block size");
	var d = a.b[c],
		e = b[0] ^ d[0],
		f = b[c ? 3 : 1] ^ d[1],
		g = b[2] ^ d[2];
	b = b[c ? 1 : 3] ^ d[3];
	var h,
		k,
		l,
		n = d.length / 4 - 2,
		m,
		p = 4,
		r = [0, 0, 0, 0];
	h = a.s[c];
	a = h[0];
	var q = h[1],
		v = h[2],
		w = h[3],
		x = h[4];
	for (m = 0; m < n; m++)
		(h = a[e >>> 24] ^ q[(f >> 16) & 255] ^ v[(g >> 8) & 255] ^ w[b & 255] ^ d[p]),
			(k = a[f >>> 24] ^ q[(g >> 16) & 255] ^ v[(b >> 8) & 255] ^ w[e & 255] ^ d[p + 1]),
			(l = a[g >>> 24] ^ q[(b >> 16) & 255] ^ v[(e >> 8) & 255] ^ w[f & 255] ^ d[p + 2]),
			(b = a[b >>> 24] ^ q[(e >> 16) & 255] ^ v[(f >> 8) & 255] ^ w[g & 255] ^ d[p + 3]),
			(p += 4),
			(e = h),
			(f = k),
			(g = l);
	for (m = 0; 4 > m; m++) (r[c ? 3 & -m : m] = (x[e >>> 24] << 24) ^ (x[(f >> 16) & 255] << 16) ^ (x[(g >> 8) & 255] << 8) ^ x[b & 255] ^ d[p++]), (h = e), (e = f), (f = g), (g = b), (b = h);
	return r;
}
sjcl.bitArray = {
	bitSlice: function(a, b, c) {
		a = sjcl.bitArray.$(a.slice(b / 32), 32 - (b & 31)).slice(1);
		return void 0 === c ? a : sjcl.bitArray.clamp(a, c - b);
	},
	extract: function(a, b, c) {
		var d = Math.floor((-b - c) & 31);
		return (((b + c - 1) ^ b) & -32 ? (a[(b / 32) | 0] << (32 - d)) ^ (a[(b / 32 + 1) | 0] >>> d) : a[(b / 32) | 0] >>> d) & ((1 << c) - 1);
	},
	concat: function(a, b) {
		if (0 === a.length || 0 === b.length) return a.concat(b);
		var c = a[a.length - 1],
			d = sjcl.bitArray.getPartial(c);
		return 32 === d ? a.concat(b) : sjcl.bitArray.$(b, d, c | 0, a.slice(0, a.length - 1));
	},
	bitLength: function(a) {
		var b = a.length;
		return 0 === b ? 0 : 32 * (b - 1) + sjcl.bitArray.getPartial(a[b - 1]);
	},
	clamp: function(a, b) {
		if (32 * a.length < b) return a;
		a = a.slice(0, Math.ceil(b / 32));
		var c = a.length;
		b = b & 31;
		0 < c && b && (a[c - 1] = sjcl.bitArray.partial(b, a[c - 1] & (2147483648 >> (b - 1)), 1));
		return a;
	},
	partial: function(a, b, c) {
		return 32 === a ? b : (c ? b | 0 : b << (32 - a)) + 0x10000000000 * a;
	},
	getPartial: function(a) {
		return Math.round(a / 0x10000000000) || 32;
	},
	equal: function(a, b) {
		if (sjcl.bitArray.bitLength(a) !== sjcl.bitArray.bitLength(b)) return !1;
		var c = 0,
			d;
		for (d = 0; d < a.length; d++) c |= a[d] ^ b[d];
		return 0 === c;
	},
	$: function(a, b, c, d) {
		var e;
		e = 0;
		for (void 0 === d && (d = []); 32 <= b; b -= 32) d.push(c), (c = 0);
		if (0 === b) return d.concat(a);
		for (e = 0; e < a.length; e++) d.push(c | (a[e] >>> b)), (c = a[e] << (32 - b));
		e = a.length ? a[a.length - 1] : 0;
		a = sjcl.bitArray.getPartial(e);
		d.push(sjcl.bitArray.partial((b + a) & 31, 32 < b + a ? c : d.pop(), 1));
		return d;
	},
	i: function(a, b) {
		return [a[0] ^ b[0], a[1] ^ b[1], a[2] ^ b[2], a[3] ^ b[3]];
	},
	byteswapM: function(a) {
		var b, c;
		for (b = 0; b < a.length; ++b) (c = a[b]), (a[b] = (c >>> 24) | ((c >>> 8) & 0xff00) | ((c & 0xff00) << 8) | (c << 24));
		return a;
	},
};
sjcl.codec.utf8String = {
	fromBits: function(a) {
		var b = "",
			c = sjcl.bitArray.bitLength(a),
			d,
			e;
		for (d = 0; d < c / 8; d++) 0 === (d & 3) && (e = a[d / 4]), (b += String.fromCharCode(((e >>> 8) >>> 8) >>> 8)), (e <<= 8);
		return decodeURIComponent(escape(b));
	},
	toBits: function(a) {
		a = unescape(encodeURIComponent(a));
		var b = [],
			c,
			d = 0;
		for (c = 0; c < a.length; c++) (d = (d << 8) | a.charCodeAt(c)), 3 === (c & 3) && (b.push(d), (d = 0));
		c & 3 && b.push(sjcl.bitArray.partial(8 * (c & 3), d));
		return b;
	},
};
sjcl.codec.hex = {
	fromBits: function(a) {
		var b = "",
			c;
		for (c = 0; c < a.length; c++) b += ((a[c] | 0) + 0xf00000000000).toString(16).substr(4);
		return b.substr(0, sjcl.bitArray.bitLength(a) / 4);
	},
	toBits: function(a) {
		var b,
			c = [],
			d;
		a = a.replace(/\s|0x/g, "");
		d = a.length;
		a = a + "00000000";
		for (b = 0; b < a.length; b += 8) c.push(parseInt(a.substr(b, 8), 16) ^ 0);
		return sjcl.bitArray.clamp(c, 4 * d);
	},
};
sjcl.codec.base32 = {
	B: "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",
	X: "0123456789ABCDEFGHIJKLMNOPQRSTUV",
	BITS: 32,
	BASE: 5,
	REMAINING: 27,
	fromBits: function(a, b, c) {
		var d = sjcl.codec.base32.BASE,
			e = sjcl.codec.base32.REMAINING,
			f = "",
			g = 0,
			h = sjcl.codec.base32.B,
			k = 0,
			l = sjcl.bitArray.bitLength(a);
		c && (h = sjcl.codec.base32.X);
		for (c = 0; f.length * d < l; ) (f += h.charAt((k ^ (a[c] >>> g)) >>> e)), g < d ? ((k = a[c] << (d - g)), (g += e), c++) : ((k <<= d), (g -= d));
		for (; f.length & 7 && !b; ) f += "=";
		return f;
	},
	toBits: function(a, b) {
		a = a.replace(/\s|=/g, "").toUpperCase();
		var c = sjcl.codec.base32.BITS,
			d = sjcl.codec.base32.BASE,
			e = sjcl.codec.base32.REMAINING,
			f = [],
			g,
			h = 0,
			k = sjcl.codec.base32.B,
			l = 0,
			n,
			m = "base32";
		b && ((k = sjcl.codec.base32.X), (m = "base32hex"));
		for (g = 0; g < a.length; g++) {
			n = k.indexOf(a.charAt(g));
			if (0 > n) {
				if (!b)
					try {
						return sjcl.codec.base32hex.toBits(a);
					} catch (p) {}
				throw new sjcl.exception.invalid("this isn't " + m + "!");
			}
			h > e ? ((h -= e), f.push(l ^ (n >>> h)), (l = n << (c - h))) : ((h += d), (l ^= n << (c - h)));
		}
		h & 56 && f.push(sjcl.bitArray.partial(h & 56, l, 1));
		return f;
	},
};
sjcl.codec.base32hex = {
	fromBits: function(a, b) {
		return sjcl.codec.base32.fromBits(a, b, 1);
	},
	toBits: function(a) {
		return sjcl.codec.base32.toBits(a, 1);
	},
};
sjcl.codec.base64 = {
	B: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",
	fromBits: function(a, b, c) {
		var d = "",
			e = 0,
			f = sjcl.codec.base64.B,
			g = 0,
			h = sjcl.bitArray.bitLength(a);
		c && (f = f.substr(0, 62) + "-_");
		for (c = 0; 6 * d.length < h; ) (d += f.charAt((g ^ (a[c] >>> e)) >>> 26)), 6 > e ? ((g = a[c] << (6 - e)), (e += 26), c++) : ((g <<= 6), (e -= 6));
		for (; d.length & 3 && !b; ) d += "=";
		return d;
	},
	toBits: function(a, b) {
		a = a.replace(/\s|=/g, "");
		var c = [],
			d,
			e = 0,
			f = sjcl.codec.base64.B,
			g = 0,
			h;
		b && (f = f.substr(0, 62) + "-_");
		for (d = 0; d < a.length; d++) {
			h = f.indexOf(a.charAt(d));
			if (0 > h) throw new sjcl.exception.invalid("this isn't base64!");
			26 < e ? ((e -= 26), c.push(g ^ (h >>> e)), (g = h << (32 - e))) : ((e += 6), (g ^= h << (32 - e)));
		}
		e & 56 && c.push(sjcl.bitArray.partial(e & 56, g, 1));
		return c;
	},
};
sjcl.codec.base64url = {
	fromBits: function(a) {
		return sjcl.codec.base64.fromBits(a, 1, 1);
	},
	toBits: function(a) {
		return sjcl.codec.base64.toBits(a, 1);
	},
};
sjcl.hash.sha256 = function(a) {
	this.b[0] || this.O();
	a ? ((this.F = a.F.slice(0)), (this.A = a.A.slice(0)), (this.l = a.l)) : this.reset();
};
sjcl.hash.sha256.hash = function(a) {
	return new sjcl.hash.sha256().update(a).finalize();
};
sjcl.hash.sha256.prototype = {
	blockSize: 512,
	reset: function() {
		this.F = this.Y.slice(0);
		this.A = [];
		this.l = 0;
		return this;
	},
	update: function(a) {
		"string" === typeof a && (a = sjcl.codec.utf8String.toBits(a));
		var b,
			c = (this.A = sjcl.bitArray.concat(this.A, a));
		b = this.l;
		a = this.l = b + sjcl.bitArray.bitLength(a);
		if (0x1fffffffffffff < a) throw new sjcl.exception.invalid("Cannot hash more than 2^53 - 1 bits");
		if ("undefined" !== typeof Uint32Array) {
			var d = new Uint32Array(c),
				e = 0;
			for (b = 512 + b - ((512 + b) & 0x1ff); b <= a; b += 512) u(this, d.subarray(16 * e, 16 * (e + 1))), (e += 1);
			c.splice(0, 16 * e);
		} else for (b = 512 + b - ((512 + b) & 0x1ff); b <= a; b += 512) u(this, c.splice(0, 16));
		return this;
	},
	finalize: function() {
		var a,
			b = this.A,
			c = this.F,
			b = sjcl.bitArray.concat(b, [sjcl.bitArray.partial(1, 1)]);
		for (a = b.length + 2; a & 15; a++) b.push(0);
		b.push(Math.floor(this.l / 0x100000000));
		for (b.push(this.l | 0); b.length; ) u(this, b.splice(0, 16));
		this.reset();
		return c;
	},
	Y: [],
	b: [],
	O: function() {
		function a(a) {
			return (0x100000000 * (a - Math.floor(a))) | 0;
		}
		for (var b = 0, c = 2, d, e; 64 > b; c++) {
			e = !0;
			for (d = 2; d * d <= c; d++)
				if (0 === c % d) {
					e = !1;
					break;
				}
			e && (8 > b && (this.Y[b] = a(Math.pow(c, 0.5))), (this.b[b] = a(Math.pow(c, 1 / 3))), b++);
		}
	},
};
function u(a, b) {
	var c,
		d,
		e,
		f = a.F,
		g = a.b,
		h = f[0],
		k = f[1],
		l = f[2],
		n = f[3],
		m = f[4],
		p = f[5],
		r = f[6],
		q = f[7];
	for (c = 0; 64 > c; c++)
		16 > c
			? (d = b[c])
			: ((d = b[(c + 1) & 15]),
			  (e = b[(c + 14) & 15]),
			  (d = b[c & 15] = (((d >>> 7) ^ (d >>> 18) ^ (d >>> 3) ^ (d << 25) ^ (d << 14)) + ((e >>> 17) ^ (e >>> 19) ^ (e >>> 10) ^ (e << 15) ^ (e << 13)) + b[c & 15] + b[(c + 9) & 15]) | 0)),
			(d = d + q + ((m >>> 6) ^ (m >>> 11) ^ (m >>> 25) ^ (m << 26) ^ (m << 21) ^ (m << 7)) + (r ^ (m & (p ^ r))) + g[c]),
			(q = r),
			(r = p),
			(p = m),
			(m = (n + d) | 0),
			(n = l),
			(l = k),
			(k = h),
			(h = (d + ((k & l) ^ (n & (k ^ l))) + ((k >>> 2) ^ (k >>> 13) ^ (k >>> 22) ^ (k << 30) ^ (k << 19) ^ (k << 10))) | 0);
	f[0] = (f[0] + h) | 0;
	f[1] = (f[1] + k) | 0;
	f[2] = (f[2] + l) | 0;
	f[3] = (f[3] + n) | 0;
	f[4] = (f[4] + m) | 0;
	f[5] = (f[5] + p) | 0;
	f[6] = (f[6] + r) | 0;
	f[7] = (f[7] + q) | 0;
}
sjcl.mode.ccm = {
	name: "ccm",
	G: [],
	listenProgress: function(a) {
		sjcl.mode.ccm.G.push(a);
	},
	unListenProgress: function(a) {
		a = sjcl.mode.ccm.G.indexOf(a);
		-1 < a && sjcl.mode.ccm.G.splice(a, 1);
	},
	fa: function(a) {
		var b = sjcl.mode.ccm.G.slice(),
			c;
		for (c = 0; c < b.length; c += 1) b[c](a);
	},
	encrypt: function(a, b, c, d, e) {
		var f,
			g = b.slice(0),
			h = sjcl.bitArray,
			k = h.bitLength(c) / 8,
			l = h.bitLength(g) / 8;
		e = e || 64;
		d = d || [];
		if (7 > k) throw new sjcl.exception.invalid("ccm: iv must be at least 7 bytes");
		for (f = 2; 4 > f && l >>> (8 * f); f++);
		f < 15 - k && (f = 15 - k);
		c = h.clamp(c, 8 * (15 - f));
		b = sjcl.mode.ccm.V(a, b, c, d, e, f);
		g = sjcl.mode.ccm.C(a, g, c, b, e, f);
		return h.concat(g.data, g.tag);
	},
	decrypt: function(a, b, c, d, e) {
		e = e || 64;
		d = d || [];
		var f = sjcl.bitArray,
			g = f.bitLength(c) / 8,
			h = f.bitLength(b),
			k = f.clamp(b, h - e),
			l = f.bitSlice(b, h - e),
			h = (h - e) / 8;
		if (7 > g) throw new sjcl.exception.invalid("ccm: iv must be at least 7 bytes");
		for (b = 2; 4 > b && h >>> (8 * b); b++);
		b < 15 - g && (b = 15 - g);
		c = f.clamp(c, 8 * (15 - b));
		k = sjcl.mode.ccm.C(a, k, c, l, e, b);
		a = sjcl.mode.ccm.V(a, k.data, c, d, e, b);
		if (!f.equal(k.tag, a)) throw new sjcl.exception.corrupt("ccm: tag doesn't match");
		return k.data;
	},
	na: function(a, b, c, d, e, f) {
		var g = [],
			h = sjcl.bitArray,
			k = h.i;
		d = [h.partial(8, (b.length ? 64 : 0) | ((d - 2) << 2) | (f - 1))];
		d = h.concat(d, c);
		d[3] |= e;
		d = a.encrypt(d);
		if (b.length)
			for (c = h.bitLength(b) / 8, 65279 >= c ? (g = [h.partial(16, c)]) : 0xffffffff >= c && (g = h.concat([h.partial(16, 65534)], [c])), g = h.concat(g, b), b = 0; b < g.length; b += 4)
				d = a.encrypt(k(d, g.slice(b, b + 4).concat([0, 0, 0])));
		return d;
	},
	V: function(a, b, c, d, e, f) {
		var g = sjcl.bitArray,
			h = g.i;
		e /= 8;
		if (e % 2 || 4 > e || 16 < e) throw new sjcl.exception.invalid("ccm: invalid tag length");
		if (0xffffffff < d.length || 0xffffffff < b.length) throw new sjcl.exception.bug("ccm: can't deal with 4GiB or more data");
		c = sjcl.mode.ccm.na(a, d, c, e, g.bitLength(b) / 8, f);
		for (d = 0; d < b.length; d += 4) c = a.encrypt(h(c, b.slice(d, d + 4).concat([0, 0, 0])));
		return g.clamp(c, 8 * e);
	},
	C: function(a, b, c, d, e, f) {
		var g,
			h = sjcl.bitArray;
		g = h.i;
		var k = b.length,
			l = h.bitLength(b),
			n = k / 50,
			m = n;
		c = h
			.concat([h.partial(8, f - 1)], c)
			.concat([0, 0, 0])
			.slice(0, 4);
		d = h.bitSlice(g(d, a.encrypt(c)), 0, e);
		if (!k) return { tag: d, data: [] };
		for (g = 0; g < k; g += 4) g > n && (sjcl.mode.ccm.fa(g / k), (n += m)), c[3]++, (e = a.encrypt(c)), (b[g] ^= e[0]), (b[g + 1] ^= e[1]), (b[g + 2] ^= e[2]), (b[g + 3] ^= e[3]);
		return { tag: d, data: h.clamp(b, l) };
	},
};
sjcl.mode.ocb2 = {
	name: "ocb2",
	encrypt: function(a, b, c, d, e, f) {
		if (128 !== sjcl.bitArray.bitLength(c)) throw new sjcl.exception.invalid("ocb iv must be 128 bits");
		var g,
			h = sjcl.mode.ocb2.S,
			k = sjcl.bitArray,
			l = k.i,
			n = [0, 0, 0, 0];
		c = h(a.encrypt(c));
		var m,
			p = [];
		d = d || [];
		e = e || 64;
		for (g = 0; g + 4 < b.length; g += 4) (m = b.slice(g, g + 4)), (n = l(n, m)), (p = p.concat(l(c, a.encrypt(l(c, m))))), (c = h(c));
		m = b.slice(g);
		b = k.bitLength(m);
		g = a.encrypt(l(c, [0, 0, 0, b]));
		m = k.clamp(l(m.concat([0, 0, 0]), g), b);
		n = l(n, l(m.concat([0, 0, 0]), g));
		n = a.encrypt(l(n, l(c, h(c))));
		d.length && (n = l(n, f ? d : sjcl.mode.ocb2.pmac(a, d)));
		return p.concat(k.concat(m, k.clamp(n, e)));
	},
	decrypt: function(a, b, c, d, e, f) {
		if (128 !== sjcl.bitArray.bitLength(c)) throw new sjcl.exception.invalid("ocb iv must be 128 bits");
		e = e || 64;
		var g = sjcl.mode.ocb2.S,
			h = sjcl.bitArray,
			k = h.i,
			l = [0, 0, 0, 0],
			n = g(a.encrypt(c)),
			m,
			p,
			r = sjcl.bitArray.bitLength(b) - e,
			q = [];
		d = d || [];
		for (c = 0; c + 4 < r / 32; c += 4) (m = k(n, a.decrypt(k(n, b.slice(c, c + 4))))), (l = k(l, m)), (q = q.concat(m)), (n = g(n));
		p = r - 32 * c;
		m = a.encrypt(k(n, [0, 0, 0, p]));
		m = k(m, h.clamp(b.slice(c), p).concat([0, 0, 0]));
		l = k(l, m);
		l = a.encrypt(k(l, k(n, g(n))));
		d.length && (l = k(l, f ? d : sjcl.mode.ocb2.pmac(a, d)));
		if (!h.equal(h.clamp(l, e), h.bitSlice(b, r))) throw new sjcl.exception.corrupt("ocb: tag doesn't match");
		return q.concat(h.clamp(m, p));
	},
	pmac: function(a, b) {
		var c,
			d = sjcl.mode.ocb2.S,
			e = sjcl.bitArray,
			f = e.i,
			g = [0, 0, 0, 0],
			h = a.encrypt([0, 0, 0, 0]),
			h = f(h, d(d(h)));
		for (c = 0; c + 4 < b.length; c += 4) (h = d(h)), (g = f(g, a.encrypt(f(h, b.slice(c, c + 4)))));
		c = b.slice(c);
		128 > e.bitLength(c) && ((h = f(h, d(h))), (c = e.concat(c, [-2147483648, 0, 0, 0])));
		g = f(g, c);
		return a.encrypt(f(d(f(h, d(h))), g));
	},
	S: function(a) {
		return [(a[0] << 1) ^ (a[1] >>> 31), (a[1] << 1) ^ (a[2] >>> 31), (a[2] << 1) ^ (a[3] >>> 31), (a[3] << 1) ^ (135 * (a[0] >>> 31))];
	},
};
sjcl.mode.gcm = {
	name: "gcm",
	encrypt: function(a, b, c, d, e) {
		var f = b.slice(0);
		b = sjcl.bitArray;
		d = d || [];
		a = sjcl.mode.gcm.C(!0, a, f, d, c, e || 128);
		return b.concat(a.data, a.tag);
	},
	decrypt: function(a, b, c, d, e) {
		var f = b.slice(0),
			g = sjcl.bitArray,
			h = g.bitLength(f);
		e = e || 128;
		d = d || [];
		e <= h ? ((b = g.bitSlice(f, h - e)), (f = g.bitSlice(f, 0, h - e))) : ((b = f), (f = []));
		a = sjcl.mode.gcm.C(!1, a, f, d, c, e);
		if (!g.equal(a.tag, b)) throw new sjcl.exception.corrupt("gcm: tag doesn't match");
		return a.data;
	},
	ka: function(a, b) {
		var c,
			d,
			e,
			f,
			g,
			h = sjcl.bitArray.i;
		e = [0, 0, 0, 0];
		f = b.slice(0);
		for (c = 0; 128 > c; c++) {
			(d = 0 !== (a[Math.floor(c / 32)] & (1 << (31 - c % 32)))) && (e = h(e, f));
			g = 0 !== (f[3] & 1);
			for (d = 3; 0 < d; d--) f[d] = (f[d] >>> 1) | ((f[d - 1] & 1) << 31);
			f[0] >>>= 1;
			g && (f[0] ^= -0x1f000000);
		}
		return e;
	},
	j: function(a, b, c) {
		var d,
			e = c.length;
		b = b.slice(0);
		for (d = 0; d < e; d += 4) (b[0] ^= 0xffffffff & c[d]), (b[1] ^= 0xffffffff & c[d + 1]), (b[2] ^= 0xffffffff & c[d + 2]), (b[3] ^= 0xffffffff & c[d + 3]), (b = sjcl.mode.gcm.ka(b, a));
		return b;
	},
	C: function(a, b, c, d, e, f) {
		var g,
			h,
			k,
			l,
			n,
			m,
			p,
			r,
			q = sjcl.bitArray;
		m = c.length;
		p = q.bitLength(c);
		r = q.bitLength(d);
		h = q.bitLength(e);
		g = b.encrypt([0, 0, 0, 0]);
		96 === h ? ((e = e.slice(0)), (e = q.concat(e, [1]))) : ((e = sjcl.mode.gcm.j(g, [0, 0, 0, 0], e)), (e = sjcl.mode.gcm.j(g, e, [0, 0, Math.floor(h / 0x100000000), h & 0xffffffff])));
		h = sjcl.mode.gcm.j(g, [0, 0, 0, 0], d);
		n = e.slice(0);
		d = h.slice(0);
		a || (d = sjcl.mode.gcm.j(g, h, c));
		for (l = 0; l < m; l += 4) n[3]++, (k = b.encrypt(n)), (c[l] ^= k[0]), (c[l + 1] ^= k[1]), (c[l + 2] ^= k[2]), (c[l + 3] ^= k[3]);
		c = q.clamp(c, p);
		a && (d = sjcl.mode.gcm.j(g, h, c));
		a = [Math.floor(r / 0x100000000), r & 0xffffffff, Math.floor(p / 0x100000000), p & 0xffffffff];
		d = sjcl.mode.gcm.j(g, d, a);
		k = b.encrypt(e);
		d[0] ^= k[0];
		d[1] ^= k[1];
		d[2] ^= k[2];
		d[3] ^= k[3];
		return { tag: q.bitSlice(d, 0, f), data: c };
	},
};
sjcl.misc.hmac = function(a, b) {
	this.W = b = b || sjcl.hash.sha256;
	var c = [[], []],
		d,
		e = b.prototype.blockSize / 32;
	this.w = [new b(), new b()];
	a.length > e && (a = b.hash(a));
	for (d = 0; d < e; d++) (c[0][d] = a[d] ^ 909522486), (c[1][d] = a[d] ^ 1549556828);
	this.w[0].update(c[0]);
	this.w[1].update(c[1]);
	this.R = new b(this.w[0]);
};
sjcl.misc.hmac.prototype.encrypt = sjcl.misc.hmac.prototype.mac = function(a) {
	if (this.aa) throw new sjcl.exception.invalid("encrypt on already updated hmac called!");
	this.update(a);
	return this.digest(a);
};
sjcl.misc.hmac.prototype.reset = function() {
	this.R = new this.W(this.w[0]);
	this.aa = !1;
};
sjcl.misc.hmac.prototype.update = function(a) {
	this.aa = !0;
	this.R.update(a);
};
sjcl.misc.hmac.prototype.digest = function() {
	var a = this.R.finalize(),
		a = new this.W(this.w[1]).update(a).finalize();
	this.reset();
	return a;
};
sjcl.misc.pbkdf2 = function(a, b, c, d, e) {
	c = c || 1e4;
	if (0 > d || 0 > c) throw new sjcl.exception.invalid("invalid params to pbkdf2");
	"string" === typeof a && (a = sjcl.codec.utf8String.toBits(a));
	"string" === typeof b && (b = sjcl.codec.utf8String.toBits(b));
	e = e || sjcl.misc.hmac;
	a = new e(a);
	var f,
		g,
		h,
		k,
		l = [],
		n = sjcl.bitArray;
	for (k = 1; 32 * l.length < (d || 1); k++) {
		e = f = a.encrypt(n.concat(b, [k]));
		for (g = 1; g < c; g++) for (f = a.encrypt(f), h = 0; h < f.length; h++) e[h] ^= f[h];
		l = l.concat(e);
	}
	d && (l = n.clamp(l, d));
	return l;
};
sjcl.prng = function(a) {
	this.c = [new sjcl.hash.sha256()];
	this.m = [0];
	this.P = 0;
	this.H = {};
	this.N = 0;
	this.U = {};
	this.Z = this.f = this.o = this.ha = 0;
	this.b = [0, 0, 0, 0, 0, 0, 0, 0];
	this.h = [0, 0, 0, 0];
	this.L = void 0;
	this.M = a;
	this.D = !1;
	this.K = { progress: {}, seeded: {} };
	this.u = this.ga = 0;
	this.I = 1;
	this.J = 2;
	this.ca = 0x10000;
	this.T = [0, 48, 64, 96, 128, 192, 0x100, 384, 512, 768, 1024];
	this.da = 3e4;
	this.ba = 80;
};
sjcl.prng.prototype = {
	randomWords: function(a, b) {
		var c = [],
			d;
		d = this.isReady(b);
		var e;
		if (d === this.u) throw new sjcl.exception.notReady("generator isn't seeded");
		if (d & this.J) {
			d = !(d & this.I);
			e = [];
			var f = 0,
				g;
			this.Z = e[0] = new Date().valueOf() + this.da;
			for (g = 0; 16 > g; g++) e.push((0x100000000 * Math.random()) | 0);
			for (g = 0; g < this.c.length && ((e = e.concat(this.c[g].finalize())), (f += this.m[g]), (this.m[g] = 0), d || !(this.P & (1 << g))); g++);
			this.P >= 1 << this.c.length && (this.c.push(new sjcl.hash.sha256()), this.m.push(0));
			this.f -= f;
			f > this.o && (this.o = f);
			this.P++;
			this.b = sjcl.hash.sha256.hash(this.b.concat(e));
			this.L = new sjcl.cipher.aes(this.b);
			for (d = 0; 4 > d && ((this.h[d] = (this.h[d] + 1) | 0), !this.h[d]); d++);
		}
		for (d = 0; d < a; d += 4) 0 === (d + 1) % this.ca && y(this), (e = z(this)), c.push(e[0], e[1], e[2], e[3]);
		y(this);
		return c.slice(0, a);
	},
	setDefaultParanoia: function(a, b) {
		if (0 === a && "Setting paranoia=0 will ruin your security; use it only for testing" !== b) throw new sjcl.exception.invalid("Setting paranoia=0 will ruin your security; use it only for testing");
		this.M = a;
	},
	addEntropy: function(a, b, c) {
		c = c || "user";
		var d,
			e,
			f = new Date().valueOf(),
			g = this.H[c],
			h = this.isReady(),
			k = 0;
		d = this.U[c];
		void 0 === d && (d = this.U[c] = this.ha++);
		void 0 === g && (g = this.H[c] = 0);
		this.H[c] = (this.H[c] + 1) % this.c.length;
		switch (typeof a) {
			case "number":
				void 0 === b && (b = 1);
				this.c[g].update([d, this.N++, 1, b, f, 1, a | 0]);
				break;
			case "object":
				c = Object.prototype.toString.call(a);
				if ("[object Uint32Array]" === c) {
					e = [];
					for (c = 0; c < a.length; c++) e.push(a[c]);
					a = e;
				} else for ("[object Array]" !== c && (k = 1), c = 0; c < a.length && !k; c++) "number" !== typeof a[c] && (k = 1);
				if (!k) {
					if (void 0 === b) for (c = b = 0; c < a.length; c++) for (e = a[c]; 0 < e; ) b++, (e = e >>> 1);
					this.c[g].update([d, this.N++, 2, b, f, a.length].concat(a));
				}
				break;
			case "string":
				void 0 === b && (b = a.length);
				this.c[g].update([d, this.N++, 3, b, f, a.length]);
				this.c[g].update(a);
				break;
			default:
				k = 1;
		}
		if (k) throw new sjcl.exception.bug("random: addEntropy only supports number, array of numbers or string");
		this.m[g] += b;
		this.f += b;
		h === this.u && (this.isReady() !== this.u && A("seeded", Math.max(this.o, this.f)), A("progress", this.getProgress()));
	},
	isReady: function(a) {
		a = this.T[void 0 !== a ? a : this.M];
		return this.o && this.o >= a ? (this.m[0] > this.ba && new Date().valueOf() > this.Z ? this.J | this.I : this.I) : this.f >= a ? this.J | this.u : this.u;
	},
	getProgress: function(a) {
		a = this.T[a ? a : this.M];
		return this.o >= a ? 1 : this.f > a ? 1 : this.f / a;
	},
	startCollectors: function() {
		if (!this.D) {
			this.a = {
				loadTimeCollector: B(this, this.ma),
				mouseCollector: B(this, this.oa),
				keyboardCollector: B(this, this.la),
				accelerometerCollector: B(this, this.ea),
				touchCollector: B(this, this.qa),
			};
			if (window.addEventListener)
				window.addEventListener("load", this.a.loadTimeCollector, !1),
					window.addEventListener("mousemove", this.a.mouseCollector, !1),
					window.addEventListener("keypress", this.a.keyboardCollector, !1),
					window.addEventListener("devicemotion", this.a.accelerometerCollector, !1),
					window.addEventListener("touchmove", this.a.touchCollector, !1);
			else if (document.attachEvent)
				document.attachEvent("onload", this.a.loadTimeCollector), document.attachEvent("onmousemove", this.a.mouseCollector), document.attachEvent("keypress", this.a.keyboardCollector);
			else throw new sjcl.exception.bug("can't attach event");
			this.D = !0;
		}
	},
	stopCollectors: function() {
		this.D &&
			(window.removeEventListener
				? (window.removeEventListener("load", this.a.loadTimeCollector, !1),
				  window.removeEventListener("mousemove", this.a.mouseCollector, !1),
				  window.removeEventListener("keypress", this.a.keyboardCollector, !1),
				  window.removeEventListener("devicemotion", this.a.accelerometerCollector, !1),
				  window.removeEventListener("touchmove", this.a.touchCollector, !1))
				: document.detachEvent &&
				  (document.detachEvent("onload", this.a.loadTimeCollector), document.detachEvent("onmousemove", this.a.mouseCollector), document.detachEvent("keypress", this.a.keyboardCollector)),
			(this.D = !1));
	},
	addEventListener: function(a, b) {
		this.K[a][this.ga++] = b;
	},
	removeEventListener: function(a, b) {
		var c,
			d,
			e = this.K[a],
			f = [];
		for (d in e) e.hasOwnProperty(d) && e[d] === b && f.push(d);
		for (c = 0; c < f.length; c++) (d = f[c]), delete e[d];
	},
	la: function() {
		C(this, 1);
	},
	oa: function(a) {
		var b, c;
		try {
			(b = a.x || a.clientX || a.offsetX || 0), (c = a.y || a.clientY || a.offsetY || 0);
		} catch (d) {
			c = b = 0;
		}
		0 != b && 0 != c && this.addEntropy([b, c], 2, "mouse");
		C(this, 0);
	},
	qa: function(a) {
		a = a.touches[0] || a.changedTouches[0];
		this.addEntropy([a.pageX || a.clientX, a.pageY || a.clientY], 1, "touch");
		C(this, 0);
	},
	ma: function() {
		C(this, 2);
	},
	ea: function(a) {
		a = a.accelerationIncludingGravity.x || a.accelerationIncludingGravity.y || a.accelerationIncludingGravity.z;
		if (window.orientation) {
			var b = window.orientation;
			"number" === typeof b && this.addEntropy(b, 1, "accelerometer");
		}
		a && this.addEntropy(a, 2, "accelerometer");
		C(this, 0);
	},
};
function A(a, b) {
	var c,
		d = sjcl.random.K[a],
		e = [];
	for (c in d) d.hasOwnProperty(c) && e.push(d[c]);
	for (c = 0; c < e.length; c++) e[c](b);
}
function C(a, b) {
	"undefined" !== typeof window && window.performance && "function" === typeof window.performance.now
		? a.addEntropy(window.performance.now(), b, "loadtime")
		: a.addEntropy(new Date().valueOf(), b, "loadtime");
}
function y(a) {
	a.b = z(a).concat(z(a));
	a.L = new sjcl.cipher.aes(a.b);
}
function z(a) {
	for (var b = 0; 4 > b && ((a.h[b] = (a.h[b] + 1) | 0), !a.h[b]); b++);
	return a.L.encrypt(a.h);
}
function B(a, b) {
	return function() {
		b.apply(a, arguments);
	};
}
sjcl.random = new sjcl.prng(6);
a: try {
	var D, E, F, G;
	if ((G = "undefined" !== typeof module && module.exports)) {
		var H;
		try {
			H = null;
		} catch (a) {
			H = null;
		}
		G = E = H;
	}
	if (G && E.randomBytes) (D = E.randomBytes(128)), (D = new Uint32Array(new Uint8Array(D).buffer)), sjcl.random.addEntropy(D, 1024, "crypto['randomBytes']");
	else if ("undefined" !== typeof window && "undefined" !== typeof Uint32Array) {
		F = new Uint32Array(32);
		if (window.crypto && window.crypto.getRandomValues) window.crypto.getRandomValues(F);
		else if (window.msCrypto && window.msCrypto.getRandomValues) window.msCrypto.getRandomValues(F);
		else break a;
		sjcl.random.addEntropy(F, 1024, "crypto['getRandomValues']");
	}
} catch (a) {
	"undefined" !== typeof window && window.console && (console.log("There was an error collecting entropy from the browser:"), console.log(a));
}
sjcl.json = {
	defaults: { v: 1, iter: 1e4, ks: 128, ts: 64, mode: "ccm", adata: "", cipher: "aes" },
	ja: function(a, b, c, d) {
		c = c || {};
		d = d || {};
		var e = sjcl.json,
			f = e.g({ iv: sjcl.random.randomWords(4, 0) }, e.defaults),
			g;
		e.g(f, c);
		c = f.adata;
		"string" === typeof f.salt && (f.salt = sjcl.codec.base64.toBits(f.salt));
		"string" === typeof f.iv && (f.iv = sjcl.codec.base64.toBits(f.iv));
		if (
			!sjcl.mode[f.mode] ||
			!sjcl.cipher[f.cipher] ||
			("string" === typeof a && 100 >= f.iter) ||
			(64 !== f.ts && 96 !== f.ts && 128 !== f.ts) ||
			(128 !== f.ks && 192 !== f.ks && 0x100 !== f.ks) ||
			2 > f.iv.length ||
			4 < f.iv.length
		)
			throw new sjcl.exception.invalid("json encrypt: invalid parameters");
		"string" === typeof a
			? ((g = sjcl.misc.cachedPbkdf2(a, f)), (a = g.key.slice(0, f.ks / 32)), (f.salt = g.salt))
			: sjcl.ecc && a instanceof sjcl.ecc.elGamal.publicKey && ((g = a.kem()), (f.kemtag = g.tag), (a = g.key.slice(0, f.ks / 32)));
		"string" === typeof b && (b = sjcl.codec.utf8String.toBits(b));
		"string" === typeof c && (f.adata = c = sjcl.codec.utf8String.toBits(c));
		g = new sjcl.cipher[f.cipher](a);
		e.g(d, f);
		d.key = a;
		f.ct =
			"ccm" === f.mode && sjcl.arrayBuffer && sjcl.arrayBuffer.ccm && b instanceof ArrayBuffer ? sjcl.arrayBuffer.ccm.encrypt(g, b, f.iv, c, f.ts) : sjcl.mode[f.mode].encrypt(g, b, f.iv, c, f.ts);
		return f;
	},
	encrypt: function(a, b, c, d) {
		var e = sjcl.json,
			f = e.ja.apply(e, arguments);
		return e.encode(f);
	},
	ia: function(a, b, c, d) {
		c = c || {};
		d = d || {};
		var e = sjcl.json;
		b = e.g(e.g(e.g({}, e.defaults), b), c, !0);
		var f, g;
		f = b.adata;
		"string" === typeof b.salt && (b.salt = sjcl.codec.base64.toBits(b.salt));
		"string" === typeof b.iv && (b.iv = sjcl.codec.base64.toBits(b.iv));
		if (
			!sjcl.mode[b.mode] ||
			!sjcl.cipher[b.cipher] ||
			("string" === typeof a && 100 >= b.iter) ||
			(64 !== b.ts && 96 !== b.ts && 128 !== b.ts) ||
			(128 !== b.ks && 192 !== b.ks && 0x100 !== b.ks) ||
			!b.iv ||
			2 > b.iv.length ||
			4 < b.iv.length
		)
			throw new sjcl.exception.invalid("json decrypt: invalid parameters");
		"string" === typeof a
			? ((g = sjcl.misc.cachedPbkdf2(a, b)), (a = g.key.slice(0, b.ks / 32)), (b.salt = g.salt))
			: sjcl.ecc && a instanceof sjcl.ecc.elGamal.secretKey && (a = a.unkem(sjcl.codec.base64.toBits(b.kemtag)).slice(0, b.ks / 32));
		"string" === typeof f && (f = sjcl.codec.utf8String.toBits(f));
		g = new sjcl.cipher[b.cipher](a);
		f =
			"ccm" === b.mode && sjcl.arrayBuffer && sjcl.arrayBuffer.ccm && b.ct instanceof ArrayBuffer
				? sjcl.arrayBuffer.ccm.decrypt(g, b.ct, b.iv, b.tag, f, b.ts)
				: sjcl.mode[b.mode].decrypt(g, b.ct, b.iv, f, b.ts);
		e.g(d, b);
		d.key = a;
		return 1 === c.raw ? f : sjcl.codec.utf8String.fromBits(f);
	},
	decrypt: function(a, b, c, d) {
		var e = sjcl.json;
		return e.ia(a, e.decode(b), c, d);
	},
	encode: function(a) {
		var b,
			c = "{",
			d = "";
		for (b in a)
			if (a.hasOwnProperty(b)) {
				if (!b.match(/^[a-z0-9]+$/i)) throw new sjcl.exception.invalid("json encode: invalid property name");
				c += d + '"' + b + '":';
				d = ",";
				switch (typeof a[b]) {
					case "number":
					case "boolean":
						c += a[b];
						break;
					case "string":
						c += '"' + escape(a[b]) + '"';
						break;
					case "object":
						c += '"' + sjcl.codec.base64.fromBits(a[b], 0) + '"';
						break;
					default:
						throw new sjcl.exception.bug("json encode: unsupported type");
				}
			}
		return c + "}";
	},
	decode: function(a) {
		a = a.replace(/\s/g, "");
		if (!a.match(/^\{.*\}$/)) throw new sjcl.exception.invalid("json decode: this isn't json!");
		a = a.replace(/^\{|\}$/g, "").split(/,/);
		var b = {},
			c,
			d;
		for (c = 0; c < a.length; c++) {
			if (!(d = a[c].match(/^\s*(?:(["']?)([a-z][a-z0-9]*)\1)\s*:\s*(?:(-?\d+)|"([a-z0-9+\/%*_.@=\-]*)"|(true|false))$/i))) throw new sjcl.exception.invalid("json decode: this isn't json!");
			null != d[3]
				? (b[d[2]] = parseInt(d[3], 10))
				: null != d[4] ? (b[d[2]] = d[2].match(/^(ct|adata|salt|iv)$/) ? sjcl.codec.base64.toBits(d[4]) : unescape(d[4])) : null != d[5] && (b[d[2]] = "true" === d[5]);
		}
		return b;
	},
	g: function(a, b, c) {
		void 0 === a && (a = {});
		if (void 0 === b) return a;
		for (var d in b)
			if (b.hasOwnProperty(d)) {
				if (c && void 0 !== a[d] && a[d] !== b[d]) throw new sjcl.exception.invalid("required parameter overridden");
				a[d] = b[d];
			}
		return a;
	},
	sa: function(a, b) {
		var c = {},
			d;
		for (d in a) a.hasOwnProperty(d) && a[d] !== b[d] && (c[d] = a[d]);
		return c;
	},
	ra: function(a, b) {
		var c = {},
			d;
		for (d = 0; d < b.length; d++) void 0 !== a[b[d]] && (c[b[d]] = a[b[d]]);
		return c;
	},
};
sjcl.encrypt = sjcl.json.encrypt;
sjcl.decrypt = sjcl.json.decrypt;
sjcl.misc.pa = {};
sjcl.misc.cachedPbkdf2 = function(a, b) {
	var c = sjcl.misc.pa,
		d;
	b = b || {};
	d = b.iter || 1e3;
	c = c[a] = c[a] || {};
	d = c[d] = c[d] || { firstSalt: b.salt && b.salt.length ? b.salt.slice(0) : sjcl.random.randomWords(2, 0) };
	c = void 0 === b.salt ? d.firstSalt : b.salt;
	d[c] = d[c] || sjcl.misc.pbkdf2(a, c, b.iter);
	return { key: d[c].slice(0), salt: c.slice(0) };
};
"undefined" !== typeof module && module.exports && (module.exports = sjcl);
"function" === typeof define &&
	define([], function() {
		return sjcl;
	});