From 2a7337f385f8346423752b7a7dcceae32a292aea Mon Sep 17 00:00:00 2001
From: Evan Su <48808396+HACKERALERT@users.noreply.github.com>
Date: Sun, 3 Aug 2025 12:40:05 -0400
Subject: [PATCH 1/2] Update README.md
---
README.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/README.md b/README.md
index c4568e5..0530f24 100644
--- a/README.md
+++ b/README.md
@@ -1 +1 @@
-**Moved to https://github.com/njhuffman/picogo**
+No longer supported.
From 6ef65b9d844edba70dc5ba00fc90a338e7a3d56f Mon Sep 17 00:00:00 2001
From: Evan Su <48808396+HACKERALERT@users.noreply.github.com>
Date: Sun, 3 Aug 2025 13:23:53 -0400
Subject: [PATCH 2/2] clean up
---
.github/CODEOWNERS | 2 -
.github/dependabot.yml | 6 -
.github/workflows/release-build.yml | 66 --
.github/workflows/test-build-android.yml | 50 --
.github/workflows/test-build-linux.yml | 50 --
.github/workflows/test-build-windows.yml | 50 --
.github/workflows/test-coverage.yml | 46 --
.gitignore | 1 -
.testcoverage.yml | 8 -
AndroidManifest.xml | 42 --
FyneApp.toml | 8 -
LICENSE | 674 ------------------
VERSION | 1 -
cmd/picogo/main.go | 268 -------
cmd/picogo/main_test.go | 198 -----
go.mod | 52 --
go.sum | 100 ---
icon.png | Bin 4779 -> 0 bytes
internal/encryption/ciphers.go | 226 ------
internal/encryption/consistency_test.go | 172 -----
internal/encryption/decrypt.go | 448 ------------
internal/encryption/docs/code_architecture.md | 274 -------
internal/encryption/encrypt.go | 90 ---
internal/encryption/encryption.go | 190 -----
internal/encryption/expected_errors_test.go | 174 -----
internal/encryption/header.go | 102 ---
internal/encryption/keys.go | 162 -----
internal/encryption/keys_test.go | 102 ---
.../picocrypt_compatibility_test.go | 357 ----------
.../picocrypt_samples/basefiles/base0 | 0
.../picocrypt_samples/basefiles/base1000 | Bin 1000 -> 0 bytes
.../picocrypt_samples/basefiles/base1048570 | Bin 1048570 -> 0 bytes
.../headers/zerofile1024.header | Bin 789 -> 0 bytes
.../headers/zerofile65498251264.header | Bin 789 -> 0 bytes
.../picocrypt_samples/keyfiles/keyfile1 | 2 -
.../picocrypt_samples/keyfiles/keyfile2 | 1 -
.../picocrypt_samples/v1.47/base0.pcv | Bin 789 -> 0 bytes
.../picocrypt_samples/v1.47/base0_c.pcv | Bin 810 -> 0 bytes
.../picocrypt_samples/v1.47/base0_d.pcv | Bin 829 -> 0 bytes
.../picocrypt_samples/v1.47/base0_kf1.pcv | Bin 789 -> 0 bytes
.../picocrypt_samples/v1.47/base0_kf12.pcv | Bin 789 -> 0 bytes
.../picocrypt_samples/v1.47/base0_kf12o.pcv | Bin 789 -> 0 bytes
.../picocrypt_samples/v1.47/base0_p.pcv | Bin 789 -> 0 bytes
.../v1.47/base0_p_r_d_kf12o.pcv | Bin 829 -> 0 bytes
.../picocrypt_samples/v1.47/base0_r.pcv | Bin 789 -> 0 bytes
.../picocrypt_samples/v1.47/base1000.pcv | Bin 1789 -> 0 bytes
.../picocrypt_samples/v1.47/base1000_c.pcv | Bin 1813 -> 0 bytes
.../v1.47/base1000_c_p_r_d_kf12o.pcv | Bin 1917 -> 0 bytes
.../picocrypt_samples/v1.47/base1000_d.pcv | Bin 1829 -> 0 bytes
.../picocrypt_samples/v1.47/base1000_kf1.pcv | Bin 1789 -> 0 bytes
.../picocrypt_samples/v1.47/base1000_kf12.pcv | Bin 1789 -> 0 bytes
.../v1.47/base1000_kf12o.pcv | Bin 1789 -> 0 bytes
.../picocrypt_samples/v1.47/base1000_p.pcv | Bin 1789 -> 0 bytes
.../picocrypt_samples/v1.47/base1000_r.pcv | Bin 1877 -> 0 bytes
.../picocrypt_samples/v1.47/base1048570.pcv | Bin 1049359 -> 0 bytes
.../picocrypt_samples/v1.47/base1048570_c.pcv | Bin 1049383 -> 0 bytes
.../picocrypt_samples/v1.47/base1048570_d.pcv | Bin 1049399 -> 0 bytes
.../v1.47/base1048570_kf1.pcv | Bin 1049359 -> 0 bytes
.../v1.47/base1048570_kf12.pcv | Bin 1049359 -> 0 bytes
.../v1.47/base1048570_kf12o.pcv | Bin 1049359 -> 0 bytes
.../picocrypt_samples/v1.47/base1048570_p.pcv | Bin 1049359 -> 0 bytes
.../v1.47/base1048570_p_r_d_kf12o.pcv | Bin 1114941 -> 0 bytes
.../picocrypt_samples/v1.47/base1048570_r.pcv | Bin 1114901 -> 0 bytes
.../picocrypt_samples/v1.48/base0.pcv | Bin 789 -> 0 bytes
.../picocrypt_samples/v1.48/base0_c.pcv | Bin 813 -> 0 bytes
.../picocrypt_samples/v1.48/base0_d.pcv | Bin 829 -> 0 bytes
.../picocrypt_samples/v1.48/base0_kf1.pcv | Bin 789 -> 0 bytes
.../picocrypt_samples/v1.48/base0_kf12.pcv | Bin 789 -> 0 bytes
.../picocrypt_samples/v1.48/base0_kf12o.pcv | Bin 789 -> 0 bytes
.../picocrypt_samples/v1.48/base0_p.pcv | Bin 789 -> 0 bytes
.../v1.48/base0_p_r_d_kf12o.pcv | Bin 829 -> 0 bytes
.../picocrypt_samples/v1.48/base0_r.pcv | Bin 789 -> 0 bytes
.../picocrypt_samples/v1.48/base1000.pcv | Bin 1789 -> 0 bytes
.../picocrypt_samples/v1.48/base1000_c.pcv | Bin 1813 -> 0 bytes
.../picocrypt_samples/v1.48/base1000_d.pcv | Bin 1829 -> 0 bytes
.../picocrypt_samples/v1.48/base1000_kf1.pcv | Bin 1789 -> 0 bytes
.../picocrypt_samples/v1.48/base1000_kf12.pcv | Bin 1789 -> 0 bytes
.../v1.48/base1000_kf12o.pcv | Bin 1789 -> 0 bytes
.../picocrypt_samples/v1.48/base1000_p.pcv | Bin 1789 -> 0 bytes
.../v1.48/base1000_p_r_d_kf12o.pcv | Bin 1917 -> 0 bytes
.../picocrypt_samples/v1.48/base1000_r.pcv | Bin 1877 -> 0 bytes
.../picocrypt_samples/v1.48/base1048570.pcv | Bin 1049359 -> 0 bytes
.../picocrypt_samples/v1.48/base1048570_c.pcv | Bin 1049383 -> 0 bytes
.../picocrypt_samples/v1.48/base1048570_d.pcv | Bin 1049399 -> 0 bytes
.../v1.48/base1048570_kf1.pcv | Bin 1049359 -> 0 bytes
.../v1.48/base1048570_kf12.pcv | Bin 1049359 -> 0 bytes
.../v1.48/base1048570_kf12o.pcv | Bin 1049359 -> 0 bytes
.../picocrypt_samples/v1.48/base1048570_p.pcv | Bin 1049359 -> 0 bytes
.../v1.48/base1048570_p_r_d_kf12o.pcv | Bin 1114941 -> 0 bytes
.../picocrypt_samples/v1.48/base1048570_r.pcv | Bin 1114901 -> 0 bytes
internal/encryption/reed_solomon.go | 186 -----
internal/encryption/stream.go | 40 --
internal/ui/elements.go | 291 --------
internal/ui/elements_test.go | 327 ---------
internal/ui/logger.go | 87 ---
internal/ui/state.go | 274 -------
internal/ui/test.pcv | Bin 789 -> 0 bytes
internal/ui/theme.go | 34 -
picogo.go | 660 -----------------
picogo_test.go | 25 -
100 files changed, 5846 deletions(-)
delete mode 100644 .github/CODEOWNERS
delete mode 100644 .github/dependabot.yml
delete mode 100644 .github/workflows/release-build.yml
delete mode 100644 .github/workflows/test-build-android.yml
delete mode 100644 .github/workflows/test-build-linux.yml
delete mode 100644 .github/workflows/test-build-windows.yml
delete mode 100644 .github/workflows/test-coverage.yml
delete mode 100644 .gitignore
delete mode 100644 .testcoverage.yml
delete mode 100644 AndroidManifest.xml
delete mode 100644 FyneApp.toml
delete mode 100644 LICENSE
delete mode 100644 VERSION
delete mode 100644 cmd/picogo/main.go
delete mode 100644 cmd/picogo/main_test.go
delete mode 100644 go.mod
delete mode 100644 go.sum
delete mode 100644 icon.png
delete mode 100644 internal/encryption/ciphers.go
delete mode 100644 internal/encryption/consistency_test.go
delete mode 100644 internal/encryption/decrypt.go
delete mode 100644 internal/encryption/docs/code_architecture.md
delete mode 100644 internal/encryption/encrypt.go
delete mode 100644 internal/encryption/encryption.go
delete mode 100644 internal/encryption/expected_errors_test.go
delete mode 100644 internal/encryption/header.go
delete mode 100644 internal/encryption/keys.go
delete mode 100644 internal/encryption/keys_test.go
delete mode 100644 internal/encryption/picocrypt_compatibility_test.go
delete mode 100644 internal/encryption/picocrypt_samples/basefiles/base0
delete mode 100644 internal/encryption/picocrypt_samples/basefiles/base1000
delete mode 100644 internal/encryption/picocrypt_samples/basefiles/base1048570
delete mode 100644 internal/encryption/picocrypt_samples/headers/zerofile1024.header
delete mode 100644 internal/encryption/picocrypt_samples/headers/zerofile65498251264.header
delete mode 100644 internal/encryption/picocrypt_samples/keyfiles/keyfile1
delete mode 100644 internal/encryption/picocrypt_samples/keyfiles/keyfile2
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base0.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base0_c.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base0_d.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base0_kf1.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base0_kf12.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base0_kf12o.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base0_p.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base0_p_r_d_kf12o.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base0_r.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1000.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1000_c.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1000_c_p_r_d_kf12o.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1000_d.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1000_kf1.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1000_kf12.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1000_kf12o.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1000_p.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1000_r.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1048570.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1048570_c.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1048570_d.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1048570_kf1.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1048570_kf12.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1048570_kf12o.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1048570_p.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1048570_p_r_d_kf12o.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.47/base1048570_r.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base0.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base0_c.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base0_d.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base0_kf1.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base0_kf12.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base0_kf12o.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base0_p.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base0_p_r_d_kf12o.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base0_r.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1000.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1000_c.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1000_d.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1000_kf1.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1000_kf12.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1000_kf12o.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1000_p.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1000_p_r_d_kf12o.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1000_r.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1048570.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1048570_c.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1048570_d.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1048570_kf1.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1048570_kf12.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1048570_kf12o.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1048570_p.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1048570_p_r_d_kf12o.pcv
delete mode 100644 internal/encryption/picocrypt_samples/v1.48/base1048570_r.pcv
delete mode 100644 internal/encryption/reed_solomon.go
delete mode 100644 internal/encryption/stream.go
delete mode 100644 internal/ui/elements.go
delete mode 100644 internal/ui/elements_test.go
delete mode 100644 internal/ui/logger.go
delete mode 100644 internal/ui/state.go
delete mode 100644 internal/ui/test.pcv
delete mode 100644 internal/ui/theme.go
delete mode 100644 picogo.go
delete mode 100644 picogo_test.go
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
deleted file mode 100644
index 633aa54..0000000
--- a/.github/CODEOWNERS
+++ /dev/null
@@ -1,2 +0,0 @@
-.github/* @HACKERALERT
-.github/workflows/* @HACKERALERT
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
deleted file mode 100644
index 3938344..0000000
--- a/.github/dependabot.yml
+++ /dev/null
@@ -1,6 +0,0 @@
-version: 2
-updates:
- - package-ecosystem: "gomod"
- directory: "/"
- schedule:
- interval: "daily"
diff --git a/.github/workflows/release-build.yml b/.github/workflows/release-build.yml
deleted file mode 100644
index c2524a0..0000000
--- a/.github/workflows/release-build.yml
+++ /dev/null
@@ -1,66 +0,0 @@
-name: release-build
-
-permissions:
- contents: write
-
-on:
- push:
- tags:
- - 'v[0-9].[0-9]+.[0-9]+'
-
-
-jobs:
- release-build:
- runs-on: ubuntu-latest
- steps:
- - uses: actions/checkout@v4
-
- - name: Setup Go
- uses: actions/setup-go@v5
- with:
- go-version: '>=1.24'
- check-latest: true
- cache: false
-
- - name: Install packages
- run: |
- sudo apt update
- sudo apt upgrade -y
- sudo apt autoremove -y
- sudo apt install -y gcc libgl1-mesa-dev libglu1-mesa xorg-dev libgtk-3-dev libxkbcommon-dev
-
- - name: Install dependencies
- run: |
- go mod download
- go install -v github.com/fyne-io/fyne-cross@latest
-
- - name: Build Android
- run: |
- fyne-cross android -arch=arm64
- env:
- CGO_ENABLED: 1
-
- - name: Upload artifacts
- uses: actions/upload-artifact@v4
- with:
- name: PicoGo.apk
- path: |
- fyne-cross/dist/android-arm64/PicoGo.apk
- if-no-files-found: error
- compression-level: 9
-
- - name: Generate checksums
- run: |
- echo "CHECKSUM_PICOGO_APK=$(sha256sum fyne-cross/dist-android-arm64/PicoGo.apk | cut -d ' ' -f1)" >> $GITHUB_ENV
-
- - name: Release
- uses: softprops/action-gh-release@v2
- with:
- files: |
- fyne-cross/dist/android-arm64/PicoGo.apk
- tag_name: ${{ env.VERSION }}
- make_latest: true
- append_body: true
- body: |
- **PicoGo:**
- `sha256(PicoGo.apk): ${{ env.CHECKSUM_PICOGO_APK }}`
\ No newline at end of file
diff --git a/.github/workflows/test-build-android.yml b/.github/workflows/test-build-android.yml
deleted file mode 100644
index 6f9613e..0000000
--- a/.github/workflows/test-build-android.yml
+++ /dev/null
@@ -1,50 +0,0 @@
-name: test-build-android
-
-permissions:
- contents: write
-
-on:
- push:
- branches: [ main ]
- pull_request:
- branches: [ main ]
-
-jobs:
- test-build-android:
- runs-on: ubuntu-latest
- steps:
- - uses: actions/checkout@v4
-
- - name: Setup Go
- uses: actions/setup-go@v5
- with:
- go-version: '>=1.24'
- check-latest: true
- cache: false
-
- - name: Install packages
- run: |
- sudo apt update
- sudo apt upgrade -y
- sudo apt autoremove -y
- sudo apt install -y gcc libgl1-mesa-dev libglu1-mesa xorg-dev libgtk-3-dev libxkbcommon-dev
-
- - name: Install dependencies
- run: |
- go mod download
- go install -v github.com/fyne-io/fyne-cross@latest
-
- - name: Build Android
- run: |
- fyne-cross android -arch=arm64
- env:
- CGO_ENABLED: 1
-
- - name: Upload artifacts
- uses: actions/upload-artifact@v4
- with:
- name: TEST-BUILD-DO-NOT-USE-THIS
- path: |
- fyne-cross/dist/android-arm64/*
- if-no-files-found: error
- compression-level: 9
diff --git a/.github/workflows/test-build-linux.yml b/.github/workflows/test-build-linux.yml
deleted file mode 100644
index 87f5ba9..0000000
--- a/.github/workflows/test-build-linux.yml
+++ /dev/null
@@ -1,50 +0,0 @@
-name: test-build-linux
-
-permissions:
- contents: write
-
-on:
- push:
- branches: [ main ]
- pull_request:
- branches: [ main ]
-
-jobs:
- test-build-linux:
- runs-on: ubuntu-latest
- steps:
- - uses: actions/checkout@v4
-
- - name: Setup Go
- uses: actions/setup-go@v5
- with:
- go-version: '>=1.24'
- check-latest: true
- cache: false
-
- - name: Install packages
- run: |
- sudo apt update
- sudo apt upgrade -y
- sudo apt autoremove -y
- sudo apt install -y gcc libgl1-mesa-dev libglu1-mesa xorg-dev libgtk-3-dev libxkbcommon-dev
-
- - name: Install dependencies
- run: |
- go mod download
- go install -v github.com/fyne-io/fyne-cross@latest
-
- - name: Build Linux
- run: |
- fyne-cross linux -arch=amd64
- env:
- CGO_ENABLED: 1
-
- - name: Upload artifacts
- uses: actions/upload-artifact@v4
- with:
- name: TEST-BUILD-DO-NOT-USE-THIS
- path: |
- fyne-cross/dist/linux-amd64/*
- if-no-files-found: error
- compression-level: 9
diff --git a/.github/workflows/test-build-windows.yml b/.github/workflows/test-build-windows.yml
deleted file mode 100644
index 33b81b6..0000000
--- a/.github/workflows/test-build-windows.yml
+++ /dev/null
@@ -1,50 +0,0 @@
-name: test-build-windows
-
-permissions:
- contents: write
-
-on:
- push:
- branches: [ main ]
- pull_request:
- branches: [ main ]
-
-jobs:
- test-build-windows:
- runs-on: ubuntu-latest
- steps:
- - uses: actions/checkout@v4
-
- - name: Setup Go
- uses: actions/setup-go@v5
- with:
- go-version: '>=1.24'
- check-latest: true
- cache: false
-
- - name: Install packages
- run: |
- sudo apt update
- sudo apt upgrade -y
- sudo apt autoremove -y
- sudo apt install -y gcc libgl1-mesa-dev libglu1-mesa xorg-dev libgtk-3-dev libxkbcommon-dev
-
- - name: Install dependencies
- run: |
- go mod download
- go install -v github.com/fyne-io/fyne-cross@latest
-
- - name: Build Windows
- run: |
- fyne-cross windows -arch=amd64
- env:
- CGO_ENABLED: 1
-
- - name: Upload artifacts
- uses: actions/upload-artifact@v4
- with:
- name: TEST-BUILD-DO-NOT-USE-THIS
- path: |
- fyne-cross/dist/windows-amd64/*
- if-no-files-found: error
- compression-level: 9
diff --git a/.github/workflows/test-coverage.yml b/.github/workflows/test-coverage.yml
deleted file mode 100644
index 52cb72b..0000000
--- a/.github/workflows/test-coverage.yml
+++ /dev/null
@@ -1,46 +0,0 @@
-name: test-coverage
-
-permissions:
- contents: write
-
-on:
- push:
- branches: [ main ]
- pull_request:
- branches: [ main ]
-
-jobs:
- test-coverage:
- name: Go test coverage check
- runs-on: ubuntu-latest
- steps:
- - uses: actions/checkout@v4
-
- - name: Setup Go
- uses: actions/setup-go@v5
- with:
- go-version: '>=1.24'
- check-latest: true
- cache: false
-
- - name: Install packages
- run: |
- sudo apt update
- sudo apt upgrade -y
- sudo apt autoremove -y
- sudo apt install -y gcc libgl1-mesa-dev libglu1-mesa xorg-dev libgtk-3-dev libxkbcommon-dev
-
- - name: Install dependencies
- run: |
- go mod download
- go install -v github.com/fyne-io/fyne-cross@latest
-
- - name: generate test coverage
- run: go test ./... -coverprofile=./cover.out -covermode=atomic -coverpkg=./... -timeout 20m
-
- - name: check test coverage
- uses: vladopajic/go-test-coverage@f080863892c102695c8066abc08aae12e3e94e1b # v2.13.1
- with:
- config: ./.testcoverage.yml
- git-token: ${{ github.ref_name == 'main' && secrets.GITHUB_TOKEN || '' }}
- git-branch: badges
diff --git a/.gitignore b/.gitignore
deleted file mode 100644
index b51c70b..0000000
--- a/.gitignore
+++ /dev/null
@@ -1 +0,0 @@
-cover.out
diff --git a/.testcoverage.yml b/.testcoverage.yml
deleted file mode 100644
index 7c0cc18..0000000
--- a/.testcoverage.yml
+++ /dev/null
@@ -1,8 +0,0 @@
-profile: cover.out
-threshold:
- # Minimum coverage percentage required for individual files.
- file: 0
- # Minimum coverage percentage required for each package.
- package: 0
- # Minimum overall project coverage percentage required.
- total: 60
diff --git a/AndroidManifest.xml b/AndroidManifest.xml
deleted file mode 100644
index f755b9b..0000000
--- a/AndroidManifest.xml
+++ /dev/null
@@ -1,42 +0,0 @@
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
diff --git a/FyneApp.toml b/FyneApp.toml
deleted file mode 100644
index 1843f5b..0000000
--- a/FyneApp.toml
+++ /dev/null
@@ -1,8 +0,0 @@
-Website = "https://github.com/Picocrypt/PicoGo"
-
-[Details]
-Icon = "icon.png"
-Name = "PicoGo"
-ID = "io.github.picocrypt.PicoGo"
-Version = "0.1.0"
-Build = 1
diff --git a/LICENSE b/LICENSE
deleted file mode 100644
index f288702..0000000
--- a/LICENSE
+++ /dev/null
@@ -1,674 +0,0 @@
- GNU GENERAL PUBLIC LICENSE
- Version 3, 29 June 2007
-
- Copyright (C) 2007 Free Software Foundation, Inc.
- Everyone is permitted to copy and distribute verbatim copies
- of this license document, but changing it is not allowed.
-
- Preamble
-
- The GNU General Public License is a free, copyleft license for
-software and other kinds of works.
-
- The licenses for most software and other practical works are designed
-to take away your freedom to share and change the works. By contrast,
-the GNU General Public License is intended to guarantee your freedom to
-share and change all versions of a program--to make sure it remains free
-software for all its users. We, the Free Software Foundation, use the
-GNU General Public License for most of our software; it applies also to
-any other work released this way by its authors. You can apply it to
-your programs, too.
-
- When we speak of free software, we are referring to freedom, not
-price. Our General Public Licenses are designed to make sure that you
-have the freedom to distribute copies of free software (and charge for
-them if you wish), that you receive source code or can get it if you
-want it, that you can change the software or use pieces of it in new
-free programs, and that you know you can do these things.
-
- To protect your rights, we need to prevent others from denying you
-these rights or asking you to surrender the rights. Therefore, you have
-certain responsibilities if you distribute copies of the software, or if
-you modify it: responsibilities to respect the freedom of others.
-
- For example, if you distribute copies of such a program, whether
-gratis or for a fee, you must pass on to the recipients the same
-freedoms that you received. You must make sure that they, too, receive
-or can get the source code. And you must show them these terms so they
-know their rights.
-
- Developers that use the GNU GPL protect your rights with two steps:
-(1) assert copyright on the software, and (2) offer you this License
-giving you legal permission to copy, distribute and/or modify it.
-
- For the developers' and authors' protection, the GPL clearly explains
-that there is no warranty for this free software. For both users' and
-authors' sake, the GPL requires that modified versions be marked as
-changed, so that their problems will not be attributed erroneously to
-authors of previous versions.
-
- Some devices are designed to deny users access to install or run
-modified versions of the software inside them, although the manufacturer
-can do so. This is fundamentally incompatible with the aim of
-protecting users' freedom to change the software. The systematic
-pattern of such abuse occurs in the area of products for individuals to
-use, which is precisely where it is most unacceptable. Therefore, we
-have designed this version of the GPL to prohibit the practice for those
-products. If such problems arise substantially in other domains, we
-stand ready to extend this provision to those domains in future versions
-of the GPL, as needed to protect the freedom of users.
-
- Finally, every program is threatened constantly by software patents.
-States should not allow patents to restrict development and use of
-software on general-purpose computers, but in those that do, we wish to
-avoid the special danger that patents applied to a free program could
-make it effectively proprietary. To prevent this, the GPL assures that
-patents cannot be used to render the program non-free.
-
- The precise terms and conditions for copying, distribution and
-modification follow.
-
- TERMS AND CONDITIONS
-
- 0. Definitions.
-
- "This License" refers to version 3 of the GNU General Public License.
-
- "Copyright" also means copyright-like laws that apply to other kinds of
-works, such as semiconductor masks.
-
- "The Program" refers to any copyrightable work licensed under this
-License. Each licensee is addressed as "you". "Licensees" and
-"recipients" may be individuals or organizations.
-
- To "modify" a work means to copy from or adapt all or part of the work
-in a fashion requiring copyright permission, other than the making of an
-exact copy. The resulting work is called a "modified version" of the
-earlier work or a work "based on" the earlier work.
-
- A "covered work" means either the unmodified Program or a work based
-on the Program.
-
- To "propagate" a work means to do anything with it that, without
-permission, would make you directly or secondarily liable for
-infringement under applicable copyright law, except executing it on a
-computer or modifying a private copy. Propagation includes copying,
-distribution (with or without modification), making available to the
-public, and in some countries other activities as well.
-
- To "convey" a work means any kind of propagation that enables other
-parties to make or receive copies. Mere interaction with a user through
-a computer network, with no transfer of a copy, is not conveying.
-
- An interactive user interface displays "Appropriate Legal Notices"
-to the extent that it includes a convenient and prominently visible
-feature that (1) displays an appropriate copyright notice, and (2)
-tells the user that there is no warranty for the work (except to the
-extent that warranties are provided), that licensees may convey the
-work under this License, and how to view a copy of this License. If
-the interface presents a list of user commands or options, such as a
-menu, a prominent item in the list meets this criterion.
-
- 1. Source Code.
-
- The "source code" for a work means the preferred form of the work
-for making modifications to it. "Object code" means any non-source
-form of a work.
-
- A "Standard Interface" means an interface that either is an official
-standard defined by a recognized standards body, or, in the case of
-interfaces specified for a particular programming language, one that
-is widely used among developers working in that language.
-
- The "System Libraries" of an executable work include anything, other
-than the work as a whole, that (a) is included in the normal form of
-packaging a Major Component, but which is not part of that Major
-Component, and (b) serves only to enable use of the work with that
-Major Component, or to implement a Standard Interface for which an
-implementation is available to the public in source code form. A
-"Major Component", in this context, means a major essential component
-(kernel, window system, and so on) of the specific operating system
-(if any) on which the executable work runs, or a compiler used to
-produce the work, or an object code interpreter used to run it.
-
- The "Corresponding Source" for a work in object code form means all
-the source code needed to generate, install, and (for an executable
-work) run the object code and to modify the work, including scripts to
-control those activities. However, it does not include the work's
-System Libraries, or general-purpose tools or generally available free
-programs which are used unmodified in performing those activities but
-which are not part of the work. For example, Corresponding Source
-includes interface definition files associated with source files for
-the work, and the source code for shared libraries and dynamically
-linked subprograms that the work is specifically designed to require,
-such as by intimate data communication or control flow between those
-subprograms and other parts of the work.
-
- The Corresponding Source need not include anything that users
-can regenerate automatically from other parts of the Corresponding
-Source.
-
- The Corresponding Source for a work in source code form is that
-same work.
-
- 2. Basic Permissions.
-
- All rights granted under this License are granted for the term of
-copyright on the Program, and are irrevocable provided the stated
-conditions are met. This License explicitly affirms your unlimited
-permission to run the unmodified Program. The output from running a
-covered work is covered by this License only if the output, given its
-content, constitutes a covered work. This License acknowledges your
-rights of fair use or other equivalent, as provided by copyright law.
-
- You may make, run and propagate covered works that you do not
-convey, without conditions so long as your license otherwise remains
-in force. You may convey covered works to others for the sole purpose
-of having them make modifications exclusively for you, or provide you
-with facilities for running those works, provided that you comply with
-the terms of this License in conveying all material for which you do
-not control copyright. Those thus making or running the covered works
-for you must do so exclusively on your behalf, under your direction
-and control, on terms that prohibit them from making any copies of
-your copyrighted material outside their relationship with you.
-
- Conveying under any other circumstances is permitted solely under
-the conditions stated below. Sublicensing is not allowed; section 10
-makes it unnecessary.
-
- 3. Protecting Users' Legal Rights From Anti-Circumvention Law.
-
- No covered work shall be deemed part of an effective technological
-measure under any applicable law fulfilling obligations under article
-11 of the WIPO copyright treaty adopted on 20 December 1996, or
-similar laws prohibiting or restricting circumvention of such
-measures.
-
- When you convey a covered work, you waive any legal power to forbid
-circumvention of technological measures to the extent such circumvention
-is effected by exercising rights under this License with respect to
-the covered work, and you disclaim any intention to limit operation or
-modification of the work as a means of enforcing, against the work's
-users, your or third parties' legal rights to forbid circumvention of
-technological measures.
-
- 4. Conveying Verbatim Copies.
-
- You may convey verbatim copies of the Program's source code as you
-receive it, in any medium, provided that you conspicuously and
-appropriately publish on each copy an appropriate copyright notice;
-keep intact all notices stating that this License and any
-non-permissive terms added in accord with section 7 apply to the code;
-keep intact all notices of the absence of any warranty; and give all
-recipients a copy of this License along with the Program.
-
- You may charge any price or no price for each copy that you convey,
-and you may offer support or warranty protection for a fee.
-
- 5. Conveying Modified Source Versions.
-
- You may convey a work based on the Program, or the modifications to
-produce it from the Program, in the form of source code under the
-terms of section 4, provided that you also meet all of these conditions:
-
- a) The work must carry prominent notices stating that you modified
- it, and giving a relevant date.
-
- b) The work must carry prominent notices stating that it is
- released under this License and any conditions added under section
- 7. This requirement modifies the requirement in section 4 to
- "keep intact all notices".
-
- c) You must license the entire work, as a whole, under this
- License to anyone who comes into possession of a copy. This
- License will therefore apply, along with any applicable section 7
- additional terms, to the whole of the work, and all its parts,
- regardless of how they are packaged. This License gives no
- permission to license the work in any other way, but it does not
- invalidate such permission if you have separately received it.
-
- d) If the work has interactive user interfaces, each must display
- Appropriate Legal Notices; however, if the Program has interactive
- interfaces that do not display Appropriate Legal Notices, your
- work need not make them do so.
-
- A compilation of a covered work with other separate and independent
-works, which are not by their nature extensions of the covered work,
-and which are not combined with it such as to form a larger program,
-in or on a volume of a storage or distribution medium, is called an
-"aggregate" if the compilation and its resulting copyright are not
-used to limit the access or legal rights of the compilation's users
-beyond what the individual works permit. Inclusion of a covered work
-in an aggregate does not cause this License to apply to the other
-parts of the aggregate.
-
- 6. Conveying Non-Source Forms.
-
- You may convey a covered work in object code form under the terms
-of sections 4 and 5, provided that you also convey the
-machine-readable Corresponding Source under the terms of this License,
-in one of these ways:
-
- a) Convey the object code in, or embodied in, a physical product
- (including a physical distribution medium), accompanied by the
- Corresponding Source fixed on a durable physical medium
- customarily used for software interchange.
-
- b) Convey the object code in, or embodied in, a physical product
- (including a physical distribution medium), accompanied by a
- written offer, valid for at least three years and valid for as
- long as you offer spare parts or customer support for that product
- model, to give anyone who possesses the object code either (1) a
- copy of the Corresponding Source for all the software in the
- product that is covered by this License, on a durable physical
- medium customarily used for software interchange, for a price no
- more than your reasonable cost of physically performing this
- conveying of source, or (2) access to copy the
- Corresponding Source from a network server at no charge.
-
- c) Convey individual copies of the object code with a copy of the
- written offer to provide the Corresponding Source. This
- alternative is allowed only occasionally and noncommercially, and
- only if you received the object code with such an offer, in accord
- with subsection 6b.
-
- d) Convey the object code by offering access from a designated
- place (gratis or for a charge), and offer equivalent access to the
- Corresponding Source in the same way through the same place at no
- further charge. You need not require recipients to copy the
- Corresponding Source along with the object code. If the place to
- copy the object code is a network server, the Corresponding Source
- may be on a different server (operated by you or a third party)
- that supports equivalent copying facilities, provided you maintain
- clear directions next to the object code saying where to find the
- Corresponding Source. Regardless of what server hosts the
- Corresponding Source, you remain obligated to ensure that it is
- available for as long as needed to satisfy these requirements.
-
- e) Convey the object code using peer-to-peer transmission, provided
- you inform other peers where the object code and Corresponding
- Source of the work are being offered to the general public at no
- charge under subsection 6d.
-
- A separable portion of the object code, whose source code is excluded
-from the Corresponding Source as a System Library, need not be
-included in conveying the object code work.
-
- A "User Product" is either (1) a "consumer product", which means any
-tangible personal property which is normally used for personal, family,
-or household purposes, or (2) anything designed or sold for incorporation
-into a dwelling. In determining whether a product is a consumer product,
-doubtful cases shall be resolved in favor of coverage. For a particular
-product received by a particular user, "normally used" refers to a
-typical or common use of that class of product, regardless of the status
-of the particular user or of the way in which the particular user
-actually uses, or expects or is expected to use, the product. A product
-is a consumer product regardless of whether the product has substantial
-commercial, industrial or non-consumer uses, unless such uses represent
-the only significant mode of use of the product.
-
- "Installation Information" for a User Product means any methods,
-procedures, authorization keys, or other information required to install
-and execute modified versions of a covered work in that User Product from
-a modified version of its Corresponding Source. The information must
-suffice to ensure that the continued functioning of the modified object
-code is in no case prevented or interfered with solely because
-modification has been made.
-
- If you convey an object code work under this section in, or with, or
-specifically for use in, a User Product, and the conveying occurs as
-part of a transaction in which the right of possession and use of the
-User Product is transferred to the recipient in perpetuity or for a
-fixed term (regardless of how the transaction is characterized), the
-Corresponding Source conveyed under this section must be accompanied
-by the Installation Information. But this requirement does not apply
-if neither you nor any third party retains the ability to install
-modified object code on the User Product (for example, the work has
-been installed in ROM).
-
- The requirement to provide Installation Information does not include a
-requirement to continue to provide support service, warranty, or updates
-for a work that has been modified or installed by the recipient, or for
-the User Product in which it has been modified or installed. Access to a
-network may be denied when the modification itself materially and
-adversely affects the operation of the network or violates the rules and
-protocols for communication across the network.
-
- Corresponding Source conveyed, and Installation Information provided,
-in accord with this section must be in a format that is publicly
-documented (and with an implementation available to the public in
-source code form), and must require no special password or key for
-unpacking, reading or copying.
-
- 7. Additional Terms.
-
- "Additional permissions" are terms that supplement the terms of this
-License by making exceptions from one or more of its conditions.
-Additional permissions that are applicable to the entire Program shall
-be treated as though they were included in this License, to the extent
-that they are valid under applicable law. If additional permissions
-apply only to part of the Program, that part may be used separately
-under those permissions, but the entire Program remains governed by
-this License without regard to the additional permissions.
-
- When you convey a copy of a covered work, you may at your option
-remove any additional permissions from that copy, or from any part of
-it. (Additional permissions may be written to require their own
-removal in certain cases when you modify the work.) You may place
-additional permissions on material, added by you to a covered work,
-for which you have or can give appropriate copyright permission.
-
- Notwithstanding any other provision of this License, for material you
-add to a covered work, you may (if authorized by the copyright holders of
-that material) supplement the terms of this License with terms:
-
- a) Disclaiming warranty or limiting liability differently from the
- terms of sections 15 and 16 of this License; or
-
- b) Requiring preservation of specified reasonable legal notices or
- author attributions in that material or in the Appropriate Legal
- Notices displayed by works containing it; or
-
- c) Prohibiting misrepresentation of the origin of that material, or
- requiring that modified versions of such material be marked in
- reasonable ways as different from the original version; or
-
- d) Limiting the use for publicity purposes of names of licensors or
- authors of the material; or
-
- e) Declining to grant rights under trademark law for use of some
- trade names, trademarks, or service marks; or
-
- f) Requiring indemnification of licensors and authors of that
- material by anyone who conveys the material (or modified versions of
- it) with contractual assumptions of liability to the recipient, for
- any liability that these contractual assumptions directly impose on
- those licensors and authors.
-
- All other non-permissive additional terms are considered "further
-restrictions" within the meaning of section 10. If the Program as you
-received it, or any part of it, contains a notice stating that it is
-governed by this License along with a term that is a further
-restriction, you may remove that term. If a license document contains
-a further restriction but permits relicensing or conveying under this
-License, you may add to a covered work material governed by the terms
-of that license document, provided that the further restriction does
-not survive such relicensing or conveying.
-
- If you add terms to a covered work in accord with this section, you
-must place, in the relevant source files, a statement of the
-additional terms that apply to those files, or a notice indicating
-where to find the applicable terms.
-
- Additional terms, permissive or non-permissive, may be stated in the
-form of a separately written license, or stated as exceptions;
-the above requirements apply either way.
-
- 8. Termination.
-
- You may not propagate or modify a covered work except as expressly
-provided under this License. Any attempt otherwise to propagate or
-modify it is void, and will automatically terminate your rights under
-this License (including any patent licenses granted under the third
-paragraph of section 11).
-
- However, if you cease all violation of this License, then your
-license from a particular copyright holder is reinstated (a)
-provisionally, unless and until the copyright holder explicitly and
-finally terminates your license, and (b) permanently, if the copyright
-holder fails to notify you of the violation by some reasonable means
-prior to 60 days after the cessation.
-
- Moreover, your license from a particular copyright holder is
-reinstated permanently if the copyright holder notifies you of the
-violation by some reasonable means, this is the first time you have
-received notice of violation of this License (for any work) from that
-copyright holder, and you cure the violation prior to 30 days after
-your receipt of the notice.
-
- Termination of your rights under this section does not terminate the
-licenses of parties who have received copies or rights from you under
-this License. If your rights have been terminated and not permanently
-reinstated, you do not qualify to receive new licenses for the same
-material under section 10.
-
- 9. Acceptance Not Required for Having Copies.
-
- You are not required to accept this License in order to receive or
-run a copy of the Program. Ancillary propagation of a covered work
-occurring solely as a consequence of using peer-to-peer transmission
-to receive a copy likewise does not require acceptance. However,
-nothing other than this License grants you permission to propagate or
-modify any covered work. These actions infringe copyright if you do
-not accept this License. Therefore, by modifying or propagating a
-covered work, you indicate your acceptance of this License to do so.
-
- 10. Automatic Licensing of Downstream Recipients.
-
- Each time you convey a covered work, the recipient automatically
-receives a license from the original licensors, to run, modify and
-propagate that work, subject to this License. You are not responsible
-for enforcing compliance by third parties with this License.
-
- An "entity transaction" is a transaction transferring control of an
-organization, or substantially all assets of one, or subdividing an
-organization, or merging organizations. If propagation of a covered
-work results from an entity transaction, each party to that
-transaction who receives a copy of the work also receives whatever
-licenses to the work the party's predecessor in interest had or could
-give under the previous paragraph, plus a right to possession of the
-Corresponding Source of the work from the predecessor in interest, if
-the predecessor has it or can get it with reasonable efforts.
-
- You may not impose any further restrictions on the exercise of the
-rights granted or affirmed under this License. For example, you may
-not impose a license fee, royalty, or other charge for exercise of
-rights granted under this License, and you may not initiate litigation
-(including a cross-claim or counterclaim in a lawsuit) alleging that
-any patent claim is infringed by making, using, selling, offering for
-sale, or importing the Program or any portion of it.
-
- 11. Patents.
-
- A "contributor" is a copyright holder who authorizes use under this
-License of the Program or a work on which the Program is based. The
-work thus licensed is called the contributor's "contributor version".
-
- A contributor's "essential patent claims" are all patent claims
-owned or controlled by the contributor, whether already acquired or
-hereafter acquired, that would be infringed by some manner, permitted
-by this License, of making, using, or selling its contributor version,
-but do not include claims that would be infringed only as a
-consequence of further modification of the contributor version. For
-purposes of this definition, "control" includes the right to grant
-patent sublicenses in a manner consistent with the requirements of
-this License.
-
- Each contributor grants you a non-exclusive, worldwide, royalty-free
-patent license under the contributor's essential patent claims, to
-make, use, sell, offer for sale, import and otherwise run, modify and
-propagate the contents of its contributor version.
-
- In the following three paragraphs, a "patent license" is any express
-agreement or commitment, however denominated, not to enforce a patent
-(such as an express permission to practice a patent or covenant not to
-sue for patent infringement). To "grant" such a patent license to a
-party means to make such an agreement or commitment not to enforce a
-patent against the party.
-
- If you convey a covered work, knowingly relying on a patent license,
-and the Corresponding Source of the work is not available for anyone
-to copy, free of charge and under the terms of this License, through a
-publicly available network server or other readily accessible means,
-then you must either (1) cause the Corresponding Source to be so
-available, or (2) arrange to deprive yourself of the benefit of the
-patent license for this particular work, or (3) arrange, in a manner
-consistent with the requirements of this License, to extend the patent
-license to downstream recipients. "Knowingly relying" means you have
-actual knowledge that, but for the patent license, your conveying the
-covered work in a country, or your recipient's use of the covered work
-in a country, would infringe one or more identifiable patents in that
-country that you have reason to believe are valid.
-
- If, pursuant to or in connection with a single transaction or
-arrangement, you convey, or propagate by procuring conveyance of, a
-covered work, and grant a patent license to some of the parties
-receiving the covered work authorizing them to use, propagate, modify
-or convey a specific copy of the covered work, then the patent license
-you grant is automatically extended to all recipients of the covered
-work and works based on it.
-
- A patent license is "discriminatory" if it does not include within
-the scope of its coverage, prohibits the exercise of, or is
-conditioned on the non-exercise of one or more of the rights that are
-specifically granted under this License. You may not convey a covered
-work if you are a party to an arrangement with a third party that is
-in the business of distributing software, under which you make payment
-to the third party based on the extent of your activity of conveying
-the work, and under which the third party grants, to any of the
-parties who would receive the covered work from you, a discriminatory
-patent license (a) in connection with copies of the covered work
-conveyed by you (or copies made from those copies), or (b) primarily
-for and in connection with specific products or compilations that
-contain the covered work, unless you entered into that arrangement,
-or that patent license was granted, prior to 28 March 2007.
-
- Nothing in this License shall be construed as excluding or limiting
-any implied license or other defenses to infringement that may
-otherwise be available to you under applicable patent law.
-
- 12. No Surrender of Others' Freedom.
-
- If conditions are imposed on you (whether by court order, agreement or
-otherwise) that contradict the conditions of this License, they do not
-excuse you from the conditions of this License. If you cannot convey a
-covered work so as to satisfy simultaneously your obligations under this
-License and any other pertinent obligations, then as a consequence you may
-not convey it at all. For example, if you agree to terms that obligate you
-to collect a royalty for further conveying from those to whom you convey
-the Program, the only way you could satisfy both those terms and this
-License would be to refrain entirely from conveying the Program.
-
- 13. Use with the GNU Affero General Public License.
-
- Notwithstanding any other provision of this License, you have
-permission to link or combine any covered work with a work licensed
-under version 3 of the GNU Affero General Public License into a single
-combined work, and to convey the resulting work. The terms of this
-License will continue to apply to the part which is the covered work,
-but the special requirements of the GNU Affero General Public License,
-section 13, concerning interaction through a network will apply to the
-combination as such.
-
- 14. Revised Versions of this License.
-
- The Free Software Foundation may publish revised and/or new versions of
-the GNU General Public License from time to time. Such new versions will
-be similar in spirit to the present version, but may differ in detail to
-address new problems or concerns.
-
- Each version is given a distinguishing version number. If the
-Program specifies that a certain numbered version of the GNU General
-Public License "or any later version" applies to it, you have the
-option of following the terms and conditions either of that numbered
-version or of any later version published by the Free Software
-Foundation. If the Program does not specify a version number of the
-GNU General Public License, you may choose any version ever published
-by the Free Software Foundation.
-
- If the Program specifies that a proxy can decide which future
-versions of the GNU General Public License can be used, that proxy's
-public statement of acceptance of a version permanently authorizes you
-to choose that version for the Program.
-
- Later license versions may give you additional or different
-permissions. However, no additional obligations are imposed on any
-author or copyright holder as a result of your choosing to follow a
-later version.
-
- 15. Disclaimer of Warranty.
-
- THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
-APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
-HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
-OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
-IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
-ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
-
- 16. Limitation of Liability.
-
- IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
-WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
-THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
-GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
-USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
-DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
-PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
-EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
-SUCH DAMAGES.
-
- 17. Interpretation of Sections 15 and 16.
-
- If the disclaimer of warranty and limitation of liability provided
-above cannot be given local legal effect according to their terms,
-reviewing courts shall apply local law that most closely approximates
-an absolute waiver of all civil liability in connection with the
-Program, unless a warranty or assumption of liability accompanies a
-copy of the Program in return for a fee.
-
- END OF TERMS AND CONDITIONS
-
- How to Apply These Terms to Your New Programs
-
- If you develop a new program, and you want it to be of the greatest
-possible use to the public, the best way to achieve this is to make it
-free software which everyone can redistribute and change under these terms.
-
- To do so, attach the following notices to the program. It is safest
-to attach them to the start of each source file to most effectively
-state the exclusion of warranty; and each file should have at least
-the "copyright" line and a pointer to where the full notice is found.
-
-
- Copyright (C)
-
- This program is free software: you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation, either version 3 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program. If not, see .
-
-Also add information on how to contact you by electronic and paper mail.
-
- If the program does terminal interaction, make it output a short
-notice like this when it starts in an interactive mode:
-
- Copyright (C)
- This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
- This is free software, and you are welcome to redistribute it
- under certain conditions; type `show c' for details.
-
-The hypothetical commands `show w' and `show c' should show the appropriate
-parts of the General Public License. Of course, your program's commands
-might be different; for a GUI interface, you would use an "about box".
-
- You should also get your employer (if you work as a programmer) or school,
-if any, to sign a "copyright disclaimer" for the program, if necessary.
-For more information on this, and how to apply and follow the GNU GPL, see
-.
-
- The GNU General Public License does not permit incorporating your program
-into proprietary programs. If your program is a subroutine library, you
-may consider it more useful to permit linking proprietary applications with
-the library. If this is what you want to do, use the GNU Lesser General
-Public License instead of this License. But first, please read
-.
diff --git a/VERSION b/VERSION
deleted file mode 100644
index 02bf650..0000000
--- a/VERSION
+++ /dev/null
@@ -1 +0,0 @@
-v0.1.5
\ No newline at end of file
diff --git a/cmd/picogo/main.go b/cmd/picogo/main.go
deleted file mode 100644
index 130194a..0000000
--- a/cmd/picogo/main.go
+++ /dev/null
@@ -1,268 +0,0 @@
-package main
-
-import (
- "errors"
- "flag"
- "fmt"
- "io"
- "os"
- "strings"
-
- "github.com/jschauma/getpass"
- "github.com/picocrypt/picogo/internal/encryption"
- "github.com/schollz/progressbar/v3"
-)
-
-type args struct {
- reedSolomon bool
- paranoid bool
- deniability bool
- inFiles []string
- keyfiles []string
- keep bool
- ordered bool
- password string
- comments string
- overwrite bool
- encryptOnly bool
- decryptOnly bool
-}
-
-var (
- reedSolomonFlag *bool
- paranoidFlag *bool
- deniabilityFlag *bool
- keyfilesStrFlag *string
- keepFlag *bool
- orderedFlag *bool
- passfromFlag *string
- commentsFlag *string
- overwriteFlag *bool
- encryptOnlyFlag *bool
- decryptOnlyFlag *bool
-)
-
-func init() {
- flag.Usage = func() {
- fmt.Fprintf(flag.CommandLine.Output(), "Usage: %s [options] file1 [file2 ...]\n", os.Args[0])
- fmt.Fprintf(flag.CommandLine.Output(), "\nOptions:\n")
- flag.PrintDefaults()
- }
- reedSolomonFlag = flag.Bool("rs", false, "(encryption) encode with Reed-Solomon bytes")
- paranoidFlag = flag.Bool("paranoid", false, "(encryption) use paranoid mode")
- deniabilityFlag = flag.Bool("deniability", false, "(encryption) use deniability mode")
- keyfilesStrFlag = flag.String("keyfiles", "", "list of keyfiles to use. Separate list with commas (ex: keyfile1,keyfile2,keyfile3)")
- keepFlag = flag.Bool("keep", false, "(decryption) keep output even if corrupted. If not set, the output file will be deleted.")
- orderedFlag = flag.Bool("ordered", false, "(encryption) require keyfiles in given order")
- passfromFlag = flag.String("passfrom", "tty", "password source. Options can be found in getpass documentation (github.com/jschauma/getpass)")
- commentsFlag = flag.String("comments", "", "(encryption) comments to save with the file. THESE ARE NOT ENCRYPTED. Wrap in quotes.")
- overwriteFlag = flag.Bool("overwrite", false, "overwrite existing files")
- encryptOnlyFlag = flag.Bool("encrypt-only", false, "only handle files that require encryption (only processes non-.pcv files)")
- decryptOnlyFlag = flag.Bool("decrypt-only", false, "only handle files that require decryption (only processes .pcv files)")
-
-}
-
-func parseArgs() (args, error) {
- flag.Parse()
- if flag.NArg() == 0 {
- return args{}, errors.New("no file specified")
- }
-
- password, err := getpass.Getpass(*passfromFlag)
- if err != nil {
- return args{}, fmt.Errorf("reading password from %s: %w", *passfromFlag, err)
- }
- keyfiles := []string{}
- if len(*keyfilesStrFlag) > 0 {
- keyfiles = strings.Split(*keyfilesStrFlag, ",")
- }
-
- return args{
- reedSolomon: *reedSolomonFlag,
- paranoid: *paranoidFlag,
- deniability: *deniabilityFlag,
- inFiles: flag.Args(),
- keyfiles: keyfiles,
- keep: *keepFlag,
- ordered: *orderedFlag,
- password: password,
- comments: *commentsFlag,
- overwrite: *overwriteFlag,
- encryptOnly: *encryptOnlyFlag,
- decryptOnly: *decryptOnlyFlag,
- }, nil
-}
-
-func openFiles(inFile string, keyfiles []string, outFile string, overwrite bool) (*os.File, []*os.File, *os.File, error) {
- inReader, err := os.Open(inFile)
- if err != nil {
- return nil, nil, nil, fmt.Errorf("opening %s: %w", inFile, err)
- }
- keyfileReaders := []*os.File{}
- for _, keyfile := range keyfiles {
- reader, err := os.Open(keyfile)
- if err != nil {
- return nil, nil, nil, fmt.Errorf("opening %s: %w", keyfile, err)
- }
- keyfileReaders = append(keyfileReaders, reader)
- }
- _, err = os.Stat(outFile)
- if err == nil && !overwrite {
- return nil, nil, nil, fmt.Errorf("%s already exists", outFile)
- }
- outWriter, err := os.Create(outFile)
- if err != nil {
- return nil, nil, nil, fmt.Errorf("creating %s: %w", outFile, err)
- }
- return inReader, keyfileReaders, outWriter, nil
-}
-
-func asReaders(files []*os.File) []io.Reader {
- readers := make([]io.Reader, len(files))
- for i, file := range files {
- readers[i] = file
- }
- return readers
-}
-
-func encrypt(
- inFile string,
- keyfiles []string,
- settings encryption.Settings,
- password string,
- outOf [2]int,
- overwrite bool,
-) error {
- outFile := inFile + ".pcv"
- inReader, keyfileReaders, outWriter, err := openFiles(inFile, keyfiles, outFile, overwrite)
- if err != nil {
- return fmt.Errorf("opening files: %w", err)
- }
- defer func() {
- for _, reader := range append(keyfileReaders, inReader, outWriter) {
- reader.Close()
- }
- }()
-
- tmp := make([]byte, encryption.HeaderSize(settings))
- _, err = outWriter.Write(tmp)
- if err != nil {
- return fmt.Errorf("writing blank header: %w", err)
- }
-
- bar := progressbar.NewOptions(
- -1,
- progressbar.OptionShowBytes(true),
- progressbar.OptionClearOnFinish(),
- progressbar.OptionUseIECUnits(true),
- progressbar.OptionSetDescription(
- fmt.Sprintf("[%d/%d] Encrypting: %s", outOf[0]+1, outOf[1], inFile),
- ),
- )
- header, err := encryption.EncryptHeadless(inReader, password, asReaders(keyfileReaders), settings, io.MultiWriter(outWriter, bar))
- bar.Finish() // don't catch the error, fine to ignore
- if err != nil {
- return fmt.Errorf("encrypting %s: %w", inFile, err)
- }
-
- _, err = outWriter.Seek(0, 0)
- if err != nil {
- return fmt.Errorf("seeking to start of %s: %w", outFile, err)
- }
- _, err = outWriter.Write(header)
- if err != nil {
- return fmt.Errorf("writing header to %s: %w", outFile, err)
- }
- fmt.Printf("[%d/%d] Encrypted %s to %s\n", outOf[0]+1, outOf[1], inFile, outFile)
- return nil
-}
-
-func decrypt(
- inFile string,
- keyfiles []string,
- password string,
- outOf [2]int,
- keep bool,
- overwrite bool,
-) error {
- outFile := strings.TrimSuffix(inFile, ".pcv")
- inReader, keyfileReaders, outWriter, err := openFiles(inFile, keyfiles, outFile, overwrite)
- if err != nil {
- return fmt.Errorf("opening files: %w", err)
- }
- defer func() {
- for _, reader := range append(keyfileReaders, inReader, outWriter) {
- reader.Close()
- }
- }()
-
- bar := progressbar.NewOptions(
- -1,
- progressbar.OptionShowBytes(true),
- progressbar.OptionClearOnFinish(),
- progressbar.OptionUseIECUnits(true),
- progressbar.OptionSetDescription(
- fmt.Sprintf("[%d/%d] Decrypting: %s", outOf[0]+1, outOf[1], inFile),
- ),
- )
- damaged, err := encryption.Decrypt(
- password,
- asReaders(keyfileReaders),
- inReader,
- io.MultiWriter(outWriter, bar),
- false,
- )
- bar.Finish() // don't catch the error, fine to ignore
- if err != nil {
- if !keep {
- removeErr := os.Remove(outFile)
- if removeErr != nil {
- fmt.Printf("error removing %s: %s\n", outFile, removeErr)
- }
- }
- return err
- }
- if damaged {
- fmt.Printf("Warning: %s is damaged but recovered with reed-solomon bytes. Consider re-encrypting the file.\n", inFile)
- }
- fmt.Printf("[%d/%d] Decrypted %s to %s\n", outOf[0]+1, outOf[1], inFile, outFile)
- return nil
-}
-
-func main() {
- a, err := parseArgs()
- if err != nil {
- fmt.Printf("error reading args: %s\n", err)
- os.Exit(1)
- }
-
- for i, inFile := range a.inFiles {
- if strings.HasSuffix(inFile, ".pcv") {
- if a.encryptOnly {
- fmt.Printf("[%d/%d] Skipping %s (encrypt-only is set)\n", i+1, len(a.inFiles), inFile)
- continue
- }
- err := decrypt(inFile, a.keyfiles, a.password, [2]int{i, len(a.inFiles)}, a.keep, a.overwrite)
- if err != nil {
- fmt.Printf("error while decrypting %s: %s\n", inFile, err)
- os.Exit(1)
- }
- } else {
- if a.decryptOnly {
- fmt.Printf("[%d/%d] Skipping %s (decrypt-only is set)\n", i+1, len(a.inFiles), inFile)
- continue
- }
- settings := encryption.Settings{
- Comments: a.comments,
- ReedSolomon: a.reedSolomon,
- Paranoid: a.paranoid,
- Deniability: a.deniability,
- }
- err := encrypt(inFile, a.keyfiles, settings, a.password, [2]int{i, len(a.inFiles)}, a.overwrite)
- if err != nil {
- fmt.Printf("error while encrypting %s: %s\n", inFile, err)
- os.Exit(1)
- }
- }
- }
-}
diff --git a/cmd/picogo/main_test.go b/cmd/picogo/main_test.go
deleted file mode 100644
index 91b533f..0000000
--- a/cmd/picogo/main_test.go
+++ /dev/null
@@ -1,198 +0,0 @@
-package main
-
-import (
- "os"
- "testing"
-
- "github.com/picocrypt/picogo/internal/encryption"
-)
-
-func argsMatch(a, b args) bool {
- if a.reedSolomon != b.reedSolomon {
- return false
- }
- if a.paranoid != b.paranoid {
- return false
- }
- if a.deniability != b.deniability {
- return false
- }
- if len(a.keyfiles) != len(b.keyfiles) {
- return false
- }
- for i := range a.keyfiles {
- if a.keyfiles[i] != b.keyfiles[i] {
- return false
- }
- }
- if a.keep != b.keep {
- return false
- }
- if a.ordered != b.ordered {
- return false
- }
- if a.password != b.password {
- return false
- }
- if a.comments != b.comments {
- return false
- }
- if a.overwrite != b.overwrite {
- return false
- }
- if a.encryptOnly != b.encryptOnly {
- return false
- }
- if a.decryptOnly != b.decryptOnly {
- return false
- }
- if len(a.inFiles) != len(b.inFiles) {
- return false
- }
- for i := range a.inFiles {
- if a.inFiles[i] != b.inFiles[i] {
- return false
- }
- }
- return true
-}
-
-func TestParseArgs(t *testing.T) {
- tests := []struct {
- name string
- args []string
- want args
- }{
- {
- name: "basic case",
- args: []string{"-passfrom", "pass:password", "file1.txt"},
- want: args{inFiles: []string{"file1.txt"}, password: "password"},
- },
- {
- name: "all args",
- args: []string{"-rs", "-paranoid", "-deniability", "-keyfiles", "keyfile1,keyfile2", "-keep", "-ordered", "-passfrom", "pass:password", "-comments", "test comments", "-overwrite", "-encrypt-only", "-decrypt-only", "file1.txt"},
- want: args{
- reedSolomon: true,
- paranoid: true,
- deniability: true,
- keyfiles: []string{"keyfile1", "keyfile2"},
- keep: true,
- ordered: true,
- password: "password",
- comments: "test comments",
- overwrite: true,
- encryptOnly: true,
- decryptOnly: true,
- inFiles: []string{"file1.txt"},
- },
- },
- }
-
- for _, tt := range tests {
- t.Run(tt.name, func(t *testing.T) {
- os.Args = append([]string{"picogo"}, tt.args...)
- got, err := parseArgs()
- if err != nil {
- t.Errorf("parseArgs() error = %v", err)
- return
- }
- if !argsMatch(got, tt.want) {
- t.Errorf("parseArgs() = %v, want %v", got, tt.want)
- }
- })
- }
-}
-
-func fileExists(filename string) bool {
- _, err := os.Stat(filename)
- return !os.IsNotExist(err)
-}
-
-func deleteFile(filename string) {
- err := os.Remove(filename)
- if err != nil {
- panic(err)
- }
-}
-
-func TestDecrypt(t *testing.T) {
- encryptedFilename := "../../internal/encryption/picocrypt_samples/v1.48/base1000.pcv"
- decryptedFilename := "../../internal/encryption/picocrypt_samples/v1.48/base1000"
- err := decrypt(
- encryptedFilename,
- []string{},
- "password",
- [2]int{0, 2},
- false,
- false,
- )
- if err != nil {
- t.Errorf("decrypt() error = %v", err)
- }
- if !fileExists(decryptedFilename) {
- t.Errorf("decrypt() did not create file %s", decryptedFilename)
- }
- deleteFile(decryptedFilename)
-
- encryptedFilename = "../../internal/encryption/picocrypt_samples/v1.48/base1000_kf12.pcv"
- decryptedFilename = "../../internal/encryption/picocrypt_samples/v1.48/base1000_kf12"
- err = decrypt(
- encryptedFilename,
- []string{
- "../../internal/encryption/picocrypt_samples/keyfiles/keyfile1",
- "../../internal/encryption/picocrypt_samples/keyfiles/keyfile2",
- },
- "password",
- [2]int{1, 2},
- false,
- true,
- )
- if err != nil {
- t.Errorf("decrypt() error = %v", err)
- }
- if !fileExists(decryptedFilename) {
- t.Errorf("decrypt() did not create file %s", decryptedFilename)
- }
- deleteFile(decryptedFilename)
-}
-
-func TestEncrypt(t *testing.T) {
- encryptedFilename := "../../internal/encryption/picocrypt_samples/basefiles/base1000.pcv"
- decryptedFilename := "../../internal/encryption/picocrypt_samples/basefiles/base1000"
- err := encrypt(
- decryptedFilename,
- []string{},
- encryption.Settings{},
- "password",
- [2]int{0, 2},
- false,
- )
- if err != nil {
- t.Errorf("encrypt() error = %v", err)
- }
- if !fileExists(encryptedFilename) {
- t.Errorf("encrypt() did not create file %s", encryptedFilename)
- }
- deleteFile(encryptedFilename)
-
- encryptedFilename = "../../internal/encryption/picocrypt_samples/basefiles/base1000.pcv"
- decryptedFilename = "../../internal/encryption/picocrypt_samples/basefiles/base1000"
- err = encrypt(
- decryptedFilename,
- []string{
- "../../internal/encryption/picocrypt_samples/keyfiles/keyfile1",
- "../../internal/encryption/picocrypt_samples/keyfiles/keyfile2",
- },
- encryption.Settings{},
- "password",
- [2]int{1, 2},
- false,
- )
- if err != nil {
- t.Errorf("encrypt() error = %v", err)
- }
- if !fileExists(encryptedFilename) {
- t.Errorf("encrypt() did not create file %s", encryptedFilename)
- }
- deleteFile(encryptedFilename)
-}
diff --git a/go.mod b/go.mod
deleted file mode 100644
index cfc4380..0000000
--- a/go.mod
+++ /dev/null
@@ -1,52 +0,0 @@
-module github.com/picocrypt/picogo
-
-go 1.23.0
-
-toolchain go1.24.1
-
-require (
- fyne.io/fyne/v2 v2.6.1
- github.com/Picocrypt/infectious v0.0.0-20240830233326-3a050f65f9ec
- github.com/Picocrypt/serpent v0.0.0-20240830233833-9ad6ab254fd7
- github.com/jschauma/getpass v0.2.3
- github.com/schollz/progressbar/v3 v3.18.0
- golang.org/x/crypto v0.40.0
-)
-
-require (
- fyne.io/systray v1.11.0 // indirect
- github.com/BurntSushi/toml v1.4.0 // indirect
- github.com/davecgh/go-spew v1.1.1 // indirect
- github.com/fredbi/uri v1.1.0 // indirect
- github.com/fsnotify/fsnotify v1.8.0 // indirect
- github.com/fyne-io/gl-js v0.1.0 // indirect
- github.com/fyne-io/glfw-js v0.2.0 // indirect
- github.com/fyne-io/image v0.1.1 // indirect
- github.com/fyne-io/oksvg v0.1.0 // indirect
- github.com/go-gl/gl v0.0.0-20231021071112-07e5d0ea2e71 // indirect
- github.com/go-gl/glfw/v3.3/glfw v0.0.0-20240506104042-037f3cc74f2a // indirect
- github.com/go-text/render v0.2.0 // indirect
- github.com/go-text/typesetting v0.3.0 // indirect
- github.com/godbus/dbus/v5 v5.1.0 // indirect
- github.com/hack-pad/go-indexeddb v0.3.2 // indirect
- github.com/hack-pad/safejs v0.1.0 // indirect
- github.com/jeandeaual/go-locale v0.0.0-20241217141322-fcc2cadd6f08 // indirect
- github.com/jsummers/gobmp v0.0.0-20230614200233-a9de23ed2e25 // indirect
- github.com/kr/text v0.2.0 // indirect
- github.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db // indirect
- github.com/nfnt/resize v0.0.0-20180221191011-83c6a9932646 // indirect
- github.com/nicksnyder/go-i18n/v2 v2.5.1 // indirect
- github.com/pmezard/go-difflib v1.0.0 // indirect
- github.com/rivo/uniseg v0.4.7 // indirect
- github.com/rymdport/portal v0.4.1 // indirect
- github.com/srwiley/oksvg v0.0.0-20221011165216-be6e8873101c // indirect
- github.com/srwiley/rasterx v0.0.0-20220730225603-2ab79fcdd4ef // indirect
- github.com/stretchr/testify v1.10.0 // indirect
- github.com/yuin/goldmark v1.7.8 // indirect
- golang.org/x/image v0.24.0 // indirect
- golang.org/x/net v0.41.0 // indirect
- golang.org/x/sys v0.34.0 // indirect
- golang.org/x/term v0.33.0 // indirect
- golang.org/x/text v0.27.0 // indirect
- gopkg.in/yaml.v3 v3.0.1 // indirect
-)
diff --git a/go.sum b/go.sum
deleted file mode 100644
index a376746..0000000
--- a/go.sum
+++ /dev/null
@@ -1,100 +0,0 @@
-fyne.io/fyne/v2 v2.6.1 h1:kjPJD4/rBS9m2nHJp+npPSuaK79yj6ObMTuzR6VQ1Is=
-fyne.io/fyne/v2 v2.6.1/go.mod h1:YZt7SksjvrSNJCwbWFV32WON3mE1Sr7L41D29qMZ/lU=
-fyne.io/systray v1.11.0 h1:D9HISlxSkx+jHSniMBR6fCFOUjk1x/OOOJLa9lJYAKg=
-fyne.io/systray v1.11.0/go.mod h1:RVwqP9nYMo7h5zViCBHri2FgjXF7H2cub7MAq4NSoLs=
-github.com/BurntSushi/toml v1.4.0 h1:kuoIxZQy2WRRk1pttg9asf+WVv6tWQuBNVmK8+nqPr0=
-github.com/BurntSushi/toml v1.4.0/go.mod h1:ukJfTF/6rtPPRCnwkur4qwRxa8vTRFBF0uk2lLoLwho=
-github.com/Picocrypt/infectious v0.0.0-20240830233326-3a050f65f9ec h1:/cop0/v0HxIJm1XGDgIlzNJ3e4HhM8nIUPZi5RZ/n1w=
-github.com/Picocrypt/infectious v0.0.0-20240830233326-3a050f65f9ec/go.mod h1:aaFq/WMVxrU2Exl/tXbTFSXajZrqw0mgn/wi42n0fK4=
-github.com/Picocrypt/serpent v0.0.0-20240830233833-9ad6ab254fd7 h1:G36G2vmQAS7CVoHQrHDGAoCWll/0kPCI8Dk7mgwcJFE=
-github.com/Picocrypt/serpent v0.0.0-20240830233833-9ad6ab254fd7/go.mod h1:BxsgRYwUVd92aEwXnXsfXfHw8aHlD/PUyExC/wwk9oI=
-github.com/chengxilo/virtualterm v1.0.4 h1:Z6IpERbRVlfB8WkOmtbHiDbBANU7cimRIof7mk9/PwM=
-github.com/chengxilo/virtualterm v1.0.4/go.mod h1:DyxxBZz/x1iqJjFxTFcr6/x+jSpqN0iwWCOK1q10rlY=
-github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
-github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
-github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/felixge/fgprof v0.9.3 h1:VvyZxILNuCiUCSXtPtYmmtGvb65nqXh2QFWc0Wpf2/g=
-github.com/felixge/fgprof v0.9.3/go.mod h1:RdbpDgzqYVh/T9fPELJyV7EYJuHB55UTEULNun8eiPw=
-github.com/fredbi/uri v1.1.0 h1:OqLpTXtyRg9ABReqvDGdJPqZUxs8cyBDOMXBbskCaB8=
-github.com/fredbi/uri v1.1.0/go.mod h1:aYTUoAXBOq7BLfVJ8GnKmfcuURosB1xyHDIfWeC/iW4=
-github.com/fsnotify/fsnotify v1.8.0 h1:dAwr6QBTBZIkG8roQaJjGof0pp0EeF+tNV7YBP3F/8M=
-github.com/fsnotify/fsnotify v1.8.0/go.mod h1:8jBTzvmWwFyi3Pb8djgCCO5IBqzKJ/Jwo8TRcHyHii0=
-github.com/fyne-io/gl-js v0.1.0 h1:8luJzNs0ntEAJo+8x8kfUOXujUlP8gB3QMOxO2mUdpM=
-github.com/fyne-io/gl-js v0.1.0/go.mod h1:ZcepK8vmOYLu96JoxbCKJy2ybr+g1pTnaBDdl7c3ajI=
-github.com/fyne-io/glfw-js v0.2.0 h1:8GUZtN2aCoTPNqgRDxK5+kn9OURINhBEBc7M4O1KrmM=
-github.com/fyne-io/glfw-js v0.2.0/go.mod h1:Ri6te7rdZtBgBpxLW19uBpp3Dl6K9K/bRaYdJ22G8Jk=
-github.com/fyne-io/image v0.1.1 h1:WH0z4H7qfvNUw5l4p3bC1q70sa5+YWVt6HCj7y4VNyA=
-github.com/fyne-io/image v0.1.1/go.mod h1:xrfYBh6yspc+KjkgdZU/ifUC9sPA5Iv7WYUBzQKK7JM=
-github.com/fyne-io/oksvg v0.1.0 h1:7EUKk3HV3Y2E+qypp3nWqMXD7mum0hCw2KEGhI1fnBw=
-github.com/fyne-io/oksvg v0.1.0/go.mod h1:dJ9oEkPiWhnTFNCmRgEze+YNprJF7YRbpjgpWS4kzoI=
-github.com/go-gl/gl v0.0.0-20231021071112-07e5d0ea2e71 h1:5BVwOaUSBTlVZowGO6VZGw2H/zl9nrd3eCZfYV+NfQA=
-github.com/go-gl/gl v0.0.0-20231021071112-07e5d0ea2e71/go.mod h1:9YTyiznxEY1fVinfM7RvRcjRHbw2xLBJ3AAGIT0I4Nw=
-github.com/go-gl/glfw/v3.3/glfw v0.0.0-20240506104042-037f3cc74f2a h1:vxnBhFDDT+xzxf1jTJKMKZw3H0swfWk9RpWbBbDK5+0=
-github.com/go-gl/glfw/v3.3/glfw v0.0.0-20240506104042-037f3cc74f2a/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
-github.com/go-text/render v0.2.0 h1:LBYoTmp5jYiJ4NPqDc2pz17MLmA3wHw1dZSVGcOdeAc=
-github.com/go-text/render v0.2.0/go.mod h1:CkiqfukRGKJA5vZZISkjSYrcdtgKQWRa2HIzvwNN5SU=
-github.com/go-text/typesetting v0.3.0 h1:OWCgYpp8njoxSRpwrdd1bQOxdjOXDj9Rqart9ML4iF4=
-github.com/go-text/typesetting v0.3.0/go.mod h1:qjZLkhRgOEYMhU9eHBr3AR4sfnGJvOXNLt8yRAySFuY=
-github.com/go-text/typesetting-utils v0.0.0-20241103174707-87a29e9e6066 h1:qCuYC+94v2xrb1PoS4NIDe7DGYtLnU2wWiQe9a1B1c0=
-github.com/go-text/typesetting-utils v0.0.0-20241103174707-87a29e9e6066/go.mod h1:DDxDdQEnB70R8owOx3LVpEFvpMK9eeH1o2r0yZhFI9o=
-github.com/godbus/dbus/v5 v5.1.0 h1:4KLkAxT3aOY8Li4FRJe/KvhoNFFxo0m6fNuFUO8QJUk=
-github.com/godbus/dbus/v5 v5.1.0/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA=
-github.com/google/pprof v0.0.0-20211214055906-6f57359322fd h1:1FjCyPC+syAzJ5/2S8fqdZK1R22vvA0J7JZKcuOIQ7Y=
-github.com/google/pprof v0.0.0-20211214055906-6f57359322fd/go.mod h1:KgnwoLYCZ8IQu3XUZ8Nc/bM9CCZFOyjUNOSygVozoDg=
-github.com/hack-pad/go-indexeddb v0.3.2 h1:DTqeJJYc1usa45Q5r52t01KhvlSN02+Oq+tQbSBI91A=
-github.com/hack-pad/go-indexeddb v0.3.2/go.mod h1:QvfTevpDVlkfomY498LhstjwbPW6QC4VC/lxYb0Kom0=
-github.com/hack-pad/safejs v0.1.0 h1:qPS6vjreAqh2amUqj4WNG1zIw7qlRQJ9K10eDKMCnE8=
-github.com/hack-pad/safejs v0.1.0/go.mod h1:HdS+bKF1NrE72VoXZeWzxFOVQVUSqZJAG0xNCnb+Tio=
-github.com/jeandeaual/go-locale v0.0.0-20241217141322-fcc2cadd6f08 h1:wMeVzrPO3mfHIWLZtDcSaGAe2I4PW9B/P5nMkRSwCAc=
-github.com/jeandeaual/go-locale v0.0.0-20241217141322-fcc2cadd6f08/go.mod h1:ZDXo8KHryOWSIqnsb/CiDq7hQUYryCgdVnxbj8tDG7o=
-github.com/jschauma/getpass v0.2.3 h1:tJySlkGtHpT3JO1UBjxrLDSp9qvbb0gKRlcNslec10g=
-github.com/jschauma/getpass v0.2.3/go.mod h1:mk40NJ7cAbcRkeDKDIajUsfQB/yweyiqjf29kyMnS18=
-github.com/jsummers/gobmp v0.0.0-20230614200233-a9de23ed2e25 h1:YLvr1eE6cdCqjOe972w/cYF+FjW34v27+9Vo5106B4M=
-github.com/jsummers/gobmp v0.0.0-20230614200233-a9de23ed2e25/go.mod h1:kLgvv7o6UM+0QSf0QjAse3wReFDsb9qbZJdfexWlrQw=
-github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
-github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
-github.com/mattn/go-runewidth v0.0.16 h1:E5ScNMtiwvlvB5paMFdw9p4kSQzbXFikJ5SQO6TULQc=
-github.com/mattn/go-runewidth v0.0.16/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w=
-github.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db h1:62I3jR2EmQ4l5rM/4FEfDWcRD+abF5XlKShorW5LRoQ=
-github.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db/go.mod h1:l0dey0ia/Uv7NcFFVbCLtqEBQbrT4OCwCSKTEv6enCw=
-github.com/nfnt/resize v0.0.0-20180221191011-83c6a9932646 h1:zYyBkD/k9seD2A7fsi6Oo2LfFZAehjjQMERAvZLEDnQ=
-github.com/nfnt/resize v0.0.0-20180221191011-83c6a9932646/go.mod h1:jpp1/29i3P1S/RLdc7JQKbRpFeM1dOBd8T9ki5s+AY8=
-github.com/nicksnyder/go-i18n/v2 v2.5.1 h1:IxtPxYsR9Gp60cGXjfuR/llTqV8aYMsC472zD0D1vHk=
-github.com/nicksnyder/go-i18n/v2 v2.5.1/go.mod h1:DrhgsSDZxoAfvVrBVLXoxZn/pN5TXqaDbq7ju94viiQ=
-github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e h1:fD57ERR4JtEqsWbfPhv4DMiApHyliiK5xCTNVSPiaAs=
-github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e/go.mod h1:zD1mROLANZcx1PVRCS0qkT7pwLkGfwJo4zjcN/Tysno=
-github.com/pkg/profile v1.7.0 h1:hnbDkaNWPCLMO9wGLdBFTIZvzDrDfBM2072E1S9gJkA=
-github.com/pkg/profile v1.7.0/go.mod h1:8Uer0jas47ZQMJ7VD+OHknK4YDY07LPUC6dEvqDjvNo=
-github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
-github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
-github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ=
-github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88=
-github.com/rymdport/portal v0.4.1 h1:2dnZhjf5uEaeDjeF/yBIeeRo6pNI2QAKm7kq1w/kbnA=
-github.com/rymdport/portal v0.4.1/go.mod h1:kFF4jslnJ8pD5uCi17brj/ODlfIidOxlgUDTO5ncnC4=
-github.com/schollz/progressbar/v3 v3.18.0 h1:uXdoHABRFmNIjUfte/Ex7WtuyVslrw2wVPQmCN62HpA=
-github.com/schollz/progressbar/v3 v3.18.0/go.mod h1:IsO3lpbaGuzh8zIMzgY3+J8l4C8GjO0Y9S69eFvNsec=
-github.com/srwiley/oksvg v0.0.0-20221011165216-be6e8873101c h1:km8GpoQut05eY3GiYWEedbTT0qnSxrCjsVbb7yKY1KE=
-github.com/srwiley/oksvg v0.0.0-20221011165216-be6e8873101c/go.mod h1:cNQ3dwVJtS5Hmnjxy6AgTPd0Inb3pW05ftPSX7NZO7Q=
-github.com/srwiley/rasterx v0.0.0-20220730225603-2ab79fcdd4ef h1:Ch6Q+AZUxDBCVqdkI8FSpFyZDtCVBc2VmejdNrm5rRQ=
-github.com/srwiley/rasterx v0.0.0-20220730225603-2ab79fcdd4ef/go.mod h1:nXTWP6+gD5+LUJ8krVhhoeHjvHTutPxMYl5SvkcnJNE=
-github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
-github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
-github.com/yuin/goldmark v1.7.8 h1:iERMLn0/QJeHFhxSt3p6PeN9mGnvIKSpG9YYorDMnic=
-github.com/yuin/goldmark v1.7.8/go.mod h1:uzxRWxtg69N339t3louHJ7+O03ezfj6PlliRlaOzY1E=
-golang.org/x/crypto v0.40.0 h1:r4x+VvoG5Fm+eJcxMaY8CQM7Lb0l1lsmjGBQ6s8BfKM=
-golang.org/x/crypto v0.40.0/go.mod h1:Qr1vMER5WyS2dfPHAlsOj01wgLbsyWtFn/aY+5+ZdxY=
-golang.org/x/image v0.24.0 h1:AN7zRgVsbvmTfNyqIbbOraYL8mSwcKncEj8ofjgzcMQ=
-golang.org/x/image v0.24.0/go.mod h1:4b/ITuLfqYq1hqZcjofwctIhi7sZh2WaCjvsBNjjya8=
-golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
-golang.org/x/net v0.41.0/go.mod h1:B/K4NNqkfmg07DQYrbwvSluqCJOOXwUjeb/5lOisjbA=
-golang.org/x/sys v0.34.0 h1:H5Y5sJ2L2JRdyv7ROF1he/lPdvFsd0mJHFw2ThKHxLA=
-golang.org/x/sys v0.34.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
-golang.org/x/term v0.33.0 h1:NuFncQrRcaRvVmgRkvM3j/F00gWIAlcmlB8ACEKmGIg=
-golang.org/x/term v0.33.0/go.mod h1:s18+ql9tYWp1IfpV9DmCtQDDSRBUjKaw9M1eAv5UeF0=
-golang.org/x/text v0.27.0 h1:4fGWRpyh641NLlecmyl4LOe6yDdfaYNrGb2zdfo4JV4=
-golang.org/x/text v0.27.0/go.mod h1:1D28KMCvyooCX9hBiosv5Tz/+YLxj0j7XhWjpSUF7CU=
-gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
-gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f h1:BLraFXnmrev5lT+xlilqcH8XK9/i0At2xKjWk4p6zsU=
-gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
-gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
-gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/icon.png b/icon.png
deleted file mode 100644
index acfb25d99c3d04a9413ce3069cdbee7b0ed22aea..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001
literal 4779
zcmX9?2{;sQ7@yr`T`R}3*5)WVayBADC^@r|h@~*dQCo!YcO-WS=gav9^l8&b$3#scU|*!lul*vgo+u
zkeM1KJ%E5YRJ3v8Xwj3ZCMdtOUJDw$D$Ri7vmjB)MakTI_l2|3KZT~Pwo5;`ykb%4?-1UeP`J|U3=dWdz
z^y_vn>bUk6n1;+xu{xy+#oqM`@pMTCd3Cqi?eK?M>-|D
z5+emyb(t(H89(r*%&lyql@NrIbps+_1E{K(a=nC%689>DmD2;74tJ*rp>NMUI4Bs1
z#u76)6Kab^CZ!*RR;BM@h_XlS?sMH%v48c|iMdpO>7d7J`(r9s`nDg}d^~EXwW^Rg
zJj#@M7>JY}{-Bq7*1vkptz(kxw*Km@S?(0sU)_#{WKF3O%ziDmEg-ZzKJB)cM8)m?
z{&IDwqKj>+0C4LrgES9leL$m)RK2RLFXeh%c%%KP{0teu>a!H$`w-flJeM?5YtFBY
ze$fmRfzo{rVO0YOlYpvhyGIDArihJ}KmC+wNl$=d_2F)0eDa}H2}yCpo%yL|Tyf95
z51RBTP~Xz)yH#jPO(|Qh#ar#c
zw%nvUfoU_mutM_U*J9t(?Aofs`Kt(U+8|tmGY}u_GFPsM8#H4te`
zc_P0ilG@;KU#ovGUQPZuu+l0)IXUNfR=oeZo1%Gyl7t?Qbwx#AYKlVrNOL4r{7|W3nwKCPCCL)&7Kv@
zoSfj;k(Q=L7j-9ueaF;`V_IT|6%hX#;IVY6!a
zhC%Z+2^sHUDc|R8FM%pDs~*$&yTenHF*c+`E$6+b?P+p-0eB`-EQVPVzmCMFh?Zo*
zN%JhwyVjJ=m6x8AS)eR0{p$~*&b26WW;6l1w|*M`na-NCFQ1PApbGQD0?Qb?Eb-u@
ziyXlPl7639fk<`=keYvPxIA!~JTcWlvy)dM#XVb&{u&}=>iki@Ro2N8K=Oro-}FGA
z_Gnz2b(xz{5*fgMj;Oz>dAr+x;0KRRY%6JXRv_#Y3nU_15(Nz}QLXMQUjTfC(WqB9
z2fzu-B^85?Q{zJoTPeza^c@HA@6OZE~J#k8IPbu*q()q^meooH5$9PPi_C|`@q
zI&X2eq+K$NT=pZ4{m=y)4`S(wp~nVFgHCS*9910-fH4$Bz_cFRyVkMo0Gkt}?YhL=
zmZ)<~uX|hCkV-T4>$n8RI~-OyrTUvn19T;+`TaaWu5Le#2b&+Uf3y>l)QJy`+tKOI`xMK8v|m)YMo@-SM^g9RwIUCSfNa$U4$AYW0jUp)ocQOP
zpnt`{$ToYJ#(f0czljo$B#PO~LTAX7%SO`w(E_<#y8%Xm!5UagZ@6jxMQp2uqicO;
zhE})F(0H@iTzF?&3<;{Cz-O<1hgAg9>NDo2=0_{7{QL4Z#5#Vu2i;6R4wbJ8;_b>F
z4i@&_tql>U9I&BUxfwK0Db9EnCp9ka1Fcgg+9cbAnkoU3EDB7F7PsU!6hvd=Vbi7R
znOlTg-2o$gw3}BQB((3u$*dqiDn8d?a`fE?n}}r+j18H-*pODZW?bEjr=m|^RG}ia2Uk{U}P~Q
zjB8WFa}PKPjfFfNgq8k_p{I?((}GDaM8n5I6jOsj<-;m<0frxe@-pG3Cu1jAc*jeb
z!Y*t+sf9<;d*=APnxBRi#c1?Vj0iZvOklbM&G2hiBJmuG;hTG=?YBUsE*QZWFP=l?
zD9l>l`aT+KQygr1rEjGDna8W9MbA)^<};2b${zUD-w{^Ov*}`;FNPylpn-{y*|PS#
zpRFr5=Gx9zOkV+fX|CXDgVnN90CZQTCto`@G?EfezZI0Ove{T3QLkq8rhi=wy&oH^
zZYNq9Sy{(Js@~l57mOdh^zn=n&q}W*FnL1|@9OsTrc_U*_T46lg=ech&L@(ki(eZ9
zmXRvqC7MP8Z#_aj1RV4{cCvm}0=xf_Q1Q6n_92Gs<1}KwhIR9rJe)jogD*aFIF1Dr
zJ)T10nZ9c&oS=(x8bw3ib?nn}H9{p1cyABgkz}4tgg2xW9(|l5zN4a=E#QSN|TlyZI|V(FrI)>Y;&?tQS;}Ps6;hJ
z%?H=`*y;d{ls&cXcVV~4iMw)7qGNOTNRZM|xmrhmSSNraX>55=)xU*Gw%*yK9=fs*
z&6rvE#8r#CIwI^{s7{$IN|=iqXk+_LHC+-p^(#haoE{+-@d4q(5DxhE_TAX{yErMe
zcAh30Bk9rB$Mm^QLZSIwV5!OHT57yy!-zh5|2MYN2w#>D`&q#LgnLC^TXQb#a^W*h
z<)(H(b>`c+7+2{~JI_v$MduJ1Y;c*vrq?Y&uF^7VNa>M1;CugV^l#4IX>RheH^v?Q
zK@?i>tDjK6wWfUY(vjBEF)}cXd1Q*;_y*_}Y~*SDsk0xSt1t!B29+2+YboQY2IvDe
zB)w6C&K&m+^!2B#AiEIW)sO{>T^)Kl)uLR6s=hq5#LNaO34PlufjREsPY}$3EWUBX
zy^_M^S!*46QGl5+k9=9}TdcL-|58}~7H0cL&4yZP9!~Mp&<9qqts-;KqGs6n5evB;
z;QG@M7N&|ng`l~t-0R-45cW<%Q;n5i1n;q6RiaT#1%
zwpT!Z$05FyR{=443c_K`k>Lu4a^MmOHd5Ovi%^nV);*CL1xo^I<=Oj8rT-d@f`;ZA
z2>3a8UqUww&*n$y`|Nu=#-m^4ufKDy^rIf_p;gWL`~!|pgKuQxeO@%{Re5D!+U#VG
zZ+zxrHbtTcSDUytvvZ-3P{IKG?r#UH!T2tYMS96S*R#A+%}gYjN9Fi8(c9
zi&W`FAbE_txvh-%K3Ed6?@fp1kW~(1(b0tMnaYzAa4<{?vaMXjRS&FT-0hLzx2Mo_
zuW|3mf>Q6g^Sd^lt$ig5wnZ#w0lI2GF(g7$;Yx183W2#te!J3r_TvlrDcNk{!le&$
zbI#0`QRUL#Uh1f@e?M6vy=6g+%U$j6`*|EHW1&0zAZiL50umX
z1MQ;Z{TI91PYpc~zo|fU-^7`w9A$r7KD=0?5lw_t6)m5wKCrwa#rkKa1?WUF`@wBE
z9ITE5BBuk6);DH!{QhF6Lp`6hu5<15_F!JZ+>GJApI&yj4afUxvI6IPe)aA6s{|e(
z=vjqC=BBi9PQN{?*d4^x_oWPy
z);wnR-t4&mSyH2tH|(dKLi4=qz3Kn}d#5%$2h-_EN&fmKf`dL^si5yz{M8*O>S8BFB|vpA6d>qFf$hQov^qmaWQpg`=miRhRjfck$R-@
zZx!EJTriSg
z>{K_lEIHJLd(*gy*9goBU&~YO?B~-7vKusXB9}$!ffxZj-?NR9=Xd-*&ew>
z6N07AlOVd`#fO1E)|V`T5za2#JI?<+4dLueqg};2s$7!a$*I536Lk>ldKs{{&lhLRzar`>dP6zjU;di6Pv-s(0`PXKglyw}F#JW%4
z!Zyjt->c||o#xTgvpCq~@Jgl3LTrAV;XCfEIDhId!rDXJgylCGwG@G_`6$-trb_~R
z$2v6LGuj-8Q7uWOE+_>H{%%dy?uIO
zx1IR97FTWHX~}Y0)ML^Tj4f_=^oI2MxYrdnDm!WTxvlG4V|!!|o{-
zzoCc+O(R%^7)@Wv>ja__H#Q1JZ!+DcCMRgBfC7@h=QP}@pSVBidQT@r
zSyB443|O(ARkf7Vr^R2Q{$3f>;Y3PXTsM9&rfN($cQ^c}6d0VlLt_E~f=x(6Y<$$%
z6b3<~)CqtF)nVjpUc_V`6eEm9BH0*^q+lrmYx{_1NV+R%(4gzkW|tD~Er{15njq;H
zz&)E6Tm6H!rbj^@WD4(53lf$wUA-ZPHCdHD6s8Qv=8dES^djEdmsvnVKYTWywGM8^
zMu*ONE8Bc@?Ktt2IFe=;8SVsOvB(%EA=K?h;j?{C4ny|}xu;i$A^tkWv2?Oh2a;>(
z8hN=FY3h2tqdRJjTMd|mppfc2r=os2@iI*ZK@iwJl60t3|>Sr}#mIMuME=!=c;
zc#r= len(nm.chachaNonces) {
- chachaNonce := [24]byte{}
- serpentIV := [16]byte{}
- _, err := io.ReadFull(nm.hkdf, chachaNonce[:])
- if err != nil {
- return err
- }
- _, err = io.ReadFull(nm.hkdf, serpentIV[:])
- if err != nil {
- return err
- }
- nm.chachaNonces = append(nm.chachaNonces, chachaNonce)
- nm.serpentIVs = append(nm.serpentIVs, serpentIV)
- }
- return nil
-}
-
-func (nm *nonceIvManager) nonce(i int) ([24]byte, error) {
- err := nm.extendTo(i)
- if err != nil {
- return [24]byte{}, err
- }
- return nm.chachaNonces[i], nil
-}
-
-func (nm *nonceIvManager) iv(i int) ([16]byte, error) {
- err := nm.extendTo(i)
- if err != nil {
- return [16]byte{}, err
- }
- return nm.serpentIVs[i], nil
-}
-
-func newNonceManager(hkdf io.Reader, seeds *seeds) *nonceIvManager {
- nm := &nonceIvManager{
- seeds: seeds,
- hkdf: hkdf,
- }
- return nm
-}
-
-type denyNonceManager struct {
- nonces [][24]byte
- header *header
-}
-
-func (dnm *denyNonceManager) extendTo(i int) error {
- if len(dnm.nonces) == 0 {
- dnm.nonces = append(dnm.nonces, dnm.header.seeds.DenyNonce)
- }
- for i >= len(dnm.nonces) {
- previous := dnm.nonces[len(dnm.nonces)-1]
- tmp := sha3.New256()
- _, err := tmp.Write(previous[:])
- if err != nil {
- return err
- }
- nonce := [24]byte{}
- copy(nonce[:], tmp.Sum(nil))
- dnm.nonces = append(dnm.nonces, nonce)
- }
- return nil
-}
-
-func (dnm *denyNonceManager) nonce(i int) ([24]byte, error) {
- err := dnm.extendTo(i)
- if err != nil {
- return [24]byte{}, err
- }
- return dnm.nonces[i], nil
-}
-
-type serpentCipher struct {
- serpentBlock cipher.Block
- cipher cipher.Stream
- ivManager ivManager
- header *header
-}
-
-func (sc *serpentCipher) reset(i int) error {
- serpentIV, err := sc.ivManager.iv(i)
- if err != nil {
- return err
- }
- sc.cipher = cipher.NewCTR(sc.serpentBlock, serpentIV[:])
- return nil
-}
-
-func (sc *serpentCipher) xor(p []byte) {
- sc.cipher.XORKeyStream(p, p)
-}
-
-type chachaCipher struct {
- cipher *chacha20.Cipher
- nonceManager nonceManager
- key []byte
-}
-
-func (cc *chachaCipher) reset(i int) error {
- nonce, err := cc.nonceManager.nonce(i)
- if err != nil {
- return err
- }
- cc.cipher, err = chacha20.NewUnauthenticatedCipher(cc.key[:], nonce[:])
- return err
-}
-
-func (cc *chachaCipher) xor(p []byte) {
- cc.cipher.XORKeyStream(p, p)
-}
-
-type xorCipher interface {
- xor(p []byte)
- reset(i int) error
-}
-
-type rotatingCipher struct {
- xorCipher
- writtenCounter int64
- resetCounter int
- initialised bool
-}
-
-func (rc *rotatingCipher) stream(p []byte) ([]byte, error) {
- if !rc.initialised {
- err := rc.xorCipher.reset(0)
- if err != nil {
- return nil, err
- }
- rc.initialised = true
- }
- i := int64(0)
- for i < int64(len(p)) {
- j := int64(len(p)) - i
- if j > (resetNonceAt - rc.writtenCounter) {
- j = resetNonceAt - rc.writtenCounter
- }
- rc.xor(p[i : i+j])
- rc.writtenCounter += j
- if rc.writtenCounter == resetNonceAt {
- rc.writtenCounter = 0
- rc.resetCounter++
- err := rc.reset(rc.resetCounter)
- if err != nil {
- return nil, err
- }
- }
- i += j
- }
- return p, nil
-}
-
-func (rc *rotatingCipher) flush() ([]byte, error) {
- return nil, nil
-}
-
-func newDeniabilityStream(password string, header *header) streamerFlusher {
- nonceManager := denyNonceManager{header: header}
- denyKey := generateDenyKey(password, header.seeds.DenySalt)
- return &rotatingCipher{
- xorCipher: &chachaCipher{
- nonceManager: &nonceManager,
- key: denyKey[:],
- },
- }
-}
-
-func newEncryptionStreams(keys keys, header *header) ([]streamerFlusher, error) {
- nonceIvManager := newNonceManager(keys.hkdf, &(header.seeds))
- chachaStream := &rotatingCipher{
- xorCipher: &chachaCipher{
- nonceManager: nonceIvManager,
- key: keys.key[:],
- },
- }
- if !header.settings.Paranoid {
- return []streamerFlusher{chachaStream}, nil
- }
- sb, err := serpent.NewCipher(keys.serpentKey[:])
- if err != nil {
- return nil, fmt.Errorf("creating serpent cipher: %w", err)
- }
- serpentStream := &rotatingCipher{
- xorCipher: &serpentCipher{
- serpentBlock: sb,
- ivManager: nonceIvManager,
- header: header,
- cipher: nil, // will be set during streaming
- },
- }
- return []streamerFlusher{chachaStream, serpentStream}, nil
-}
diff --git a/internal/encryption/consistency_test.go b/internal/encryption/consistency_test.go
deleted file mode 100644
index d1200b8..0000000
--- a/internal/encryption/consistency_test.go
+++ /dev/null
@@ -1,172 +0,0 @@
-package encryption
-
-import (
- "bytes"
- "crypto/rand"
- "io"
- "log"
- mrand "math/rand/v2"
- "testing"
-
- "golang.org/x/crypto/sha3"
-)
-
-func shaArgonKey(password string, salt [16]byte, iterations uint32, parallelism uint8) [32]byte {
- // faster stand-in for testing
- data := append(append(append([]byte(password), salt[:]...), byte(iterations)), byte(parallelism))
- hasher := sha3.New256()
- _, err := hasher.Write(data)
- if err != nil {
- panic(err)
- }
- key := [32]byte{}
- copy(key[:], hasher.Sum(nil))
- return key
-}
-
-func allSettings() []Settings {
- settings := []Settings{}
- for _, comments := range []string{"", "test"} {
- for _, reedSolomon := range []bool{true, false} {
- for _, paranoid := range []bool{true, false} {
- for _, orderedKf := range []bool{true, false} {
- for _, deniability := range []bool{true, false} {
- s := Settings{comments, reedSolomon, paranoid, orderedKf, deniability}
- settings = append(settings, s)
- }
- }
- }
- }
- }
- return settings
-}
-
-func getKeyfiles(settings Settings, numKeyfiles int, t *testing.T) ([]io.Reader, []io.Reader) {
- kf1, kf2 := []io.Reader{}, []io.Reader{}
- for i := 0; i < numKeyfiles; i++ {
- key1 := make([]byte, 100)
- _, err := rand.Read(key1)
- if err != nil {
- t.Fatal(err)
- }
- key2 := make([]byte, len(key1))
- copy(key2, key1)
- kf1 = append(kf1, bytes.NewBuffer(key1))
- kf2 = append(kf2, bytes.NewBuffer(key2))
- }
- if !settings.OrderedKf {
- for i := len(kf2) - 1; i > 0; i-- {
- j := mrand.IntN(i + 1)
- kf2[i], kf2[int(j)] = kf2[int(j)], kf2[i]
- }
- }
- return kf1, kf2
-}
-
-func randomPassword() string {
- password := ""
- n := mrand.IntN(100) + 1
- for i := 0; i < n; i++ {
- char := mrand.IntN(128)
- password += string(byte(char))
- }
- return password
-}
-
-func randomData(size int) ([]byte, error) {
- data := make([]byte, size)
- _, err := rand.Read(data)
- if err != nil {
- return nil, err
- }
- return data, nil
-}
-
-func buff(data []byte) *bytes.Buffer {
- d := make([]byte, len(data))
- copy(d, data)
- return bytes.NewBuffer(d)
-}
-
-func testConsistency(settings Settings, size int, numKeyfiles int, t *testing.T) {
- original, err := randomData(size)
- if err != nil {
- t.Fatal("opening file:", err)
- }
-
- password := randomPassword()
- kf1, kf2 := getKeyfiles(settings, numKeyfiles, t)
-
- headless := bytes.NewBuffer([]byte{})
- header, err := EncryptHeadless(buff(original), password, kf1, settings, headless)
- if err != nil {
- t.Fatal(err)
- }
- headlessLen := headless.Len()
- headed := bytes.NewBuffer([]byte{})
- err = PrependHeader(headless, headed, header)
- if err != nil {
- t.Fatal(err)
- }
- encryptedLen := headed.Len()
- encrypted, err := io.ReadAll(headed)
- if err != nil {
- t.Fatal(err)
- }
- decrypted := bytes.NewBuffer([]byte{})
- Decrypt(password, kf2, buff(encrypted), decrypted, false)
-
- result, err := io.ReadAll(decrypted)
- if err != nil {
- t.Fatal(err)
- }
- if !bytes.Equal(result, original) {
- log.Println("original length:", len(original))
- log.Println("headless length:", headlessLen)
- log.Println("headed length:", encryptedLen)
- log.Println("decrypted length:", len(result))
- log.Println("missing bytes:", len(original)-len(result))
- t.Fatal("decryption does not match")
- }
-
-}
-
-func TestConsistencyEmptyFile(t *testing.T) {
- // test for an empty file
- argonKey = shaArgonKey
- for _, settings := range allSettings() {
- for numKeyfiles := range 3 {
- testConsistency(settings, 0, numKeyfiles, t)
- }
- }
-}
-
-func TestConsistencySmallFile(t *testing.T) {
- // test for a file size less than readSize
- argonKey = shaArgonKey
- for _, settings := range allSettings() {
- for numKeyfiles := range 3 {
- testConsistency(settings, readSize/2, numKeyfiles, t)
- }
- }
-}
-
-func TestConsistencyLargeFile(t *testing.T) {
- // test for a file size greater than readSize
- argonKey = shaArgonKey
- for _, settings := range allSettings() {
- for numKeyfiles := range 3 {
- testConsistency(settings, readSize*2+500, numKeyfiles, t)
- }
- }
-}
-
-func TestConsistencyReadSize(t *testing.T) {
- // test for a file exactly at readSize
- argonKey = shaArgonKey
- for _, settings := range allSettings() {
- for numKeyfiles := range 3 {
- testConsistency(settings, readSize, numKeyfiles, t)
- }
- }
-}
diff --git a/internal/encryption/decrypt.go b/internal/encryption/decrypt.go
deleted file mode 100644
index 77ff2a9..0000000
--- a/internal/encryption/decrypt.go
+++ /dev/null
@@ -1,448 +0,0 @@
-package encryption
-
-import (
- "bytes"
- "crypto/hmac"
- "errors"
- "fmt"
- "hash"
- "io"
- "regexp"
- "strconv"
- "strings"
-
- "golang.org/x/crypto/blake2b"
- "golang.org/x/crypto/sha3"
-)
-
-type damageTracker struct {
- damage bool
-}
-
-type buffer struct {
- size int
- data []byte
-}
-
-func (b *buffer) isFull() bool {
- return len(b.data) == b.size
-}
-
-func (b *buffer) add(p []byte) []byte {
- idx := len(p)
- if len(p) > b.size-len(b.data) {
- idx = b.size - len(b.data)
- }
- if idx > 0 {
- b.data = append(b.data, p[:idx]...)
- return p[idx:]
- }
- return p
-}
-
-func parseVersion(versionBytes []byte) (bool, string, error) {
- if len(versionBytes) != (versionSize * 3) {
- return false, "", fmt.Errorf("invalid version length: %d", len(versionBytes))
- }
- v := make([]byte, versionSize)
- damaged, _, err := rsDecode(v, versionBytes[:], false)
- if err != nil {
- return damaged, "", fmt.Errorf("decoding version: %w", err)
- }
- valid, err := regexp.Match(`^v1\.\d{2}`, v)
- if err != nil {
- return damaged, "", fmt.Errorf("parsing version format: %w", err)
- }
- if !valid {
- return damaged, "", nil
- }
- return damaged, string(v), nil
-}
-
-type versionStream struct {
- buff buffer
- damageTracker *damageTracker
-}
-
-func (v *versionStream) stream(p []byte) ([]byte, error) {
- if !v.buff.isFull() {
- p = v.buff.add(p)
- if v.buff.isFull() {
- // check that the version is actually good
- damaged, version, err := parseVersion(v.buff.data)
- v.damageTracker.damage = v.damageTracker.damage || damaged
- if err != nil {
- return nil, fmt.Errorf("parsing version: %w", err)
- }
- if version == "" {
- return nil, ErrHeaderCorrupted
- }
- }
- }
- return p, nil
-}
-
-func makeVersionStream(damageTracker *damageTracker) *versionStream {
- return &versionStream{
- buff: buffer{size: versionSize * 3},
- damageTracker: damageTracker,
- }
-}
-
-type deniabilityStream struct {
- password string
- buff buffer
- deny streamer
- header *header
-}
-
-func (d *deniabilityStream) stream(p []byte) ([]byte, error) {
- if !d.buff.isFull() {
- p = d.buff.add(p)
- if d.buff.isFull() {
- // Don't catch damaged flag, it is handled by the version stream
- _, version, err := parseVersion(d.buff.data[:versionSize*3])
- if err != nil {
- return nil, fmt.Errorf("parsing version: %w", err)
- }
- if version != "" {
- d.header.settings.Deniability = false
- p = append(d.buff.data, p...)
- } else {
- d.header.settings.Deniability = true
- salt := [16]byte{}
- nonce := [24]byte{}
- copy(salt[:], d.buff.data[:len(salt)])
- copy(nonce[:], d.buff.data[len(salt):])
- d.header.seeds.DenyNonce = nonce
- d.header.seeds.DenySalt = salt
- d.deny = newDeniabilityStream(d.password, d.header)
- }
- }
- }
- if d.deny != nil {
- var err error
- p, err = d.deny.stream(p)
- if err != nil {
- return nil, fmt.Errorf("denying data: %w", err)
- }
- }
- return p, nil
-}
-
-func makeHeaderDeniabilityStream(password string, header *header) *deniabilityStream {
- return &deniabilityStream{
- password: password,
- buff: buffer{size: 16 + 24}, // 16 bytes for salt, 24 bytes for nonce
- header: header,
- deny: nil, // will be set during streaming
- }
-}
-
-type flagStream struct {
- buff buffer
- header *header
- damageTracker *damageTracker
-}
-
-func (f *flagStream) stream(p []byte) ([]byte, error) {
- if !f.buff.isFull() {
- p = f.buff.add(p)
- if f.buff.isFull() {
- data := make([]byte, flagsSize)
- damaged, corrupted, err := rsDecode(data, f.buff.data, false)
- f.damageTracker.damage = f.damageTracker.damage || damaged
- if corrupted {
- return nil, ErrHeaderCorrupted
- }
- if err != nil {
- return nil, fmt.Errorf("decoding flags: %w", err)
- }
- f.header.settings.Paranoid = data[0] == 1
- f.header.usesKf = data[1] == 1
- f.header.settings.OrderedKf = data[2] == 1
- f.header.settings.ReedSolomon = data[3] == 1
- f.header.nearMiBFlag = data[4] == 1
- }
- }
- return p, nil
-}
-
-func makeFlagStream(header *header, damageTracker *damageTracker) *flagStream {
- return &flagStream{buffer{size: flagsSize * 3}, header, damageTracker}
-}
-
-type commentStream struct {
- lenBuff buffer
- commentBuff buffer
- header *header
- damageTracker *damageTracker
-}
-
-func (c *commentStream) stream(p []byte) ([]byte, error) {
- if !c.lenBuff.isFull() {
- p = c.lenBuff.add(p)
- if c.lenBuff.isFull() {
- cLenRune := make([]byte, commentSize)
- damaged, corrupted, err := rsDecode(cLenRune, c.lenBuff.data, false)
- c.damageTracker.damage = c.damageTracker.damage || damaged
- if corrupted {
- return nil, ErrHeaderCorrupted
- }
- if err != nil {
- return nil, fmt.Errorf("decoding comment length: %w", err)
- }
- cLen, err := strconv.Atoi(string(cLenRune))
- if err != nil {
- return nil, fmt.Errorf("parsing comment length: %w", ErrHeaderCorrupted)
- }
- if (cLen < 0) || (cLen > maxCommentsLength) {
- return nil, ErrHeaderCorrupted
- }
- c.commentBuff = buffer{size: cLen * 3}
- }
- }
- if c.lenBuff.isFull() && !c.commentBuff.isFull() {
- p = c.commentBuff.add(p)
- if c.commentBuff.isFull() {
- var builder strings.Builder
- for i := 0; i < len(c.commentBuff.data); i += 3 {
- value := [1]byte{}
- // Ignore corruption on comments, they are not critical
- damaged, _, err := rsDecode(value[:], c.commentBuff.data[i:i+3], false)
- c.damageTracker.damage = c.damageTracker.damage || damaged
- if err != nil {
- return nil, fmt.Errorf("decoding comment length: %w", err)
- }
- builder.WriteByte(value[0])
- }
- c.header.settings.Comments = builder.String()
- }
- }
- return p, nil
-}
-
-func makeCommentStream(header *header, damageTracker *damageTracker) *commentStream {
- return &commentStream{
- lenBuff: buffer{size: commentSize * 3},
- header: header,
- damageTracker: damageTracker,
- }
-}
-
-type sliceStream struct {
- buff buffer
- slice []byte
- damageTracker *damageTracker
-}
-
-func (s *sliceStream) stream(p []byte) ([]byte, error) {
- if !s.buff.isFull() {
- p = s.buff.add(p)
- if s.buff.isFull() {
- data := make([]byte, len(s.slice))
- damaged, corrupted, err := rsDecode(data, s.buff.data, false)
- s.damageTracker.damage = s.damageTracker.damage || damaged
- if corrupted {
- return nil, ErrHeaderCorrupted
- }
- if err != nil {
- return nil, fmt.Errorf("decoding slice: %w", err)
- }
- copy(s.slice, data)
- }
- }
- return p, nil
-}
-
-func makeSliceStream(slice []byte, damagedTracker *damageTracker) *sliceStream {
- return &sliceStream{buffer{size: len(slice) * 3}, slice, damagedTracker}
-}
-
-type headerStream struct {
- header *header
- streams []streamer
- isDone func() bool
-}
-
-func (h *headerStream) stream(p []byte) ([]byte, error) {
- return streamStack(h.streams, p)
-}
-
-func makeHeaderStream(password string, header *header, damageTracker *damageTracker) *headerStream {
- macTagStream := makeSliceStream(header.refs.macTag[:], damageTracker)
- isDone := func() bool {
- return macTagStream.buff.isFull()
- }
- streams := []streamer{
- makeHeaderDeniabilityStream(password, header),
- makeVersionStream(damageTracker),
- makeCommentStream(header, damageTracker),
- makeFlagStream(header, damageTracker),
- makeSliceStream(header.seeds.Salt[:], damageTracker),
- makeSliceStream(header.seeds.HkdfSalt[:], damageTracker),
- makeSliceStream(header.seeds.SerpentIV[:], damageTracker),
- makeSliceStream(header.seeds.Nonce[:], damageTracker),
- makeSliceStream(header.refs.keyRef[:], damageTracker),
- makeSliceStream(header.refs.keyfileRef[:], damageTracker),
- macTagStream,
- }
- return &headerStream{header, streams, isDone}
-}
-
-func getHeader(r io.Reader, password string) (header, error) {
- h := header{}
- stream := makeHeaderStream(password, &h, &damageTracker{})
- for {
- p := make([]byte, 1000) // big enough to get most headers in one read
- n, err := r.Read(p)
- eof := errors.Is(err, io.EOF)
- if err != nil && !eof {
- return header{}, fmt.Errorf("reading file: %w", err)
- }
- _, err = stream.stream(p[:n])
- if err != nil {
- return header{}, fmt.Errorf("reading header: %w", err)
- }
- if stream.isDone() {
- return h, nil
- }
- if eof {
- return header{}, ErrFileTooShort
- }
- }
-}
-
-type macStream struct {
- mac hash.Hash
- encrypting bool
- header *header
-}
-
-func (ms *macStream) stream(p []byte) ([]byte, error) {
- _, err := ms.mac.Write(p)
- if err != nil {
- return nil, err
- }
- return p, nil
-}
-
-func (ms *macStream) flush() ([]byte, error) {
- m := ms.mac.Sum(nil)
- if ms.encrypting {
- copy(ms.header.refs.macTag[:], m)
- return nil, nil
- }
- if !hmac.Equal(m, ms.header.refs.macTag[:]) {
- return nil, ErrBodyCorrupted
- }
- return nil, nil
-}
-
-func newMacStream(keys keys, header *header, encrypting bool) (*macStream, error) {
- var mac hash.Hash
- if header.settings.Paranoid {
- mac = hmac.New(sha3.New512, keys.macKey[:])
- } else {
- var err error
- mac, err = blake2b.New512(keys.macKey[:])
- if err != nil {
- return nil, err
- }
- }
- return &macStream{mac: mac, header: header, encrypting: encrypting}, nil
-}
-
-type decryptStream struct {
- password string
- keyfiles []io.Reader
- headerStream *headerStream
- bodyStreams []streamerFlusher
- damageTracker *damageTracker
-}
-
-func (ds *decryptStream) stream(p []byte) ([]byte, error) {
- p, err := ds.headerStream.stream(p)
- if err != nil {
- return nil, err
- }
- if ds.headerStream.isDone() {
- if ds.bodyStreams == nil {
- ds.bodyStreams, err = ds.makeBodyStreams()
- if err != nil {
- return nil, err
- }
- }
- return streamStack(ds.bodyStreams, p)
- }
- return p, nil
-}
-
-func (ds *decryptStream) flush() ([]byte, error) {
- if !ds.headerStream.isDone() {
- return nil, ErrFileTooShort
- }
- if ds.bodyStreams == nil {
- return nil, nil
- }
- return flushStack(ds.bodyStreams)
-}
-
-func (ds *decryptStream) makeBodyStreams() ([]streamerFlusher, error) {
- // TODO implement keyfiles
- keys, err := validateKeys(ds.headerStream.header, ds.password, ds.keyfiles)
- if err != nil {
- // TODO should I include duplicate keyfiles error here?
- return nil, err
- }
- // TODO verify that the keyRef matches the header
- streams := []streamerFlusher{}
- // TODO: add reed solomon if configured
- if ds.headerStream.header.settings.ReedSolomon {
- streams = append(streams, makeRSDecodeStream(false, ds.headerStream.header, ds.damageTracker))
- }
- macStream, err := newMacStream(keys, ds.headerStream.header, false)
- if err != nil {
- return nil, err
- }
- streams = append(streams, macStream)
- encryptionStreams, err := newEncryptionStreams(keys, ds.headerStream.header)
- if err != nil {
- return nil, err
- }
- streams = append(streams, encryptionStreams...)
- return streams, nil
-}
-
-func makeDecryptStream(password string, keyfiles []io.Reader, damageTracker *damageTracker) *decryptStream {
- header := header{}
- return &decryptStream{
- password: password,
- keyfiles: keyfiles,
- headerStream: makeHeaderStream(password, &header, damageTracker),
- damageTracker: damageTracker,
- }
-}
-
-func validateKeys(header *header, password string, keyfiles []io.Reader) (keys, error) {
- if header.usesKf && len(keyfiles) == 0 {
- return keys{}, ErrKeyfilesRequired
- }
- if !header.usesKf && len(keyfiles) > 0 {
- return keys{}, ErrKeyfilesNotRequired
- }
- keys, err := newKeys(header.settings, header.seeds, password, keyfiles)
- if err != nil && !errors.Is(err, ErrDuplicateKeyfiles) {
- return keys, err
- }
- if !bytes.Equal(keys.keyRef[:], header.refs.keyRef[:]) {
- return keys, ErrIncorrectPassword
- }
- if header.usesKf && !bytes.Equal(keys.keyfileRef[:], header.refs.keyfileRef[:]) {
- if header.settings.OrderedKf {
- return keys, ErrIncorrectOrMisorderedKeyfiles
- }
- return keys, ErrIncorrectKeyfiles
- }
- return keys, nil
-}
diff --git a/internal/encryption/docs/code_architecture.md b/internal/encryption/docs/code_architecture.md
deleted file mode 100644
index d231b5b..0000000
--- a/internal/encryption/docs/code_architecture.md
+++ /dev/null
@@ -1,274 +0,0 @@
-# Code Architecture
-
-Here are some block diagrams of how the code is structured. Not all details are shown, but these diagrams give a reasonably cohesive idea of how data is passed through and modified.
-
-# Decryption
-## Low Detail View
-
-Data is first passed through `Header Decryption` which is responsible for initializing the shared `Header` state with correct values, consuming all header-related bytes, and undoing any encryption from deniability mode. By the time data is passed out of `Header Decryption`, the `Header` object is fully initialized and ready to be used. Any damaged bytes are reported to the shared `DamageTracker`.
-
-Data then passes through `Body Decryption` which is responsible for decoding the file data and checking it for correctness. The data output by `Body Decryption` is fully decoded. Any damaged bytes are reported to the shared `DamageTracker`.
-
-```mermaid
-flowchart TB
-
- subgraph SH[Header Decryption]
- direction LR
-
- SH_S1[[Deniability Wrapper]]
- SH_S2[[Header Fields]]
-
- SH_A[/Incoming bytes/] --> SH_S1 --> SH_S2 --> SH_B[\Outgoing bytes\]
-
- end
-
- subgraph SB[Body Decryption]
- direction LR
-
- SB_A[/Incoming bytes/]
- SB_S1[[ReedSolomon]]
- SB_S2[[MAC]]
- SB_S3[[Encryption]]
- SB_SB[\Outgoing bytes\]
-
- SB_A --> SB_S1
- SB_S1 --> SB_S2
- SB_S2 --> SB_S3
- SB_S3 --> SB_SB
- end
-
- A[/Encrypted data/] --> SH --> SB --> B[/Decrypted data/]
-
- HEADER[(Header)]
- DMG[(DamageTracker)]
-```
-
-## High Detail View
-
-```mermaid
-flowchart TB
-
- subgraph SH[Header Decryption]
- direction TB
-
- subgraph SH_S1[Deniability Wrapper]
- direction LR
- SH_S1_HEADER[(Header)]
- SH_S1_A[/Incoming bytes/] --> SH_S1_B{Are the first bytes a valid version?}
- SH_S1_B --> |Yes| SH_S1_C[\Outgoing bytes\]
- SH_S1_B --> |No| SH_S1_D[Consume the first 40 bytes]
- SH_S1_D -.-> |denyMode, denyNonce, denySalt| SH_S1_HEADER
- SH_S1_D --> SH_S1_E[ChaCha20 Cipher]
- SH_S1_HEADER -.-> |denyNonce, denySalt| SH_S1_E
- SH_S1_E --> SH_S1_C
- end
-
- subgraph SH_S2[Header Fields]
- direction LR
- SH_S2_HEADER[(Header)]
- SH_S2_DMG[(DamageTracker)]
- SH_S2_A[/Incoming bytes/] --> SH_S2_B{{"Loop over fields in [version, comments, flags, salt, hkdfSalt, serpentIV, nonce, keyRef, keyfileRef, macTag]"}}
- SH_S2_B --> |field| SH_S2_C{"Are bytes for field decodable?"}
- SH_S2_C --> |No| SH_S2_D(Consume all bytes)
- SH_S2_D -.-> |damaged| SH_S2_DMG
- SH_S2_C --> |Yes| SH_S2_E{Was error correction required?}
- SH_S2_E --> |Yes| SH_S2_F[Record damage]
- SH_S2_F -.-> |damaged| SH_S2_DMG
- SH_S2_F --> SH_S2_G[Consume field bytes]
- SH_S2_E --> |No| SH_S2_G
- SH_S2_G --> SH_S2_B
- SH_S2_G -.-> |field| SH_S2_HEADER
- SH_S2_B --> |done| SH_S2_H[\Outgoing bytes\]
-
- SH_S5_I>"Note: actual implementation unrolls the loop"]
- end
-
- SH_S1 --> SH_S2
-
- end
-
- subgraph SB[Body Decryption]
- direction TB
-
- subgraph SB_S1[ReedSolomon]
- SB_S1_HEADER[(Header)]
- SB_S1_DMG[(DamageTracker)]
-
- SB_S1_A[/Incoming bytes/] --> SB_S1_B{Has Reed Solomon encoding?}
- SB_S1_B --> |Yes| SB_S1_C[Break into 136 byte chunks]
- SB_S1_C --> SB_S1_D[Consume Reed Solomon bytes]
- SB_S1_D --> SB_S1_E{Is chunk decodable?}
- SB_S1_E --> |Yes| SB_S1_F{Was error correction required?}
- SB_S1_F --> |Yes| SB_S1_G[Record damage]
- SB_S1_G -.-> |damaged| SB_S1_DMG
- SB_S1_I -.-> |damaged| SB_S1_DMG
- SB_S1_G --> SB_S1_H[\Outgoing bytes\]
- SB_S1_E --> |No| SB_S1_I[Use first bytes as best guess]
- SB_S1_I --> SB_S1_H
- SB_S1_F --> |No| SB_S1_H
- SB_S1_HEADER -.-> |ReedSolomon| SB_S1_B
- SB_S1_B --> |No| SB_S1_H
- end
-
- subgraph SB_S2[MAC]
- direction LR
- SB_S2_HEADER[(Header)]
- SB_S2_DMG[(DamageTracker)]
- SB_S2_A[/Incoming bytes/] --> SB_S2_B{Encrypted with Paranoid mode?}
- SB_S2_B --> |Yes| SB_S2_C["Record to SHA3.512 (does not modify bytes)"]
- SB_S2_B --> |No| SB_S2_D["Record to Blake2 (does not modify bytes)"]
- SB_S2_E[\Outgoing bytes\]
- SB_S2_C --> SB_S2_E
- SB_S2_D --> SB_S2_E
-
- SB_S2_F{Does final sum match macTag?}
- SB_S2_G(Do nothing)
- SB_S2_H(Report error)
- SB_S2_C -.-> |On flush| SB_S2_F
- SB_S2_D -.-> |On flush| SB_S2_F
- SB_S2_F -.-> |Yes| SB_S2_G
- SB_S2_F -.-> |No| SB_S2_H
- SB_S2_H -.-> |damaged| SB_S2_DMG
-
- SB_S2_HEADER -.-> |paranoid| SB_S2_B
- SB_S2_HEADER -.-> |macTag| SB_S2_F
- end
-
- subgraph SB_S3[Encryption]
- direction LR
- SB_S3_HEADER[(Header)]
- SB_S3_A[/Incoming bytes/]
- SB_S3_B[ChaCha20 cipher]
- SB_S3_C{Is paranoid?}
- SB_S3_D[Serpent]
- SB_S3_E[\Outgoing bytes\]
- SB_S3_A --> SB_S3_B --> SB_S3_C
- SB_S3_C --> |Yes| SB_S3_D --> SB_S3_E
- SB_S3_C --> |No| SB_S3_E
- SB_S3_HEADER -.-> |nonce, salt| SB_S3_B
- SB_S3_HEADER -.-> |paranoid| SB_S3_C
- SB_S3_HEADER -.-> |iv| SB_S3_D
- end
-
- SB_S1 --> SB_S2 --> SB_S3
-
- end
-
- A[/Data to decrypt/] --> SH --> SB --> B[/Decrypted data/]
-```
-
-# Encryption
-
-Encryption is broken into 2 steps: encode the file itself through `Encryption Stream`, then combine the `Header` bytes with the encoded body data. These steps are separated because some header data such as the `macTag` cannot be known until the file data has been fully encrypted. The header fields required for `Encryption Stream` are initialized from the passed `Settings` and randomly generated seeds.
-
-
-```mermaid
-flowchart LR
-
- A[Settings]
- B[Random Seeds]
- C[Header]
- D[[Encryption Stream]]
- E[/Input File/]
- F[header + body]
- H[Encrypted body data]
- I[\Output File\]
- J[Apply deniability if enabled]
-
- A -.-> C
- B -.-> C
- C -.-> D
- E --> D
- D --> H
- H --> |body bytes| F
- C --> |After body data is encrypted| J --> |header bytes| F
- F --> I
-```
-
-## Low Detail View
-
-Low detail view of the `Encryption Stream`. It is very similar to running the `Decryption Stream` in reverse. Data is first passed through `Primary Encryption` (ChaCha20, plus Serpent if paranoid). Then a mac is computed and saved to the header to check against when decrypting. Then Reed-Solomon bytes are added if requested. Then everything is passed through `Deniability Wrapper` (another ChaCha20) if requested. The output bytes are the full body, ready to be appended to the header bytes, which can now be computed.
-
-```mermaid
-flowchart TB
-
- subgraph SB[Body Encryption]
- direction LR
- SB_S1[[Encryption]]
- SB_S2[[MAC]]
- SB_S3[[ReedSolomon]]
- SB_S4[[Deniability Wrapper]]
- SB_S1 --> SB_S2 --> SB_S3 --> SB_S4
- end
-
- A[/Data to encrypt/] --> SB --> B[/Encrypted data/]
-```
-
-## High Detail View
-
-```mermaid
-flowchart TB
-
- subgraph SB[Body Encryption]
- direction TB
-
- subgraph SB_S1[Encryption]
- direction LR
- SB_S1_HEADER[(Header)]
- SB_S1_A[/Incoming bytes/]
- SB_S1_B[ChaCha20 cipher]
- SB_S1_C{Is paranoid?}
- SB_S1_D[Serpent]
- SB_S1_E[\Outgoing bytes\]
- SB_S1_A --> SB_S1_B --> SB_S1_C
- SB_S1_C --> |No| SB_S1_E
- SB_S1_C --> |Yes| SB_S1_D --> SB_S1_E
- SB_S1_HEADER -.-> |nonce, salt| SB_S1_B
- SB_S1_HEADER -.-> |paranoid| SB_S1_C
- SB_S1_HEADER -.-> |iv| SB_S1_D
- end
-
- subgraph SB_S2[MAC]
- direction LR
- SB_S2_HEADER[(Header)]
- SB_S2_A[/Incoming bytes/] --> SB_S2_B{Paranoid Mode?}
- SB_S2_B --> |Yes| SB_S2_C["Record to SHA3.512 (does not modify bytes)"]
- SB_S2_B --> |No| SB_S2_D["Record to Blake2 (does not modify bytes)"]
- SB_S2_E[\Outgoing bytes\]
- SB_S2_C --> SB_S2_E
- SB_S2_D --> SB_S2_E
-
- SB_S2_F(Save sum to header)
- SB_S2_C -.-> |On flush| SB_S2_F
- SB_S2_D -.-> |On flush| SB_S2_F
- SB_S2_F -.-> |macTag| SB_S2_HEADER
-
- SB_S2_HEADER -.-> |paranoid| SB_S2_B
- end
-
- subgraph SB_S3[ReedSolomon]
- SB_S3_HEADER[(Header)]
- SB_S3_A[/Incoming bytes/] --> SB_S3_B{Reed Solomon encoding?}
- SB_S3_B --> |Yes| SB_S3_C[Break into 128 byte chunks]
- SB_S3_C --> SB_S3_D[Add 8 Reed Solomon bytes per chunk]
- SB_S3_D --> SB_S3_E[\Outgoing bytes\]
- SB_S3_HEADER -.-> |ReedSolomon| SB_S3_B
- SB_S3_B --> |No| SB_S3_E
- end
-
- subgraph SB_S4[Deniability Wrapper]
- direction LR
- SH_S4_HEADER[(Header)]
- SH_S4_A[/Incoming bytes/] --> SH_S4_B{Deniability mode?}
- SH_S4_B --> |No| SH_S4_C[\Outgoing bytes\]
- SH_S4_B --> |Yes| SH_S4_D["ChaCha20 Cipher (seeded with mock header bytes)"]
- SH_S4_HEADER -.-> |denyNonce, denySalt| SH_S4_D
- SH_S4_D --> SH_S4_C
- end
-
- SB_S1 --> SB_S2 --> SB_S3 --> SB_S4
-
- end
-
- A[/Data to encrypt/] --> SB --> B[/Encrypted data/]
-```
\ No newline at end of file
diff --git a/internal/encryption/encrypt.go b/internal/encryption/encrypt.go
deleted file mode 100644
index 37bac7b..0000000
--- a/internal/encryption/encrypt.go
+++ /dev/null
@@ -1,90 +0,0 @@
-package encryption
-
-import (
- "fmt"
- "io"
-)
-
-var picocryptVersion = "v1.48"
-
-type sizeStream struct {
- header *header
- counter int64
-}
-
-func (s *sizeStream) stream(p []byte) ([]byte, error) {
- s.counter += int64(len(p))
- return p, nil
-}
-
-func (s *sizeStream) flush() ([]byte, error) {
- s.header.nearMiBFlag = (s.counter % (1 << 20)) > ((1 << 20) - chunkSize)
- return nil, nil
-}
-
-type encryptStream struct {
- header *header
- streams []streamerFlusher
-}
-
-func (es *encryptStream) stream(p []byte) ([]byte, error) {
- return streamStack(es.streams, p)
-}
-
-func (es *encryptStream) flush() ([]byte, error) {
- return flushStack(es.streams)
-}
-
-func makeEncryptStream(settings Settings, seeds seeds, password string, keyfiles []io.Reader) (*encryptStream, error) {
- keys, err := newKeys(settings, seeds, password, keyfiles)
- if err != nil {
- return nil, fmt.Errorf("generating keys: %w", err)
- }
- header := header{
- settings: settings,
- seeds: seeds,
- refs: refs{
- keyRef: keys.keyRef,
- keyfileRef: keys.keyfileRef,
- macTag: [64]byte{}, // will be filled by mac stream
- },
- usesKf: len(keyfiles) > 0,
- nearMiBFlag: false,
- }
-
- streams := []streamerFlusher{}
-
- encryptionStreams, err := newEncryptionStreams(keys, &header)
- if err != nil {
- return nil, fmt.Errorf("creating encryption stream: %w", err)
- }
- streams = append(streams, encryptionStreams...)
-
- macStream, err := newMacStream(keys, &header, true)
- if err != nil {
- return nil, fmt.Errorf("creating mac stream: %w", err)
- }
- streams = append(streams, macStream)
-
- sizeStream := sizeStream{header: &header}
- streams = append(streams, &sizeStream)
-
- if settings.ReedSolomon {
- streams = append(streams, makeRSEncodeStream(&header))
- }
-
- if settings.Deniability {
- deniabilityStream := newDeniabilityStream(password, &header)
- mockHeaderData := make([]byte, baseHeaderSize+3*len(settings.Comments))
- _, err := deniabilityStream.stream(mockHeaderData)
- if err != nil {
- return nil, fmt.Errorf("seeding deniability stream: %w", err)
- }
- streams = append(streams, deniabilityStream)
- }
-
- return &encryptStream{
- header: &header,
- streams: streams,
- }, nil
-}
diff --git a/internal/encryption/encryption.go b/internal/encryption/encryption.go
deleted file mode 100644
index 7dbb7e5..0000000
--- a/internal/encryption/encryption.go
+++ /dev/null
@@ -1,190 +0,0 @@
-package encryption
-
-import (
- "errors"
- "fmt"
- "io"
-)
-
-const readSize = 1 << 20
-const maxCommentsLength = 99999
-
-var ErrFileTooShort = errors.New("file too short")
-var ErrIncorrectPassword = errors.New("incorrect password")
-var ErrIncorrectKeyfiles = errors.New("incorrect keyfiles")
-var ErrIncorrectOrMisorderedKeyfiles = errors.New("incorrect or misordered keyfiles")
-var ErrKeyfilesRequired = errors.New("missing required keyfiles")
-var ErrDuplicateKeyfiles = errors.New("duplicate keyfiles")
-var ErrKeyfilesNotRequired = errors.New("keyfiles not required")
-var ErrHeaderCorrupted = errors.New("header corrupted")
-var ErrBodyCorrupted = errors.New("body corrupted")
-var ErrCommentsTooLong = errors.New("comments exceed maximum length")
-
-type Settings struct {
- Comments string
- ReedSolomon bool
- Paranoid bool
- OrderedKf bool
- Deniability bool
-}
-
-func Decrypt(
- pw string,
- kf []io.Reader,
- r io.Reader,
- w io.Writer,
- skipReedSolomon bool,
-) (bool, error) {
-
- damageTracker := damageTracker{}
- decryptStream := makeDecryptStream(pw, kf, &damageTracker)
-
- for {
- p := make([]byte, readSize)
- n, err := r.Read(p)
- eof := false
- if err != nil {
- if errors.Is(err, io.EOF) {
- eof = true
- } else {
- return false, fmt.Errorf("reading input: %w", err)
- }
- }
- p, err = decryptStream.stream(p[:n])
- if err != nil {
- return damageTracker.damage, err
- }
- _, err = w.Write(p)
- if err != nil {
- return damageTracker.damage, err
- }
- if eof {
- p, err := decryptStream.flush()
- if (err == nil) || errors.Is(err, ErrBodyCorrupted) {
- _, e := w.Write(p)
- return damageTracker.damage, e
- }
- return damageTracker.damage, err
- }
- }
-}
-
-func GetEncryptionSettings(r io.Reader) (Settings, error) {
- header, err := getHeader(r, "")
- if errors.Is(err, ErrFileTooShort) {
- return Settings{Deniability: true}, nil
- }
- if err != nil {
- return Settings{}, fmt.Errorf("reading header: %w", err)
- }
- return header.settings, nil
-}
-
-func EncryptHeadless(
- in io.Reader,
- password string,
- keyfiles []io.Reader,
- settings Settings,
- out io.Writer,
-) ([]byte, error) {
- if len(settings.Comments) > maxCommentsLength {
- return nil, ErrCommentsTooLong
- }
- seeds, err := randomSeeds()
- if err != nil {
- return nil, fmt.Errorf("generating seeds: %w", err)
- }
- return encryptWithSeeds(in, password, keyfiles, settings, out, seeds)
-}
-
-func encryptWithSeeds(
- in io.Reader,
- password string,
- keyfiles []io.Reader,
- settings Settings,
- out io.Writer,
- seeds seeds,
-) ([]byte, error) {
- encryptionStream, err := makeEncryptStream(settings, seeds, password, keyfiles)
- if err != nil {
- return nil, fmt.Errorf("making encryption stream: %w", err)
- }
-
- buf := make([]byte, readSize)
- for {
- eof := false
- n, err := in.Read(buf)
- if err != nil {
- if errors.Is(err, io.EOF) {
- eof = true
- } else {
- return nil, fmt.Errorf("reading input: %w", err)
- }
- }
- p, err := encryptionStream.stream(buf[:n])
- if err != nil {
- return nil, fmt.Errorf("encrypting input: %w", err)
- }
- _, err = out.Write(p)
- if err != nil {
- return nil, fmt.Errorf("writing output: %w", err)
- }
- if eof {
- break
- }
- }
-
- p, err := encryptionStream.flush()
- if err != nil {
- return nil, fmt.Errorf("closing encryptor: %w", err)
- }
- _, err = out.Write(p)
- if err != nil {
- return nil, fmt.Errorf("writing output: %w", err)
- }
-
- headerBytes, err := encryptionStream.header.bytes(password)
- if err != nil {
- return nil, fmt.Errorf("making header: %w", err)
- }
- return headerBytes, nil
-}
-
-func PrependHeader(
- headless io.Reader,
- headed io.Writer,
- header []byte,
-) error {
- _, err := headed.Write(header)
- if err != nil {
- return fmt.Errorf("writing header: %w", err)
- }
-
- for {
- data := make([]byte, readSize)
- n, err := headless.Read(data)
- eof := err == io.EOF
- if (err != nil) && (err != io.EOF) {
- return fmt.Errorf("reading body data: %w", err)
- }
- data = data[:n]
-
- _, err = headed.Write(data)
- if err != nil {
- return fmt.Errorf("writing body data: %w", err)
- }
-
- if eof {
- break
- }
- }
- return nil
-}
-
-func HeaderSize(settings Settings) int {
- size := baseHeaderSize + 3*len(settings.Comments)
- if settings.Deniability {
- size += len(seeds{}.DenyNonce) + len(seeds{}.DenySalt)
- }
- return size
-}
diff --git a/internal/encryption/expected_errors_test.go b/internal/encryption/expected_errors_test.go
deleted file mode 100644
index 5c20475..0000000
--- a/internal/encryption/expected_errors_test.go
+++ /dev/null
@@ -1,174 +0,0 @@
-package encryption
-
-import (
- "bytes"
- "crypto/rand"
- "errors"
- "io"
- "os"
- "testing"
-)
-
-func TestFileTooShort(t *testing.T) {
- argonKey = argon2IDKey
- for size := range []int{0, 10} {
- invalidData := make([]byte, size)
- _, err := rand.Read(invalidData)
- if err != nil {
- t.Fatal("creating random data:", err)
- }
- _, err = Decrypt("password", []io.Reader{}, bytes.NewBuffer(invalidData), bytes.NewBuffer([]byte{}), false)
- if !errors.Is(err, ErrFileTooShort) {
- t.Fatal("expected ErrFileTooShort, got", err)
- }
- }
-}
-
-func TestHeaderCorrupted(t *testing.T) {
- argonKey = argon2IDKey
- invalidData := make([]byte, 1000)
- _, err := rand.Read(invalidData)
- if err != nil {
- t.Fatal("creating random data:", err)
- }
- _, err = Decrypt("password", []io.Reader{}, bytes.NewBuffer(invalidData), bytes.NewBuffer([]byte{}), false)
- if !errors.Is(err, ErrHeaderCorrupted) {
- t.Fatal("expected ErrHeaderCorrupted, got", err)
- }
-}
-
-func TestIncorrectPassword(t *testing.T) {
- argonKey = argon2IDKey
- reader, err := os.Open("picocrypt_samples/v1.48/base1000.pcv")
- if err != nil {
- t.Fatal("opening file:", err)
- }
- defer reader.Close()
- _, err = Decrypt("wrong-password", []io.Reader{}, reader, bytes.NewBuffer([]byte{}), false)
- if !errors.Is(err, ErrIncorrectPassword) {
- t.Fatal("expected wrong password, got", err)
- }
-}
-
-func TestIncorrectKeyfiles(t *testing.T) {
- argonKey = argon2IDKey
- reader, err := os.Open("picocrypt_samples/v1.48/base0_kf12o.pcv")
- if err != nil {
- t.Fatal("opening file:", err)
- }
- wrongKeyfileData := make([]byte, 100)
- rand.Read(wrongKeyfileData)
- defer reader.Close()
- _, err = Decrypt("password", []io.Reader{bytes.NewBuffer(wrongKeyfileData)}, reader, bytes.NewBuffer([]byte{}), false)
- if !errors.Is(err, ErrIncorrectOrMisorderedKeyfiles) {
- t.Fatal("expected wrong keyfieles, got", err)
- }
-}
-
-func TestKeyfilesRequired(t *testing.T) {
- argonKey = argon2IDKey
- reader, err := os.Open("picocrypt_samples/v1.48/base0_kf12o.pcv")
- if err != nil {
- t.Fatal("opening file:", err)
- }
- defer reader.Close()
- _, err = Decrypt("password", []io.Reader{}, reader, bytes.NewBuffer([]byte{}), false)
- if !errors.Is(err, ErrKeyfilesRequired) {
- t.Fatal("expected required keyfiles, got", err)
- }
-}
-
-func TestDuplicateKeyfiles(t *testing.T) {
- argonKey = argon2IDKey
- keyfileData := make([]byte, 100)
- rand.Read(keyfileData)
- keyfiles := []io.Reader{}
- for range 2 {
- buff := make([]byte, len(keyfileData))
- copy(buff, keyfileData)
- keyfiles = append(keyfiles, bytes.NewBuffer(buff))
- }
- _, err := EncryptHeadless(
- bytes.NewBuffer([]byte{}),
- "test-password",
- keyfiles,
- Settings{},
- bytes.NewBuffer([]byte{}),
- )
- if !errors.Is(err, ErrDuplicateKeyfiles) {
- t.Fatal("expected ErrDuplicateKeyfiles, got", err)
- }
-}
-
-func TestKeyfilesNotRequired(t *testing.T) {
- argonKey = argon2IDKey
- reader, err := os.Open("picocrypt_samples/v1.48/base1000.pcv")
- if err != nil {
- t.Fatal("opening file:", err)
- }
- defer reader.Close()
- _, err = Decrypt("password", []io.Reader{bytes.NewBuffer([]byte{})}, reader, bytes.NewBuffer([]byte{}), false)
- if !errors.Is(err, ErrKeyfilesNotRequired) {
- t.Fatal("expected ErrKeyfilesNotRequired, got", err)
- }
-}
-
-func TestCorrupted(t *testing.T) {
- argonKey = argon2IDKey
- reader, err := os.Open("picocrypt_samples/v1.48/base1000.pcv")
- if err != nil {
- t.Fatal("opening file:", err)
- }
- defer reader.Close()
- r := bytes.NewBuffer([]byte{})
- _, err = io.Copy(r, reader)
- if err != nil {
- t.Fatal("reading file:", err)
- }
- rawBytes := r.Bytes()
- copy(rawBytes[:], []byte("corrupted"))
- corruptedReader := bytes.NewBuffer(rawBytes)
- _, err = Decrypt("qwerty", []io.Reader{}, corruptedReader, bytes.NewBuffer([]byte{}), false)
- if !errors.Is(err, ErrHeaderCorrupted) {
- t.Fatal("expected ErrHeaderCorrupted, got", err)
- }
-}
-
-func TestDamagedButRecoverable(t *testing.T) {
- argonKey = argon2IDKey
- reader, err := os.Open("picocrypt_samples/v1.48/base1000_r.pcv")
- if err != nil {
- t.Fatal("opening file:", err)
- }
- defer reader.Close()
-
- encryptedData, err := io.ReadAll(reader)
- if err != nil {
- t.Fatal("reading file:", err)
- }
-
- encryptedData[1000] = byte(int(encryptedData[1000]) + 1)
-
- damaged, err := Decrypt("password", []io.Reader{}, bytes.NewBuffer(encryptedData), bytes.NewBuffer([]byte{}), false)
- if err != nil {
- t.Fatal("expected no error, got", err)
- }
- if !damaged {
- t.Fatal("expected damage")
- }
-}
-
-func TestCommentsTooLong(t *testing.T) {
- argonKey = argon2IDKey
- comments := make([]byte, maxCommentsLength+1)
- _, err := EncryptHeadless(
- bytes.NewBuffer([]byte{}),
- "test-password",
- []io.Reader{},
- Settings{Comments: string(comments)},
- bytes.NewBuffer([]byte{}),
- )
- if !errors.Is(err, ErrCommentsTooLong) {
- t.Fatal("expected ErrCommentsTooLong, got", err)
- }
-}
diff --git a/internal/encryption/header.go b/internal/encryption/header.go
deleted file mode 100644
index 2c836fb..0000000
--- a/internal/encryption/header.go
+++ /dev/null
@@ -1,102 +0,0 @@
-package encryption
-
-import (
- "bytes"
- "crypto/rand"
- "encoding/binary"
- "fmt"
- "io"
-)
-
-const (
- baseHeaderSize = 789
- versionSize = 5
- commentSize = 5
- flagsSize = 5
-)
-
-type seeds struct {
- // export to allow binary package to fill
- Salt [16]byte
- Nonce [24]byte
- SerpentIV [16]byte
- HkdfSalt [32]byte
- DenySalt [16]byte
- DenyNonce [24]byte
-}
-
-type refs struct {
- keyRef [64]byte
- keyfileRef [32]byte
- macTag [64]byte
-}
-
-type header struct {
- settings Settings
- seeds seeds
- refs refs
- usesKf bool
- nearMiBFlag bool // set when the original data is within 1 chunk of a MiB
-}
-
-func (header *header) bytes(password string) ([]byte, error) {
- data := [][]byte{[]byte(picocryptVersion)}
- data = append(data, []byte(fmt.Sprintf("%05d", len(header.settings.Comments))))
- for _, c := range []byte(header.settings.Comments) {
- data = append(data, []byte{c})
- }
- flags := []bool{
- header.settings.Paranoid,
- header.usesKf,
- header.settings.OrderedKf,
- header.settings.ReedSolomon,
- header.nearMiBFlag,
- }
- flagBytes := make([]byte, len(flags))
- for i, f := range flags {
- if f {
- flagBytes[i] = 1
- }
- }
- data = append(data, flagBytes)
- data = append(data, header.seeds.Salt[:])
- data = append(data, header.seeds.HkdfSalt[:])
- data = append(data, header.seeds.SerpentIV[:])
- data = append(data, header.seeds.Nonce[:])
- data = append(data, header.refs.keyRef[:])
- data = append(data, header.refs.keyfileRef[:])
- data = append(data, header.refs.macTag[:])
-
- headerBytes := make([]byte, baseHeaderSize+3*len(header.settings.Comments))
- written := 0
- for _, d := range data {
- err := rsEncode(headerBytes[written:written+len(d)*3], d)
- if err != nil {
- return nil, err
- }
- written += len(d) * 3
- }
-
- if header.settings.Deniability {
- denyStream := newDeniabilityStream(password, header)
- var err error
- headerBytes, err = denyStream.stream(headerBytes)
- if err != nil {
- return nil, fmt.Errorf("denying header data: %w", err)
- }
- headerBytes = append(append(header.seeds.DenySalt[:], header.seeds.DenyNonce[:]...), headerBytes...)
- }
-
- return headerBytes, nil
-}
-
-func randomSeeds() (seeds, error) {
- raw := make([]byte, binary.Size(seeds{}))
- _, err := io.ReadFull(rand.Reader, raw)
- if err != nil {
- return seeds{}, err
- }
- decoded := seeds{}
- err = binary.Read(bytes.NewBuffer(raw), binary.BigEndian, &decoded)
- return decoded, err
-}
diff --git a/internal/encryption/keys.go b/internal/encryption/keys.go
deleted file mode 100644
index ec1e590..0000000
--- a/internal/encryption/keys.go
+++ /dev/null
@@ -1,162 +0,0 @@
-package encryption
-
-import (
- "bytes"
- "errors"
- "fmt"
- "hash"
- "io"
-
- "golang.org/x/crypto/argon2"
- "golang.org/x/crypto/hkdf"
- "golang.org/x/crypto/sha3"
-)
-
-type keys struct {
- key [32]byte
- macKey [32]byte
- serpentKey [32]byte
- denyKey [32]byte
- hkdf io.Reader
- keyRef [64]byte
- keyfileRef [32]byte
-}
-
-func xor(a, b [32]byte) [32]byte {
- var result [32]byte
- for i := range a {
- result[i] = a[i] ^ b[i]
- }
- return result
-}
-
-func generateKeyfileKey(ordered bool, keyfiles []io.Reader) ([32]byte, error) {
- if len(keyfiles) == 0 {
- return [32]byte{}, nil
- }
-
- hashes := make([][32]byte, len(keyfiles))
- hasher := sha3.New256()
- for i, file := range keyfiles {
- if err := computeHash(hasher, file, hashes[i][:]); err != nil {
- return [32]byte{}, err
- }
- if !ordered {
- hasher.Reset()
- }
- }
-
- if ordered {
- key := [32]byte{}
- copy(key[:], hasher.Sum(nil))
- return key, nil
- }
-
- key := [32]byte{}
- for _, hash := range hashes {
- key = xor(key, hash)
- }
- if hasDuplicates(hashes) {
- return key, ErrDuplicateKeyfiles
- }
- return key, nil
-}
-
-func hasDuplicates(hashes [][32]byte) bool {
- hashSet := make(map[string]struct{}, len(hashes))
- for _, hash := range hashes {
- hashStr := string(hash[:])
- if _, exists := hashSet[hashStr]; exists {
- return true
- }
- hashSet[hashStr] = struct{}{}
- }
- return false
-}
-
-func argon2IDKey(password string, salt [16]byte, iterations uint32, parallelism uint8) [32]byte {
- var key [32]byte
- copy(key[:], argon2.IDKey([]byte(password), salt[:], iterations, 1<<20, parallelism, 32))
- return key
-}
-
-var argonKey = argon2IDKey
-
-func generatePasswordKey(password string, salt [16]byte, paranoid bool) [32]byte {
- iterations := uint32(4)
- parallelism := uint8(4)
- if paranoid {
- iterations = 8
- parallelism = 8
- }
- return argonKey(password, salt, iterations, parallelism)
-}
-
-func generateDenyKey(password string, salt [16]byte) [32]byte {
- return argonKey(password, salt, 4, 4)
-}
-
-func newKeys(settings Settings, seeds seeds, password string, keyfiles []io.Reader) (keys, error) {
- keyfileKey, err := generateKeyfileKey(settings.OrderedKf, keyfiles)
- if err != nil && !errors.Is(err, ErrDuplicateKeyfiles) {
- return keys{}, fmt.Errorf("creating keys: %w", err)
- }
- duplicateKeyfiles := errors.Is(err, ErrDuplicateKeyfiles)
-
- passwordKey := generatePasswordKey(password, seeds.Salt, settings.Paranoid)
-
- var keyRef [64]byte
- err = computeHash(sha3.New512(), bytes.NewBuffer(passwordKey[:]), keyRef[:])
- if err != nil {
- return keys{}, fmt.Errorf("creating keys: %w", err)
- }
- var keyfileRef [32]byte
- if len(keyfiles) > 0 {
- computeHash(sha3.New256(), bytes.NewBuffer(keyfileKey[:]), keyfileRef[:])
- }
-
- key := xor(keyfileKey, passwordKey)
-
- var denyKey [32]byte
- if settings.Deniability {
- denyKey = generateDenyKey(password, seeds.DenySalt)
- }
-
- hkdf := hkdf.New(sha3.New256, key[:], seeds.HkdfSalt[:], nil)
- var macKey [32]byte
- if _, err := io.ReadFull(hkdf, macKey[:]); err != nil {
- return keys{}, fmt.Errorf("filling macKey: %w", err)
- }
- var serpentKey [32]byte
- if _, err := io.ReadFull(hkdf, serpentKey[:]); err != nil {
- return keys{}, fmt.Errorf("filling serpentKey: %w", err)
- }
-
- keys := keys{
- key: key,
- macKey: macKey,
- serpentKey: serpentKey,
- denyKey: denyKey,
- hkdf: hkdf,
- keyRef: keyRef,
- keyfileRef: keyfileRef,
- }
-
- if duplicateKeyfiles {
- return keys, ErrDuplicateKeyfiles
- }
- return keys, nil
-}
-
-func computeHash(hasher hash.Hash, src io.Reader, dest []byte) error {
- data, err := io.ReadAll(src)
- if err != nil {
- return fmt.Errorf("reading src: %w", err)
- }
- _, err = hasher.Write(data)
- if err != nil {
- return fmt.Errorf("hashing src: %w", err)
- }
- copy(dest, hasher.Sum(nil))
- return nil
-}
diff --git a/internal/encryption/keys_test.go b/internal/encryption/keys_test.go
deleted file mode 100644
index 288012d..0000000
--- a/internal/encryption/keys_test.go
+++ /dev/null
@@ -1,102 +0,0 @@
-package encryption
-
-import (
- "bytes"
- "crypto/rand"
- "errors"
- "io"
- "testing"
-)
-
-func TestXor(t *testing.T) {
- zeros := [32]byte{}
- ones := [32]byte{}
- for i := 0; i < len(ones); i++ {
- ones[i] = 255
- }
-
- result := xor(zeros, zeros)
- if !bytes.Equal(zeros[:], result[:]) {
- t.Fatal("xor zeros with zeros should be zero")
- }
-
- result = xor(ones, ones)
- if !bytes.Equal(zeros[:], result[:]) {
- t.Fatal("xor ones with ones should be zero")
- }
-
- result = xor(zeros, ones)
- if !bytes.Equal(ones[:], result[:]) {
- t.Fatal("xor zeros with ones should be ones")
- }
-
- result = xor(ones, zeros)
- if !bytes.Equal(ones[:], result[:]) {
- t.Fatal("xor ones with zeros should be zero")
- }
-}
-
-func TestGenKeyfileKeyOrdered(t *testing.T) {
- kf1 := make([]byte, 100)
- rand.Read(kf1)
- kf2 := make([]byte, 200)
- rand.Read(kf2)
-
- kf12 := []io.Reader{bytes.NewBuffer(kf1), bytes.NewBuffer(kf2)}
- key12, err := generateKeyfileKey(true, kf12)
- if err != nil {
- t.Fatal("generating keyfile key:", err)
- }
-
- kf21 := []io.Reader{bytes.NewBuffer(kf2), bytes.NewBuffer(kf1)}
- key21, err := generateKeyfileKey(true, kf21)
- if err != nil {
- t.Fatal("generating keyfile key:", err)
- }
-
- if bytes.Equal(key12[:], key21[:]) {
- t.Fatal("key order should change result")
- }
-}
-
-func TestGenKeyfileKeyUnordered(t *testing.T) {
- kf1 := make([]byte, 100)
- rand.Read(kf1)
- kf2 := make([]byte, 200)
- rand.Read(kf2)
-
- kf12 := []io.Reader{bytes.NewBuffer(kf1), bytes.NewBuffer(kf2)}
- key12, err := generateKeyfileKey(false, kf12)
- if err != nil {
- t.Fatal("generating keyfile key:", err)
- }
-
- kf21 := []io.Reader{bytes.NewBuffer(kf2), bytes.NewBuffer(kf1)}
- key21, err := generateKeyfileKey(false, kf21)
- if err != nil {
- t.Fatal("generating keyfile key:", err)
- }
-
- if !bytes.Equal(key12[:], key21[:]) {
- t.Fatal("key order should not change result")
- }
-}
-
-func TestGenKeyfileKeyDuplicated(t *testing.T) {
- kf1 := make([]byte, 100)
- kf2 := make([]byte, 100)
- kf3 := make([]byte, 100)
- rand.Read(kf1)
- copy(kf2[:], kf1[:])
- rand.Read(kf3)
- key, err := generateKeyfileKey(
- false,
- []io.Reader{bytes.NewBuffer(kf1), bytes.NewBuffer(kf2), bytes.NewBuffer(kf3)},
- )
- if !errors.Is(err, ErrDuplicateKeyfiles) {
- t.Fatal("expected duplicate keyfile error")
- }
- if bytes.Equal(key[:], make([]byte, 32)) {
- t.Fatal("key should still be generated")
- }
-}
diff --git a/internal/encryption/picocrypt_compatibility_test.go b/internal/encryption/picocrypt_compatibility_test.go
deleted file mode 100644
index 470af6d..0000000
--- a/internal/encryption/picocrypt_compatibility_test.go
+++ /dev/null
@@ -1,357 +0,0 @@
-// Test for combatibility with Picocrypt
-package encryption
-
-import (
- "bytes"
- "crypto/sha256"
- "encoding/hex"
- "hash"
- "io"
- "log"
- "os"
- "strconv"
- "strings"
- "testing"
-)
-
-var compatibilityVersions = []string{"v1.47", "v1.48"}
-
-/* Decrypt files encrypted by Picocrypt
-
-To generate the test files, choose a version of Picocrypt and rotate through each file under
-picocrypt_samples/basefiles. The file sizes tested are:
-- 0 bytes. While encrypted empyt files is not really meaningful, encryption should still work
-- 1000 bytes. Just a generic small file of data
-- 1048570 bytes. This should trigger the extra flag for Reed-Solomon encoding that Picocrypt uses
-
-Encrypt each file with password "password". Append the following strings to the filename to indicate
-what other encryption settings were used. Note that only the keyfile settings are actually used in
-the test because the others can be derived from the header data. The non-keyfile suffixes are just
-for reference to check what combinations of settings are being tested.
-- "_c" indicates that comments were used
-- "_p" indicates that paranoid mode was used
-- "_r" indicates that Reed-Solomon encoding was used
-- "_d" indicates that deniability mode was used
-- "_kf1" indicates that keyfile 1 was used
-- "_kf12" indicates that keyfiles 1 and 2 were used
-- "_kf12o" indicates that keyfiles 1 and 2 were used, and the keyfiles were ordered
-
-The encrypted files should be stored under picocrypt_samples//
-*/
-
-func getTestKeyfiles(name string) []io.Reader {
- kf := []io.Reader{}
- usesKf1 := strings.Contains(name, "kf1")
- usesKf2 := strings.Contains(name, "kf12")
- for i, used := range []bool{usesKf1, usesKf2} {
- if !used {
- continue
- }
- r, err := os.Open("picocrypt_samples/keyfiles/keyfile" + strconv.Itoa(i+1))
- if err != nil {
- log.Fatal("opening keyfile: %w", err)
- }
- defer r.Close()
- buf := bytes.NewBuffer([]byte{})
- _, err = io.Copy(buf, r)
- if err != nil {
- log.Fatal("reading keyfile: %w", err)
- }
- kf = append(kf, buf)
- }
- return kf
-}
-
-func getBaseData(name string) []byte {
- basename := strings.SplitN(name, ".", 2)[0]
- if strings.Contains(basename, "_") {
- basename = strings.SplitN(basename, "_", 2)[0]
- }
- r, err := os.Open("picocrypt_samples/basefiles/" + basename)
- if err != nil {
- log.Fatal("opening file: %w", err)
- }
- defer r.Close()
- buf := bytes.NewBuffer([]byte{})
- _, err = io.Copy(buf, r)
- if err != nil {
- log.Fatal("reading file: %w", err)
- }
- return buf.Bytes()
-}
-
-func TestDecryptingPicocryptFiles(t *testing.T) {
- for _, version := range compatibilityVersions {
- files, err := os.ReadDir("picocrypt_samples/" + version)
- if err != nil {
- t.Fatal("reading directory: %w", err)
- }
- for _, file := range files {
- if !(strings.HasSuffix(file.Name(), ".pcv")) {
- continue
- }
- t.Run(version+":"+file.Name(), func(t *testing.T) {
- r, err := os.Open("picocrypt_samples/" + version + "/" + file.Name())
- if err != nil {
- t.Fatal("opening encrypted file: %w", err)
- }
- defer r.Close()
- w := bytes.NewBuffer([]byte{})
- kf := getTestKeyfiles(file.Name())
- damaged, err := Decrypt("password", kf, r, w, false)
- if damaged {
- t.Fatal("damaged data")
- }
- if err != nil {
- t.Fatal("decrypting:", err)
- }
- result := w.Bytes()
- expected := getBaseData(file.Name())
- if !bytes.Equal(result, expected) {
- t.Fatal("decrypted data does not match")
- }
- })
- }
- }
-}
-
-/* Test encryption parity with Picocrypt
-
-Given the same header (seeds, settings, etc), same password, and same keyfiles, the encryption
-package should produce exactly the same output as Picocrypt. Run through each file in the
-latest version and ensure that the encrypted data matches exactly.
-*/
-
-func extractSettings(path string) (Settings, seeds) {
- r, err := os.Open(path)
- if err != nil {
- log.Fatal("opening file: %w", err)
- }
- defer r.Close()
- header, err := getHeader(r, "password")
- if err != nil {
- log.Fatal("reading header: %w", err)
- }
- return header.settings, header.seeds
-}
-
-func TestEncryptedFilesMatchPicocrypt(t *testing.T) {
- latestVersion := compatibilityVersions[len(compatibilityVersions)-1]
- files, err := os.ReadDir("picocrypt_samples/" + latestVersion)
- if err != nil {
- t.Fatal("reading directory: %w", err)
- }
- for _, file := range files {
- if !(strings.HasSuffix(file.Name(), ".pcv")) {
- continue
- }
- t.Run("encrypting:"+file.Name(), func(t *testing.T) {
- path := "picocrypt_samples/" + latestVersion + "/" + file.Name()
- settings, seeds := extractSettings(path)
- kf := getTestKeyfiles(file.Name())
- w := bytes.NewBuffer([]byte{})
- header, err := encryptWithSeeds(
- bytes.NewBuffer(getBaseData(file.Name())),
- "password",
- kf,
- settings,
- w,
- seeds,
- )
- if err != nil {
- t.Fatal("encrypting:", err)
- }
- full := bytes.NewBuffer([]byte{})
- err = PrependHeader(bytes.NewBuffer(w.Bytes()), full, header)
- if err != nil {
- t.Fatal("prepending header:", err)
- }
- result := full.Bytes()
-
- r, err := os.Open(path)
- if err != nil {
- t.Fatal("opening encrypted file: %w", err)
- }
- defer r.Close()
- buf := bytes.NewBuffer([]byte{})
- _, err = io.Copy(buf, r)
- if err != nil {
- t.Fatal("reading file: %w", err)
- }
- expected := buf.Bytes()
-
- if !bytes.Equal(result, expected) {
- t.Fatal("encrypted data does not match")
- }
- })
- }
-}
-
-/* Compare encryption and decryption for very large files
-
-The encryption and decryption methods rotate the nonces every 60 GB. To accurately test this,
-encrypt/decrypt files larger than 60 GB. Instead of adding files that large to the repository,
-create a test that simulates this behavior. These tests will generate files of zeros, encrypt
-them, and then decrypt them. The sha256 of the encrypted and decrypted files are compared against
-expected values generated by hand, following these steps:
-
-1. Create a file of zeros (bash ex: dd if=/dev/zero of=zerofile bs=1M count=62464)
-2. Get the sha256 of the file (bash ex: sha256sum zerofile)
-3. Encrypt the file using the latest Picocrypt version. This is a long test, so only check against
- one version
-4. Get the sha256sum of the encrypted file (bash ex: sha256sum zerofile.pcv)
-5. Save the header bytes from the encrypted file (bash ex: head -c 789 zerofile.pcv > zerofile.header).
-6. Create a test with the header bytes and the sha256sums
-*/
-
-type zeroReader struct {
- size int64
- counter int64
-}
-
-func (z *zeroReader) Read(p []byte) (n int, err error) {
- if z.counter == z.size {
- return 0, io.EOF
- }
- for i := range p {
- p[i] = 0
- z.counter++
- if z.counter == z.size {
- return i + 1, nil
- }
- }
- return len(p), nil
-}
-
-type shaDecryptWriter struct {
- decryptStream *decryptStream
- encryptedSha hash.Hash
- decryptedSha hash.Hash
-}
-
-func (s *shaDecryptWriter) Write(p []byte) (int, error) {
- _, err := s.encryptedSha.Write(p)
- if err != nil {
- return 0, err
- }
- decoded, err := s.decryptStream.stream(p)
- if err != nil {
- return 0, err
- }
- _, err = s.decryptedSha.Write(decoded)
- if err != nil {
- return 0, err
- }
- return len(p), nil
-}
-
-func (s *shaDecryptWriter) shas() ([]byte, []byte, error) {
- decoded, err := s.decryptStream.flush()
- if err != nil {
- return nil, nil, err
- }
- _, err = s.decryptedSha.Write(decoded)
- if err != nil {
- return nil, nil, err
- }
- return s.encryptedSha.Sum(nil), s.decryptedSha.Sum(nil), nil
-}
-
-func compareShas(
- t *testing.T,
- password string,
- headerFilename string,
- encodedSha string,
- decodedSha string,
- zeroFileSize int64,
-) {
- headerReader, err := os.Open(headerFilename)
- if err != nil {
- t.Fatal("opening header file:", err)
- }
- defer headerReader.Close()
- headerBytes, err := io.ReadAll(headerReader)
- if err != nil {
- t.Fatal("reading header:", err)
- }
-
- damageTracker := &damageTracker{}
- writer := &shaDecryptWriter{makeDecryptStream(password, nil, damageTracker), sha256.New(), sha256.New()}
- _, err = writer.Write(headerBytes)
- if err != nil {
- t.Fatal("writing header:", err)
- }
- if !writer.decryptStream.headerStream.isDone() {
- t.Fatal("header stream should be done")
- }
-
- _, err = encryptWithSeeds(
- &zeroReader{size: zeroFileSize},
- password,
- []io.Reader{},
- writer.decryptStream.headerStream.header.settings,
- writer,
- writer.decryptStream.headerStream.header.seeds,
- )
- if err != nil {
- t.Fatal("encrypting:", err)
- }
-
- eSha, dSha, err := writer.shas()
- if err != nil {
- t.Fatal("getting shas:", err)
- }
- if hex.EncodeToString(eSha) != encodedSha {
- t.Fatal("encoded sha256 does not match")
- }
- if hex.EncodeToString(dSha) != decodedSha {
- t.Fatal("decoded sha256 does not match")
- }
-}
-
-func isLatestVersion(path string) bool {
- r, err := os.Open(path)
- if err != nil {
- log.Fatal("opening file: %w", err)
- }
- defer r.Close()
- expected := compatibilityVersions[len(compatibilityVersions)-1]
- buf := make([]byte, len(expected))
- _, err = io.ReadFull(r, buf)
- if err != nil {
- log.Fatal("reading file: %w", err)
- }
- return string(buf) == expected
-}
-
-func TestSmallFileSha(t *testing.T) {
- // Test 1K file of zeros, for debugging
- path := "picocrypt_samples/headers/zerofile1024.header"
- if !isLatestVersion(path) {
- t.Fatal("header file is not latest version")
- }
- compareShas(
- t,
- "password",
- path,
- "bb8a1f6be9cfcd39cb8eedd49583ddfd7153158b8ffce541e256deb400160a98",
- "5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
- (1 << 10), // 1K
- )
-}
-
-func TestLargeFileSha(t *testing.T) {
- // Test 65GB file of zeros
- path := "picocrypt_samples/headers/zerofile65498251264.header"
- if !isLatestVersion(path) {
- t.Fatal("header file is not latest version")
- }
- compareShas(
- t,
- "password",
- path,
- "451dd75500b9502e7c82fa679e698443337d33c52ddb84d5a14c3ff95032dc50",
- "f3f0d678fa138e4581ed15ec63f8cb965e5d7b722db7d5fc4877e763163d399c",
- 65498251264,
- )
-}
diff --git a/internal/encryption/picocrypt_samples/basefiles/base0 b/internal/encryption/picocrypt_samples/basefiles/base0
deleted file mode 100644
index e69de29..0000000
diff --git a/internal/encryption/picocrypt_samples/basefiles/base1000 b/internal/encryption/picocrypt_samples/basefiles/base1000
deleted file mode 100644
index 23bf4d11aca4f2b55b6a72c4caed18040e242217..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001
literal 1000
zcmVpcX2>*jkc2V)2(Xo(O%L)h|f)k
zw3B1P_O;2Apl?uZ@C@b5myTd~5bb{wow>px3!u|pYiAVAdJ^q)ri3q5+|e@-Li5(e
zQX+?lSfyITiSbcGQdiOaO5WTr7&)Ac&gPpvN=OqOe_xA4HG}Ao_?Q_11Z+AtvYF&W
zxPM8;24dHpAFjZi_yo1!*qr3scjGKBh@J!=n+add3*mX%VL4`95OfP;r``TGaiE&p0+!C#NeEq+@GSC#OC_8^v(B8Rq`2QrbG9*X9j|
zLCJ8kkOH&mhIjh`_e%3MQoyg0`z8=3S^mex`kLB7DH5XVwwbk%$V4mw_{Evgvs9Co
z5so#|8hF)kw0wtH6g4T|j$g8B*)d0%C@ye|JxEf9weJx{D7NGVC?<-qoieH9zWGvk
zSGu4wahTQ6VuI_d0t##(m8SV_aU$RO3^VsTZzO^aUwJX1NfdOhprUP~?66dsW9pQY
zQUrP=aRf^8C-A+To~WVDx#ZxMHd(t$SE|oyssI)C0ayAqgIS0t^A~eT=`Qf|GaWwUp_;;0jpUe}=ktwM{@^9kZ
z63)pZi{dSi`p7b_8UR@!{5~N}nk0!8M6SPI5JSeG^eup4V~=uVvYH#3@w2)SY%o#H
zJU9W|F2E*@#ZJ%QaG#YsLOD8I3?=+h5*|
zu@MziNaBowbOdQIoYd$MQiVKHK5$4=*0*5BPi2qjpHgeG^vWC1!qmX5ZuTW1WjAY
z0e>!spmF!~!E0BwW+#yr
z{wH{F`%CUahJ7)B9EXFP6YjQ??^%$|e#!wnZBLW4$q}g^7OwS6PS6ObP`2P}wrJr;
W>2F^hxZjLc_{fCHRPlKy8gw0^67IYJ
diff --git a/internal/encryption/picocrypt_samples/basefiles/base1048570 b/internal/encryption/picocrypt_samples/basefiles/base1048570
deleted file mode 100644
index fcdcf72dfd6e2938e9c064f941bcca988b9d997e..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001
literal 1048570
zcmV(kK=r?YNrse?iACE{$Zfwya>jVul86co`}YL_*N}HeS2O~2YS@#$g4gggNH0DnGi2w;an*s@|17mX#U`
z_7;0YC_XDdq^a3_*nJQHO^J*=R(X```RX+*4AIra3>7C#nU~>#`w=6#tmK0tE7?!J
zuJm0nbi?(
z0km+;QZ`=^gp9kay9Bc8Vnda(Dqf>{FKEd1c>>DFTYkn%kjJd_Vf(a
z@biN4i?~yDy&tvrY%f#Na`aJueMarOU;FtbjiYU{BD>RN;8}q
z&C1dJP4946ovlbY5(G3fQIbO~Lc2PbNWv{54dFNw&IV@hj3o*LpHQH3uu=Z|sBxb=
zXJc{6-#oMatsCmPKeLG_)O14}u{d~OaXoW9!toH>Dm
zT~004XV7Iv&Fz!SJ#>c%VM>iepBw13Z%!D`t4E3W`sE`qW|#j>z2V!%bz^EkKXr
zZl_KXq7lm4FJ#Veqz%I1+4ijK7uyt%7Nm<*dtX$_9mVf(ja7v^^>^+6;oUV3;b`Z#j2LXCkAvJNi^R8!=72ee?Vpo_{+
zj|35PK!rr-3T3p*ufrmIanl%`53;$Jk>50?a{SDDmF8#&0MaA|HC{X;Nxo8Z@}==2
z$%aCb3)T=V=rX#~t`X}Sq%*xwh@17}MXr80`)fbxF-@=iS&MsA8e8S8v8WVaek(+K
za&{_w+&jv_*?v92-9hEQUZPru0Fgs)$~KWyYIB{6T9zeNPi
zVUS3{g~>cQ8$ROVJdPDe-rJDO2$1+S5gG3UZF^){S1U3r_UMGNjFbM?MpiHTr0H&H|;QQS?!uWX{
zm|!4L=V1YMJ2?#5&*%I4jerzmwKnE2r)okIAd>hfIYHZw{bb@TcGjmcMiQj?)%C1z
zc!@#s>MUI4%EKzEqzY3GNyE%x9JM_0oNJuP9$a!qTvS9{!>6uA@aN8XZ5Dat(+p|a
zBz}|tU`NFqP}!*yGq}{aC0c-ggKhCB`~%NVH191-*+gV=&cQ#b2-J!NlCz3mtGg3!
z3?sDSG)ygn&o>4D>LvYAk%it~r~Y8Ezc+jOm&G`uP=}WAvL>^rGq<)_Z=Ic1fuHjo
zNo=A3^B(;t-13N}8|q0>zhuhIdC|!1$L^5F
ze(zF-SnwdlC($gFwa_>3R-*Wr=e7p?xs{>)yc_F&R6E@|UDuew7K4|PI1jo^P=`dQ
z!o!4sSSMEmI^67{wY}II0#PiMrz5WN$9AZbdWOu=#=OKWTcQC5f@@%IP#rWxW)RP6_ek^+keqD=MF#E8RmXeN20~Qff
zzBi4GbQkGFfA<#CXYd4L%$OCA>wy{$^mGQX)%iUmN-;b4rzo!<@A8Jb7Thx;tH*=x
zPnhNFp>^}bY}!_J0nLWxbSs`z@*HoK;}ZjzazCd8r2e}@!_Oqnv91r&tU=a)6Wyi?
zQmn*ihIt3O%tMe8J%0KJEK;3iYmSWO(D#Nr&YJceT3TC|
zWD0LGrvfXn3X?NnUdo}Md0^8umHGn);S5SM<0uoVK-wqlYBucz{ADO)z~F_Q-UMG^
zX{n4TAAZJEVxXB*PK8l)QNLqrTd$2#ZAgb|$O6^+L7A{A%5{ZD+Wj_Vc`BRa*&v$r
z9OFt3Yu{~LW)YlR)>d&A51_UP)Uq#jrx(x{gl~?z93NiyGgWR
z#`=?yi*=r({ctQd
zE{hqa9K9>XYw${eYhB(MidS!8eoUz+tl%~dy5%7{Jkv?plZ{OsVf{L&6BG8MS!o5x
ziFn_bjfghhU!C9BY+WA(l69ES6vBPqa=@QltqBL+}92kH4u@8)Dnf7YL?1`5MSw3?@;5S#YO|UM0XErTuK|
zfgfFL$0$YWJ;#{POc;o;FYWsAinZfIZrDYE9$^q8qAxt41;%0za=?v+6IqJ4^ta;?
z>!f>DlgcYqM$j(t!XtuJ^3dK>YuoeIk$S!pg=pQH9yIPfn!`ookF09`YmC#8B(@B0@^H*Pc;@>Ac+nH_X6>4e=I+
zg*PNYmj6gbvN2HS&U4B9!tTeeIU&QD?TH>ao*
zp2hoNnTKgix5VgTa66#Jpd#g-OI|i=km*x93qoH${sY}7)(?%i0zdZ5W9ffcd6C&i
z8WsK`&RTB4&c<7-FrBL%R<8+teB`$tOSQiE(+ruhT3JVToI#Q8rAY3{h1Csiwo}xuOi%|Q|az7k#kv#of=miPr!Si3YUI>AFHnEAF
z(&>f)k7Wvab$Wn{;el%CH)Q?jQ?f28*;C*zE92QnKUwhFxzljr^I>_UE$a#e3mu_B
zQW`U#ZW7SE8_6Z0BE2vVf)>KiuRE+lB1DbbKfs#DF
z3gO;p@IP5Bz|5TJ>(jtR!T@Z)X(3}92f~&sZ2@*yPFM3Ja*ih-`W-_9qOwl`{D1cC
zQ8jLNM4`)isBm#OLua`ebeJHz`qQY@+S%&{3yN#MtA^Hne<&|eiX&=;Fdn~0oJ?GF
z
zV6UvlH2@WGGP);43*eRlDtQLZ1VfO;-CaiEyey{Shm4M8*Z9bFxIJT5EPHYsYyc1?
zsat6P=X-tKhsEMwuF{nGmK50wg>xZJ+1%iEz#&g5RCs(Z8qRE1yxmi5rf4=Yv=Z^=
zk83`3kkE+89C<#)^$>Mzi4?iQIo^j;zauMUU_F*BlR^v}4*tgG-c-ZF^mJd>VdhMm
zr@G!EJN>vE{uqT)I08u;pzhAH?=&<_G!tv&67HE>)j65c7zyrr_48gJXrAc@7veV%6OGQV!zysG{
zfO%^OHqk!?I{bGjpGTHip)rPfHb4EHV6R$CjGcD#T=)7Bgo1zA-{93b^);R?i@e**
zte`euZh!WxJb0Ieyzsa&IZCM>26r4CEL-`2H>UyUy^!LH(L3SH&i5IFB_9s_NTl|$
z>14!aQa0#Dq^4BheXlBG=(qWZbU}gzw+qD)Oh0qJ
zY&)?tJCPf8iscm9>G+!D06_TtDuh%_&c&;(+@p)Eaqvk6zFqFqQLH0b`Zk$uq8tgU
z@%F(du%s&9O8M?E&QTXwO8Zu2acybbKon@oWT*+dnvf7g;Y>q5^LjYo3C}%zF~<-c
zH(@uCPpr6}ViWds@HE=G5n%r4-dnFhZt@~%z_4uB4J
z!h)dpgSKXsl~B^#);3RjNR(^&ewXYlXmQf<0K$?qtZtcwF?!Vkr`u9b1*3PVdsSeP2sqfzL6Ay9Cu8gZl39u9x(XepV5
zLy~UZ*T`22<>Rrc+^jZXP=BEgN#?p559vI4WY#j~G_xGp@q$?Pe)=KgGM#<)pA&D5
z{4_DwbT0P>@QAjk7T+w9yr7{;98}hsxRS0kr_*}94C4D^Xdr{WU9`*d(R%M4bkIU|
z&tGa)`0i}KL=`&h9y&nh*RObfPw0V=V)uYJ&%WzDRj8o0!he%N1L}%dzhMhH<85M<
zHR(fhcQWRuEQQ|awAb!i~v}JT<@(xA8vsSLE%Q_)`==fOJS1&N0${$
zNQfwBgL1+WJz!)oCAnCo@RLF+tux0E^EtMMI?kBD)psX{ykX?BY
z-W!?`5hBS5nHO#9(X?4-Ead*`d{4r~B~bn^F?Z;U><6sQIFmnu>Bv65>Ju?{w`n_9
zQ0TZ}Sc&`J(Q;xvEN2Hj^xUysLsYr_lxlZeNr`OK;pp~a17Jq&EY%Cy3l&f(sKX@?
zovqy0zcZni4JLe+=A#Kcyovx2H$8ha(a;NGEkOX-vi)e
zS!&!OSH9H1aM}AI7^5zM$g`9jr$;ObC|;=cTye4^&{rJq31QG0E2u=<4*{EDVapM&
zFY)arTqIDfeHI*geyQw~B?q8VZ9{F`as}Gi>`;oCsW3#<0j8sF;GooP8R<^q5rTKq
z()k8Gw6*6tM}f1mU^;p-E5LPCa^b(gT@}7u7lE@fX5XIhUnPPF%_dtOvd3^E|!)dp?2GgiJ?d1oVyg@~_rth66!i0GfIn=QYo4bUYZDv-YKn@haxw6Mb
zkPWm`ljo&2farkA9OS8h-NRN*HpJXfKi5wgo#4(S+rf=-ik<;85vFs2-IP=iHsAoh
z9jxOS*DG{?vVccOrtQz2+gU*)D=gH&?!cy|)^u}WQ6cl!z9XQwZ1BxCT5I1HymbLM
zVtlJuTNa1efN@*$d^g}L+K|n2w%2!04F)*`go^{~diewX0Z}1&VaPjiqnx5hdvYW4
zUl76>@SshGch!*zEH%o!L{QdSBx$Og*>r#r8Gn7A^+~=;W1GG$MCWjQjFzlOE2+{r
zTk+^!W^J^A4Tw+t)&5wmG`QFoIhk1MhO!*ryV>01^N1ILQ^DiqP~l)qerp$C5x9=w^$jG2OalA+d667V3@pg13qk;Br|z&5FOJn?ryhJ2ekY+>M;_5&wtUbS=q;?G=I
zC|+BMo3md(EnH_6kkibi?n#!{Ii!yx;!uRk2;jO!gaWc5v!sNWpfGwFGRj47C{LfO
zCl~9;+4+ASa+XZq;-*3n8g*#Q#2s-e9k`dq_!>OIOuln0{5lt(8To)YeZpt3CgA(r
z^im30*J%>%e||JjH)OFG!p@mr;k)9YO{%q~r!NM?-JM8G0AK^&VEvx9higzY_62PA
z>!T=f!RcCydqBRT2#Gv%t;Z@En7V^QPXdkqTqML+f&Uh2Hea2f#c1_qIV5Mixe
z3)r&bsEBiu^2&B`K1RFlV`w{@Dr^9@GUcopzG=EphotswdA6paP9igsnB62l=%Za}
zx&^Q6@d%%LHaN{gs?ksx(YEp}&f34|^VP-$zcMlap$rC(scmdiMp_0ryj@bxPC~`H
z9?zl^-tL3}BG#5uG*|+Or&@KJO^eN#+I$97RVzbk3scwykbT&dyc=`E+{gvHXeTLx
zp`%E+9!dQ|*W>Wu2eWK1sorUDZ~nRF6ynT&R}y#PE>c3y#!osdLe74qoczU}XQAyQ
zf=?*Jh=|hs#?B=56>5bNqkLQNo{ZGvZ1{szLnyr$V#uYRq!26`R!Ky(Am~$GW6_b@ag)@JdEm_7;4rw;6I-oKYQ>21{ai3uJX~oh
zkx|=mO<|@k;;LfhRQl@Mm_yFeU=31od$YeT*JXm)@aq%-j}tMFUf67a5Ed2w7cAwH
z*Qar>ruoj}_zKpp#HUt~Ta550?&i)N&7^X|SjA#pRh9e#bDHs23FEhtJ8a@P&@3;X
z&I$V7M-*hw9gy>9f0RoOV%rt`k)nn6w{+`k%fPR5Uj8d1#g@qsrvozw=_w5^Opz=%
zF&G$3Df0x_-BL;9&23)UsBA
zCURGvbuLot{&wHqPPo-3+ZZCCgly}i)=`~bvgs?26Ju%Ft8?!W-j-Q2Ikdw8Hl(s0
zXQT6rn)xb6oI{h|)tEaYK{cSs-}b)peGPBiL(XT4Q#>b}8&V?3Q@!}&QPjm_U(`pX
z+W!0SNjrAx=7GrXZ4tRwJq3RR%*0Xoi|<7)+nPo8*+=>bD5=Fyb}c|XJ(T!y5mSsE
zxDVfoDe~l4<(xVVtJ96=IA_#K!ze(o9g4mew7y$GQM-V#f4=9uU40v+b!16aDEf+a
zmJoQV5mh?RT{BcqVj_no>lGLYf8*X-@i8IT2zSQh={k3*H@+VJw&_RhnoF8@q0IHB
z+8Q&GI9pYp9cCmqFl*vkSu*H85udX$YyCGp0Pwj+c9X}uH7dRFv0!s`8y4L&sks%?
zeYR$AmJzY%`R1KEOCRi^4h$dnNs@-NxS*vwjN8PW>PF7WyOqq80FN@t-KN1DzT`Nr
zyMW^P6GZeB4hVy6W!hcE;3(VfRBr}(342HhSX)Ij3VxGh|Au#s8{)n9ReT}Fz
zc>ufZT0FmUAe`q^L%)#&``HpylH3~xM_hygGmt0s_A$B!g5lUXVoo=DoL!&<3x16j
ztO0BLVO}B;`lOlmjmEwB`ngm0rB+8=L$${|Y{oE*#5`Qf#9F_aFDN(x3g328vl63K
zQ6@x0Wio%QwJG!=CbNdZ;*-6j$!mK)#3OA@!TTh9p+r~?p+DMKDfcju;s}SZ6C0UWk7n9nG?vfin$*prTu#;rWwqLq1pbll-2!#|7wf$dmhQ
z@ph_c%kpfCvv;$S^L;_wj^iZ(2%7fR-$(*0PWIBuPKqR?4tlJn%B+BPwf3_+7s%ow
zqUBO0MaFvHP(MY0DcsDURZ)!97<9oD#u+@vCN%@77RC-nkn^>j5N{dO&%+y!<1JiV
zTeOR(dRAR;t7GjMhAq(Ogo0}G^o6o(SB!)yC>=2|UAS+%V&rk%%u=txrn`V&cj?(%
zVB%FN^(~PsGVE)mRMWn}VQfRI(^+6yhMivcbGtr3D%?5Zp7LewzJ
zNhWpc8bq2gC(E1bxI^&*_{x&RbY|4g!28C&VQN9KYT(!`nq@;DSC#bb4cI|^&;l`K
zy{ceGZByFkILul0#BMVHoIic=&2$`Pd7Vu0EQxWF$;U21csI4m0#Olfq_aG1uaB8e
z!+gHiVI)fA?ULJ*0TWSphxGM#qBOu+TWWSOG?zz*#klFsM;(b}zP>KBcu&dpejs+F
z2B03}EX>q=%DL$eQtdJp1|bnOn$e?YbBWrDe5oMaMK+XM6O$3f)oSA6pJf1|w%|qM
zL?Gtvqbg!m3hx>nc3$8(k#zX14E7u2W|3i{C$pPDA2ivPo@LG1^Lgy?d_$bqmm5Cx
z)+2|&LBXK~G2zVFJ|3G(z0@L22eRvPWfTD2F|pS0pXISA^oK~HSm)-W++k7UhaK5F
z&DGg(+~jegeZ;N7y;8nQ-Wg=kG^P;>!s3t?xBXG5)P9OU}y4&_L+c
zGWE$BX^nilCZ2D#0Z0q|g>xF#PnaWSQ`o2${YNTp$c8|kj?_l|#E}mt@MsZ{fsIOe
zfRYR=hNrs6Bv3UNZvu{IjtxDm)yRCPDiCH*}~kjRL1SMACDS1BX+x`H_!M`ZHf@EKg`Rm}8}3ooq_4;6B$W@PCEf@M5`x$kjP*l=yhr`K+sMP-XK
z=dsXb7!3@H>(VO{*8FA11Gq(FBDAGZSedi>j^E;uHe*lATu!74osIx?|9z
zu}cxrk@t%WG3XWmX5Kt{)e^3~UF1zry1*;B=lPLNJ57yK@v6jzj7Gk$!7|33J7PV$?=<+lGR`1mdM39
zkw&9NHpccZgYh@FJ#{||*U>m1-1B{E%`Z&hEgSUIE;wdj=~R+~xLFRIMgyVU<)SNu
z-ssauFY`^JXAib|H;y$U>uQa@9cKp%n#KoI;TbF}
zCakma0_&Q(byx#o;hjewC
zt-}C!P6b-jrrp*P^bM6oZmiHbT^|j{9n!wlDT8fDrfESO?#O>~Vzc)Q8&~~f`Kx+x
ztNKANC65)wlTr@KW2#L$RP*y;gkOYq^s!!K<31@gII505PfS*O^1&AvnL(aZKE=aY
z6Y}IEOeZ;L+_lh4-2@
z>F0+8iOlz>LUO;Wh*wceR%>6qK#06-DDxA+#aGN?RRy7u{uvirnenvE83nXdCqdSC
zqDy=mc7TQ8$9Ad*XSuNEH-`<^RA*zd@W{W?EwC|n*^?rxB^X4A4Ld~cI&I_mf2FG8
zdlqmr8#^XGtZ;RFou*aq`7~@oZrrbWxUCdSW7^JzvNmmrFRWYflsgtdFV3xfk;@Nj
zG`6bICHX{-gK|2I|@2Qt|ARmL9}M60iMGj4aW8AlEt~TD6XUZMM>5k1M4T
zt_LfquARgx2uf%1^ldOmQ8r8rg`*QvvUs$mH<(`38BflMd)3ZoRMP0>bE%
zfZ^AH`XGn1h3W2M!Pb`~ue!|=*%QV@_;h2i
z9y7_T`GU61?wD=an3dTfdyg{cXGM*l(4X_}ZpM5^Bd`teWT|~FX}`3J74HI^c)6d7
z>~j66VqV{hI}uvWRBvuQjnjC0^UO*_Jh62f_f)obG4ch3fMBbr${&;jv<-UgmL?-9
z@I8&(r4|j=6uzRPGGaW9BHDBm$A{%YC1jfPeYrBxgypDV*+Q>M0GK=!t~
zBN00>SG-UXL>@)Y5l{FkdAGBgW@Pgs`rz!kep`xn4-1N0uyvwQlePod@R6MWXE=A@
zNcy#ant5-^HN>}WxL->xYgdnM?Y^wX*Ku9>%bxp}h)Z9d^k9=ri7gWTGcVC75}BLX
z6NBx9tFTz?Zp)b=T5{@_J#Cny+-1fDmm)^6o}H{Acc>7}1ZP*wX%VkJExUfI9Cy{J
z>%J|@Ok)iy?qas`)!KA0;ad{>-_=vPK`qEeX19@(;EaDBjQv>{Unn~}D3iYH
z%7Q<$Tx}k~R7$UJ1yU9uKs0DHjRqg2^N8ZBStLm}_)P>6_mk?BomoZGv?4|*k6;KWG
zOj!v45N#60}~f6OHP|UeXuP61ZpXuVCiyY*h{!y1QwBn4SXBrQ=~DGguCK-
zWp9_wyAnq%wMl5h3w3S`{Qg|)TJQi;47rwpgdn0u9)D0ZfdHScapBVGzbc@OABR^J
z!=%_ClTf~g8gncVBp+$nq0Sdcm&=>i*!7Re&udcoY8
zWR{3U3$*R=S0E;w5>5dzpe<@RyFi3Tp-ock5CoXc-A+5(128;?jdsFp+Aj%&0uvzM
zA|}p<)8N1sXmhErRU84yk#7<|T|5r_$#wL$nhE7)!7fMMQ_mfREFR37v|)i?Shoqh
z&Wa{^5>X(o@@1Lvpwzk*bFE9a3u(HYg`9*mG4ALz@taAZTTl72!GA41;4ZYQMvTjQ
zuG!4yr0B{}EeF3rO@|Rf3CYt^oz;l+w~Rvd{vx5OESE0Vljv%DD}I9~y~AyIvrnl+
zr(&c}!pbWjw5r;yeLzODZM8oK@$bRggBn2m6=F{ippc5rH;3?s-7i_n6#joqja2ui
z^IJ-)N=AAo%)?7!kKEebzuGa!qGBpH1}4kS8TOe@u9&AgFFj&$xJ1xG(D~{${M$8
zUVqSJiO?fy5MuRt;u=id7xx*!CJ03x_I$4fc!8e%~
zJPT?LSeGPpv+`j^i-#p0ew>sLW3O^ODk
zAi5yCvNKOus9P|e3Fbuy588viQG|Klb1)~OKvB~U?YEnI0)<{R76vMyc$Y!ca+A^0
zl95s`b=VwmGJhukdO-_=9J-y=XDBCrpM2%Y-h4|s*AU@lV@6bk`IxrFB_@luviftD>%JB?a;~+2}=}`Hx4*jlE&&CK}#CQ+P;Mqop^~BvL+)9
z(QExdq0+L6(_R+u{mMzb@AV5WK_~ZL$HS4a?gq-0Y}0!n2@q46!mhF9v0@fT-Uv6l
zY@MP_u9A@?o-?n&R2l42{3jwu$L!i#9n-dIpiCd|6r1e`iw3sUrMhq>gh3b`^A&zw
zx|L#3mrDM?GIZry@xg9*T4A4d4q!}uX9~Nt9cW21;
z@Z~o&dB^?2I<{32kZD74+6{-)R5(7sw+@@NcycS>NjcaK^iHS9D9<}%egsj`xQl%(EPuKW6I0IgJiVu2PblB_C#-MX4@{tPOXIxaAFgV1`>D8
zhiseobPBbUcT>D0qF&AJW~24LyP_-yLd?w%C|A-h^riuaLu_LmWc;_^G<3JfOI7kF
zJ?sjT#luV$3txoUWg-tb;rP^7R<@F6V_atFN#;=df_<=kafvIZce?kwkspZ8IkJ<5
zUoABVTDowNCMdJ!AmYYf>4YW5rNXzmV=4v9OTHBMj)?$!%RfL+RJf2jts0hA7h<|K
zd1gC_1=!KY%a|e1q&4`8P}8yjE;9N_Aq)YVN+1KG
zdHB4axVe_{*KO({R4)&}syJ#5iA(Ymny~0)n$Wmb%oOrKC)Q;z!Tn70C?n~CRb@r_
z^&>ay8dp??V)7wxM*2eUXeoX$i9TJ(JC(JC3u~>d{JOrmIS2B^_6R=Lrx^NM6ls^?
zitBD&;RDty%g*(RviT*sh+ia=HZf=B$OTRJzkm6=z%=OK$alWNipv!dc&*Mt6!AU6
ziScd#;vjIRsXmu!j47!dhH&qe$hIB0XAE#83cW|z{P7fU=ubw|7O_|6Zupm~9a#(%
z7*6AKL~D@rjW8092;o49$FF{gN1<}tuE^nJLbw2pRI@_<*o@6|>M#Dz5E2^2M0%R2Sc0jb(KzT@}0
zVyXxYKLp@y(L{|NBpmUAR3TjMmrZ!EQ&ptb7}D)G$@3Zw8NG&P0Jjmqp}MJdsQ!?Z8Y%D-yghPhqA$o=RJM``FTR-SZ5E&2&WY|oINPn*rwTTjN3b6
zq&P01YGk(oS{2PuNkFAvA~h^ly$mp5RcV_w2x6b^K=^W6hJA}?9{NofL4F(n{trab
z8RIZ+(&Q4&VZ|<<2CItUNPleAg_u#dD$vS2k*+W-KzBC_)S|~Y3v-vk7zsLE`ol`$
zgajvaG0a@v*K^e0uZDo(#?ZB#<;<;Cs!h3ju`i^%nN=pIr&q1n!>BvTAO>J4QOPp$
zeB^Cd;voVI4&L?P#N!y)DH+e$NhFe%FRv;{qK$
zQ0Npav-+At)gjg$V}0~dzdMe)*F8V>SRCVA7i5P<#>Qb}8_tu{X^0?q&oXP4)tin5
zIalT&k81*t91SK0=CT~YN~KrCbr;rgSKef6M>CFH@<{^*gvWoO^STptl!&_ZnJ+}6
z=zFY;e~V9mI#P7UdnYeRBd)ds%hV_Y-s>e32laB?;tF%m&M06m4|J4VFV1l2#I6BN
zLeO7^5N1`eH`J4l+^~kou^6{AEH*8mX#i~I#ZJVRgv;T(mzlXg`3GG|XvytDq^wPv
zc*|kY%G3DNyK~L{V8;ZVa1fr<36NdrUVPbpx>~9-Cr0O?qbNgl%kSeEdARiaVX!A9
zwLLuejgdVFUh#q2ihv;byk0pin#TUF3c-Oa9
zLq$lu%$S5!d**b8r*|pWnsU^OSp+k7_yEm2fVjggJR0GUI)v*%4+-6(B888MFH@Oal;BlRCwsi*20I;JBH3;CW~z@_D##I=jUhBVqGMt_S!
zzxYRCjIh6ETk`g=g+!b9gvl!;NcG{OO5wB!*+rqJc)u>$R6UWy2dl=cQF%jt;Wgks
zsrxd)6jIus>mu6t(EL4-$vb@Jt9RifJE4APgC1kCQH(uRTtD)k+Rwd9Wcw%JUh)1q
zb9LsojNJWvkI5V00_q<5{y3Ohq;dZDK!)sbW>Fk-+q)JjW`bTy#ptT{N>R#jY(i@n
z9sOv|rzTx9Q{24Y=_3|m8AS@sC<*p+88|PxTGnf@DTr{{r{vqxVRc-ZU>r@dH|2h9
zV_uYs>5lF(Ge2Fgn=Wbg20ZRmv`FJ2){Jk@v?s~{Nbf#mm9`ge($i)?Y%Ib8$g_rC
zPEv|(yUql+DB@*>XfoRBND8L1X?HlHWuG)|(Iip3FDi1X)~n>Y0@_
zTDeo%nZH~8Ml9sTCQE+#G3X--(sptN2th&YKoRSs382q%a}`^l+%(r4qUV}6eUULk
zrJCR%3Bb?ez10adYEeSKvSq;60ioj(X^8?WG|*tc?Fw@?M?aY3=a15&uMeGspVcH`
zz*~GzW#KDdeFQk7-L^%XBpOpvD5`D71Wg2%^PVDBe}PF+eUU1-Wj
zZjooKk&GlC(uVr=%}L=~Su9?WO`t=N<35jV%Vx;nR$qQHSGO%71vm2TL(Inz9}*!(
zP~XbTRgN?LZ6CUn3J9=+0*Zt^5Rg$2rmR!TJ0SsQ2BqI*ohwcI*v{lD=jzjJ0@{iG
zJ91HA5LQ7oCU0T2-#sSAs)3LyJlm|KuQgRwAu91W0rm4#@J8^;+T^dTic6R@pk>zxho5R0j@7e{&p2xv=_^
zxYQZuu>}RRAno|~jk(&>`&^qlP!O$BILx9-UIXEH9{gpBG7;}_XRTAYDcA2%YMRGE
zOO(B<@@@L7e3+0AoH)6doM2u|R^#C{yH+`tdNC~L7TFx_{n!4G^@E(7WsT#1z9+Ks
zS;tFXTA8NdK+AAv+orb2^wXUl-HoYlHjUD?qS`olhW4NI9ZiE|KMFu-M
z_WiyPUdcTYs_VIFF$qZbD4XY2-0zQub&Q)!upSH7@i4(ob9HGpz&xm^_~kAS&oS@?
zMH*!UTW(#SUtQR2$3=IoKtuH{7_VFDQL#UZUiy8yFBS|M4}}at&Zal%2Xjl69~QFb
zmKD{2KOR9mk^~MCMcfz=1IFX9ZpDxviNt}-POnXHN}!Oz=+RO?^;T(0d&qDR?pvyIX-Exo!E-YPsZVe_Q#%Ym?LOwK%Y8;L=KOwy?Aik|
zEy93P7WoJyNqH9dPv4r1K0*69RlWKA%8Iy@MLksB1%J7er=rM7U~-zEMft(r-Azco
z3O~+9@|Ev*G`Ze~(v&m>W5*CHRis)rVm#$lf^N1)OA+U=fD5D1Z^pE=oQv!+y&)-fCHX{&
zTJ~W{R8YjFU-L=YtL53W27@^Up&NJlx6bfK46!F?loMT^B{MOK(|z#p$MqBXM1m5p
zo-qKQpsRqMCaa5k8cWeWLro1UPjfk(X*lRd4eJi@{OB;`^moY5em>KckVHR==x-Ra
zrN(65omy~nlI?#mGlFA}msBt)=M%RCX#l{HCf}lvuAJOWR3i=}bJrceBn=@a0a|JH
zdW|#5)fxs{U~2ZXs=y!c&vZoBI6r5dPVP>cNuV@-eOqz%n(xZih=@;5Hn6d*nxXRq
zWqFuVBlTe9!$OQ8*BEm|;JeYV*4b<<3Mg=`t?u782_)Cj#Xo_AWH?ox}4@o<=SG
z2nO|XWwZLv1_p0U&a|Fsw?^9)X3wRbG2>X*_Z2r12zvQsNc9ouDx?Ru*#ulKD0_Xi
zqXd-KiO*HzM($(M!*+E{)XJqCo|z90({qfVLLnC)7kh)ut;41P_~d5LUt{R1aY4(P
zsZ+Fc>8Kd48S3&cxmG^};>O#Oc8{~bjDxInvt+6@SJ&nH-(_#NGk4SZ&U1Km9dc?;
zGb;KM)j?s@I`{@rV$c3lv&2VF^%2UqHH-ShIzBRbr{){2Vc6r`(?S5{wanW-1rboT
zMzWl=S1=J|>B~`{aPQl4m^Xi!vMbGW@jl9~
zr$A_*4BaRmFoZI39WgZX7(5O3d%Q=ieX6@cdP&tR4n<-%_bLFs?7M$`Bu9LgSjg)Z
zHrc9MzC0(<){27y}b=_*6qjWV24m_g-AO5XCkUTEX
z_&Hlm{Dw*qtDoGh0fOf*p*{6UGT!@NAyPomWJ#4-NASVo^{1E@(q*tiWD*rK!QWuA
zX^h$|NGARU!w@eH7+EMD4+)$@X!4cEX=06fO`G?&vFKQ{YE
zlr9jUfyTy9hLr|OUXGz{lF*(jH90j*S+nvm&n)ycEGDSDn7nRciXoay+hVp=o7Fi$
z^^8KqWh^dAdb~EmVab>#+!=5FkegC#bq1wwnN1==cuGH5Mmku&f=~3e27_C1tL*3K
zoQVaOajIE?b_@Z)(OTKymrX)BSb(65NQ2T%DWiGXBWI+?HKNF7J1}oXfviFx&tmiG
zk?4=)*VkN4`Aa6me(b7Ysp-e2ZxatCq~U7Fh5*=7ou$Cyq+k+nZ-}X3A|cqBeeEc&
zySh4U>LzWPm>hj)sXIz4KgJ9(gHFIqf?NpNq7f_hG>QlVZrqBXV_sxOC~`(wqUvq^
zCV#iKNpJan!abl`Z?ZZ_QZ^9POxSv2W#s!POR0Qvb_{#QJe+U6d^}_qBOw`|SW3s>
zvPlx_!z-!-@9m(Qnk>V!A(r>M#5HhoLafrw?A5%G0CakB162H#f0lNhfec3FfTE17
zS{ToZWGV)n=fzic79qP9y=BFX)Bq(w+P~G%XRYup<#aM?qN8HE02Fa5
zLYBlKADxHMChcSj#-Gs;6!4^jnx(!Q2b%?qnnot|J)N<2j9tKJEP`P5`rznJBWo82{A5}DLx*;9d(dd$C<5@;hEyCBOn?|U{7e6t`J87X}%HzH)_cV3VtFQ3w6oZLQFFO0(|cy3c=Gv;)K
z?=aW^N)`!h+N*)E0uw{3=!3nScD7m*Aoq@JJJdJi@7J@IZvgb}?QW6QrpSuuO7nU*X8oUPu(~
zAd$5J+zgI@LzMSVM2|D;vwtk|H1zSsRqO1#I0eoT-VvuN9l(k=y8P*2vlJ|S&ozzT
z45B)m_57$lH&2;RY}MMw!Y-57ONKROoM@0@q`?&qB0d-k=0rqtq|6(vc`gjdzpJ@|
zNt>$uWgj@jy7;-M%J_V`qfyGn=8JIJuMi)Xc{^x&w7X^dQj*(*N8*e*{UUKyMA
zM6s@DJY0fB7&dSk0M6+havQ#o=K2Dw>s3>h}4uz!G9pOxQNzox8j;l
zOZ4`yij+Z5W_fK$UKmkY1~vwr<1l^j$Lf%4Br_N?ukz^@k+9D431CKhEQVi2%B7x=|WNS#^+
z?1+u*&rc>fQ3_)4i9}a$a4HSV1s(;
z>OMJ1NGmUYs
z198iUwmIEz03MV*70R6Os~^NgRjD@WysDm?6#dCjo|BAOx<(0Qh>V
zam!Ypb3A*;+i8WpY`ug-zo=6g$N9!n0
zE)MpIJT!QM@Y1aK8Jk@C*mXP
zQuI2Lmfv2s4WCE-EG=W)DdB2O=0`XGz&r>$fOO__ra$mw&
zuV;m=xy~dx9MPxpzjvHa=>zEa*+H%br!0V5
z!it2*I$)
zf#7A@*rpjltwCN0h2XUG%k~?1kyd7lLj6ZiTlz=qVpg=^S9=*+1UDb-k@GPZI+UcNNpI>
z6)5NK>yAz+7%`e#NU>MMJXx(|r9f)b;zoTWd>q^k$yK9%qyhVm^qY}IX|&e3Hlnsp
zZu)-_={9ez#d4~ljq2JP!7{}%Bb&cTaBA}QqZJ(bUlu#lv6GT
zK~syAHwt^>OuBi0=?tL-fXDAsI@+%u+ZfIac1{=a94fEuUxeSP0Owgz`Z{-Biy+gm
z%wOV|JCA}+feIIex=V1r7QIAx&a`bBwyn~bg4m&sJLBDd)?l!%QsP?(-$n2`HvyfB
zVpPzpYWFgr&yN=;;{xRe!u~O9{Pt(8P@@oBBVem=A!L0Me$gk*^8t1fZ&W!(9}EN9
z-p8*2O6KkG{VKgENX{qxO|>cw*j%CvCuR>G3(S|~-n)ZZdDaoLNY87W15UT}>iiIe
zTAWFJo#ZeD8}Xsf%SKW6tHO>q+gFh`RhRFOkzca+i(u@9m@N$Y%3bcb{c4_3F&
zK2QaPYZlnlCaYAyEryv!=_m?mTix3oDGfpnNCOdd7(jjWK5lSJ9v5?42s0G9MKyq0
z7M_`bfnBjsRpV3@4hdEB!g8B(ixRuehw>zeI3FS|jnPCur@&#GbJU_Sz%MN;oH9Hl
z$Yp~^_W+{Fni!kQ%*NVY?PuL5)91ZhP9%u52~G)S`YfkhvQymN4xTB)!qZPhefBBAU**f})eYrVyzWbq4n!yNoM-xt)sN!~LLFV?0~D~8RNIv?3wotlX#
zX=)LB^)S~i}N*H&}83B0U#ZCcgyHz7^F&yyVuqy#7TQ3M0S#+ltdGGI~l
zNAB(Lgb>;UbqPxtHwmi!vJ3ez@ny+@(8WvlU^~&G%&r|YV79X!mTYAOo)t+Luup~M
z(d3$SK;Vs9TrzfZEf0Z%J9(^5qO9eYMv3uR$>3LVKN{fQ!5m4g@8;OnSa^4k)g3ksyi|zj2
zovbG0WzeOCa-`{3X3u4>TjC|XlwmKX#{hgv!^
zF{dRO`mcHG*<0&Z$a|wZl&M8h2^M<_vvH(C$Qq9#jRpG#Gi)N`T)#+_QwG2@5;hMAFj2|Di~dbomdAJ0FVKQgls!6tZ1*Ri$X~xEk+6aKj=BMNfHlv&=(7yelwc4DRB!hZ@@Jkw@L}TzoxRl
z#v7TUpB};AGZ~#Y+z`@G?s`UvYRtanbW^gi--XN!&Z4x&Q^Rj>A0jRiD_2b=c
z%Glef+zY-|h#pI!n}7xTiL{`SWNV1PTkWVDfM=X{Z}3Hi{R1z?wWa#8DQ>o>>uYK~
zF~_RWl){K_%6r7FRXX9~Ovo
zp;Rqu^JJ(1!jl-P9WxVx`iO8SlPjllDAVlERg
zG*I5L0tYiFI32Fv(4FrNcUF-DTrHd(T0GIf7ffvW))`f5KQATAP~BvP`M83h->$MA
z8Hz13JPZ>>$opLei>abW#qK^oU*2zjpTBs(N5F16+du?a@bLt!oO*yhXy}7bMzblU
zok!3%$UC@8xB~-Dq$=@Kn=wN2`e~pVp~X~Dv6d+PL>m!%>=1_c$^b9?sI9A?&i!Si
zg0^JMA`9wNz6-QT?Y7LeB@VlWw^9ekFCE%1fp3wVWc8uH3DAje(+z@zy8|V_tf*ma
zm(AEU$yNFZ$|g{+j&e?iSad-O*crdIV7da@An$nqutH4X{8iDqBluNcG?wf)`koP-
zz|HNHpIqE6VfdK0h^W0#pZ+PQ_|P6f%1SNf)3>r_B4HlT;`0k+43u8uEvUCVGt4Sc
zZ(}oU%9M1jN+Ta;kr^*?ayn(U(-Txjy4#$j{0}v&B%6TNArP2@LZIFRT8)IBvUkKMMpvGG85rM7YPIEq5!ZtQ0~`WdZv#E_
z#H+%~9p510rr{1VnSbFo~l#
zIVD|ppV!Jg%-zAIGqPo&xcLqvIkvtT$$+mc4Vu~kV=ZqOS;fAWwsK9sbS<`
z%Fe6VLGUpgPp(l~Hv&cCEtb#TkXb}*)i_6ZMA|_mfU@-xj3(_+sF5g!_~Xs^&$4&l
z62QnR3w6?yUu+SYLe5kHv+mb;1XYNiwpW~Cs6i`M$M8F4efg-922TQB=w6EMT8|gA
zd*i$5+WEJFtJ{kR;F%u%06ovA+wFwC6ys|*DwK5N^b)0M8BF0(F%QLB%#+Mx!ZGrX
z$**tk;W3Vw>2qlE-6J3uN#EGZq?@BO!FOR%=)HT>;t
z@zBT@O~8^A9Cs}JK9wEgwO;c-E13FpG6mJ(b#J!TOw^SLd2JPRAoy?8e2
zzgxZ-np?JAk;!W4eVH+Fe5=c~Krn@)!}M}h8drs1`On`$g>Fh1Oq)suFi8zfgHG}M
zSK!~Zww%eT`v;&`lhMj0(4CIGW8~CZ?C+tup%Ig)a^R5nLHxz}(y>Uwq8?K370vk?
z?EH+oBqSf0xll}xl<380c;owfoL9_GdMWm5}!F#POc(&&I9`3un
z_cLb1stx_Ucj6ILz5}XkOz8%>wE4i;Yk8!%maLqrVTCTqxaabo`4jgSVE|_aMP}-r
z{YDNvKBWi-yXZCUf|Z|CF{|BO&lb>-<+ol#+2*V@e`0f^ldzG&=)UCzsF5r;#S1tk
zvlzLWf_(OxUPYcYL~=pRK+S*ml@3GBUs6R6UXnU9xsehM?|u==u0
z@u5xYC=t*zYu$gn4yvBcZea)(MYL9DT@SDhvKvxCfw>1Mhn~EV&|JTdM}P*B>5SI=
z*Pw;Wv(ZA8wCSpJcZkQLeMn8$Lw8uv4g=By%(R@0%5~0%lBXeEh@I(yw(e8FDw~a)
zdhcaC2;^c7){E*t7L;<}nJQNbb-Hf-uxj)a0~XMyubJlkJJX+jMcQ9kWC_1{ukQ)c
zEjzVMFmw~;_uzho$P@O-jt0~KUf8y$DaWXiABhxM5Z0;-|X>1;Xk=TxQMxJbWQz=B@
zcGA{mp@i{jamcY1wl#b`r3tt#Cmhe?)sxhSc+&?C6^lke3DIq5_o8#PW;U2B7Q}=r
z?kue;pVRvDmy-@0NEbr3TNglr-|o>Q)pHyPtX=wVi%JQ%X8D>FMI-619}zczXQOTW
z*Ta2m8;+5jMGOqiP;zbqAR-JFolw&Id=&@%$>rPmG2^NzJ$R^^-bfOas7S~f#
z&a=Ui?&`-`a2L>u#F#l|im#Uv-FLNOi1i-fuR}A*H7MLvfjIcpAAjQ=lX@;nv3~V%
zpq9edy5Qys-^IVlE`Yx4FusHdK-j(F%+lE0(VVL61wIy)0UFL6rSen6<`s=C3$C3y
zBs_4(Y{_fp)>xr$B8u8u%ka=#n#SW?b)ji6al`{^(Tf%Uw?1(N5j^87X*19*74wUR
zIdTHkMrChBF+ERO?;7|_RG0gkNMTYVW3{ph0sEEVZS+371g_*v{=*9am%ca?#31kx
z$V4EUwP;%pvkx(b2u5_D7IlY+bu@%hnOhRTCEY}nd5F6h$u5(^k|f}Wh8`$n$%d{c
zHoj)Zxqqwsj{s{7%9&SI@{L+newL-2d3!RT0{YrMk64{IVY!@TBTHdYjSP~CE>`|n`^kDtaPV(BWo9ey$-)m8K?|ks69UR^F=gUn&_kBN|N3_*yc*^)3^r=&g@1Sx;MNZIv_9Ht>0Q
z6ueseYhm+*boqp2<@g0eEx8tZaLvF=xg520te414RRt1p!O^C$^6>WdVw2+$
zI4U#aVEw|l-^P3S&+|J0_zn@{j+t$qN5cSP6+xqRp7N-o^(ojaRm9QKmwT*dXj)tg
zOzY--kTH`n1{$2g{bP&CA>ogO6NWLZfci>V0T*#d0CeTat7ofTSGazJ<&>1=3^w|H
z0i!Ly@GEg$hJSOZNFmx^{W_WSh9F8&Q+)hhKpH)V(_M$Jm$lRmJz1Dn#A(3~Is={ntxN-y&liE+2c8iCe}aPj8K{Nq
z>vGOd2od>3lw0hQ)TlwT?vjBwQKh+USYKT?ogI~}ziMa?XgP@DXfoUml}~0VBn1fP
z7a&JZj#r3#26VWHMBFXgn~TUFO)=C<`6{@KnKC{Ws`8Sfgz^qwf?SZiV4z}E5FMSv
zvPc*QV#M=49}Qt*m6A|}>HGsv4Sso?j9&(5i4Sd|>$_{U9amoiQJ#;eeCcob25XQG
zSmt26j~pmQP$o%msRMb^fj{avUQRtdTT~JUi3BV6gv8elD$qE1m)qn8MtGe7k}stg
z4;>5AX>{&!9(&qf7T)u3kvUIwKtSd)*Z5les}3>*T&m&)`F|<+y(5sbEMPkOKiBGQ
zZO>vHBtJ;F;1)OW`_-PNST266PRU75V{CUr=9_318VjQ0FH}4JJD3pfKQq3rDV4>@01QM#YDXP
zMG6ld>jMfu`wR=j;Rd8Bzv~Q(uj4yyGmwOmeUmyzUXJK40rZ0)AvEBp74r3#W^E}B
zy022+u7||Zc)Y^s;h6k?z}^Nd@TY*E`Qve*6S}J8e2v~{AHQ=8%?c-c;(+WyDSaMX
zA!p4|ayQuU2hADIB8c(I=>pTWD$%#D`2cR+NWEbV4egjOC^H!NLdJX@a=p4f*8GW+f9WR|8@1-}!MbFa;7*@f8YZ
z8_W_95pPmg&wgqtRkIgto`12ycY*z?U+pRb;Q{b^j*+Jl{zf+-Yb;1gXGlOdkE;#Y
z0O37+T)+{@u}euQJ?)ul0^EZ@8_`XsDskh$D_u-H5#NR5;3_<$qMm#61(FYsGP^&H
zQ20D~8D+g+>doSLV-Q4%>zWKwKqrzNmE*H<3`j`7iVoT=N%bk6pZa*U)TgL*7j@`6
z+`AIDW)Wtz4$5)#%w~kHi&CU6;Zxy2uWAVTs;tkbc0_HQ*y9KX3aPL$C#i_ZW!)uP
zlq3dV-EZ^jU1!`&-NrEY?!(}Omlp@K)O1T@KYqH4m@jb7g^TfchbjA>D3O-~0TvB?
z4{Zu@=2Q1Q$DZa0*bzNAGqOUVZ6VQn!$A(&z@c~czItUC#6zwjUx#2zT{?(jWg+N~)GJz5AV{es
zUCxqinjti*Fl;h#y-4e#e#kx!rcaM4uni%7U8xd4rx1Xtnmg$6bLnqL2$Sl8B?^QR
zrjKlzG02P5w(y3cXJ%sWO+8UjNNK}znWF2t
zkjw)6in)t_z1ET;9wE;Lp%Eu6NKpcSAdXPToSpO-bKdo&rkK_9WNS)en(j`V-Naxs!1DA?e1tn8R(F8x>HInzxWhby6cIK($74Q
zFT>(k<7O^qnwNntMUdj^A7A>7HDQFhUU(1h!kI)@D*;jKl|904nRMS>Ot79`pIs8A
z7w+vd{Y2m+I}PM!?At!c_?!39*tl&rIf|^mY8LvHT<+OD4K;
zdXBTm=7!cS)pGYa0&!8?;?moNh2+)x{LJ9UJyz65vzGYvV$ce+=xE@M6Y__rlGwiW
zy2CALDALczvVI6ejH3M*+7aD70+ERI8
zwf4SS8>+uN{9Q4HTY2T?C(sR}BlP!sORPhiA9j;G0y|Dfi&JG;T=Hx#;)8f`iKm9+
z0;q>OXxnrwovTKmi~YbOsN2*KZ`);e>W21F+Vk<
z+nbLGVYW?%{J5=5P$?oa=(d{CYpD1Sydd*cu2yGs;}v
z!mv4?>tza0{8A|IVeZ~R+rC+*8QC(ySg
zv!K*;^!P*TH;m4v@3YLiv)}}w*at%t_CO{A`()BXo>c&4=?5G$)AcqXO}dT^hnRuV
z;w0IEx=S9iJ_A+aDqI=qYh`#u*>QOY%CGfoJ#iN(G)4jJl$zmx^E2cilZyyI475P0
zJ3&$BJ#g6!JGB1fZ|{Z5>dcnK7|D--g9E`n`u)kdqzj?cwy0MX>r#6Dly5ZA{+5(i
zEyC5TmorB^{E>LZ$dUI_hePG@p9rj>Xk+WMir+>_oTyz>UqE$P$y^Y7x7kOl
z2v6JL5d*YRuuOZ9bfCWE*~Mu5P$HgKYQ$f~deS{;5zK>?S(0oBqy3BR-{D6NJ#mO@2HViLtQU18FlPtq6BWrY19
z3oO~@9b?g!fprqLRjJlfZEKW4H0MX*fS0vs^ucJXM{$wLhwbOgByq2p7r|~UYZ~fe
z?a$-`M@whfB&mU|N(qdaEhXC!2>VGMiTx{WfM!oMwL~ZjV#9?YU0G3D+(}vVe97s*
zVZgF?)Ua~k6fh^ok;1>jP1Y=yV9o^iG_C9LVkHT}t05@-U4X|p8#Dx@Ef3XCgqYYf
zZAHULewfUhxe73h(|N#~@Uu3&%+^iHdx0LY87m5s^Cnrdc)nVdNTy;eRn`cZJA2j3vE?pXreBW!kaSA$d
zawTCBT~&*R(jHHo4Eg(dEjmcA(q7-+7xy|E%88R)
z+RC~mfdtt>17zgd>qK%)$G2UKs?OZ8vaY$(?=
z>)~YSbNzx8$@1HNyW?E#>(?8&b+7|Dc^VxFmipHT&T(3A1|HZYU2l3^G_J)jD#|d8
z3csb~2Ej{_yjCdDasgN`K&9fb^cGKle{F<3SfB9INQ9{I3OBq!cH<-
zak-{I0flpNdjvO|Br9sR(@7FD3A*#yWkQ`YVR9O;CEksRelOkS8`~On{q^IWH*bO8
zFn_0eUoOjO;PrJvXzqZczdGsEu=j;?yGl*huJ#tFi~^I6^k&0`kQe}@KQj~%sbg?Q
z?Dg$+(4)@0c82X)sls}hsb*Nbn3RA%!=H7mO(+?u6Sr~h8nzf
z!B;{EwO)MH5D5~WWnJje0Uv`1!1hdDw~O?gZOB)a;xT95KE(CY38si~-x=0D$j#bq
zF^O?y_H6*o_>S1C3woMdgy~=I%mE{zh;sSwuA&kxLaV1A2es)SumiS%Z)?aCf(VLl
z>(wpf2Vv|f8wzVtRliax{e+V-
z{07K%SCQ)GTP5l{`Or@f(`f9=*0CbnU*hL^+eb?Ye{<4%-Z0v%=%bV90}<`cV_Bbt
zKKe5NmI9_W8u=9uMS4=)`qJ;9gXN5T11wr#4~Eu45>xMYUOM(kt{YN+Ik@EJ8{th~
z?~uDwq)L@%Nep5U0B}BjV1n!CH{wiWfn(cLV$oICX$0%P1oK1TiGYH$lakmU$#D6A
zfn~$GJ?p>)crnD!_PN+ur^jg?`B+#2&@iAos30cl6$2f-*FvFB3y`RlYK1R%K?#Pf
zPO_JD9+E;mN+ENJr0O5v)V*iGRt2|}TwUkPdIh3BM&uDp9e_ClUv%pVanSqGa06T>
z7;amiN1QhsL%_olgj~UHRad&DJyy3;v(#5<)YV#IMycx2Gb%0LpAb}!GALo;`tAKZ
zOiO6lQy(3rUFjH;joewu!45l@of^AK$#Jq+tz0H7%iHeP?M-X2JbGFZOJ*>fyH$8f
zSq3JIx`AWMu-6Ky(lLFT=Oq@+U_e^~RG=V}@GnF@Ym=QJygA|R58~_~B~i;&`7(hD
zz^-fC68LxfEbQm;=w~4=xD!Dt`b;|_QV{T<%xgqQU|r(
z?YMKz%SEAd^o)!nZZ~m`%rV;K%aEv}W`&3`?MWIRLi4U~k3rc=ZsAKtY-oicZ`=2o
zX=PHanC$!T^f7P0Ry>%lh|R{SMRoV3P&+R1T$lQHiDvUAf_Cgj*Cgz~Resed3R=8<;HP`$h)Qw3E)4
zYfa$2vQp@YX_dM49_27UlD8ye`2GAN;53a!3=!3S9{lE`7+>6H=;E)c{7;b-zREY1_p9n4
z+SqNrbbGIjSf3#IKYF&DO#3?I)t=lfaTyD%V9~$c*h%YUOQSS3C;+T*HS)VJZ+W>N
zmNA9Il{VL1;-sijj6wT^O;*xe1)Btb89q{e6}_|>3;#=?5Rm(|?t2
z6X|gaa23G83fh28;*-#7^z0mfj_V3)r#pXlb^ra%t9Q0O_Fa4cpmc@&I#Z!`oI~M&+^GAQ_-YMB=
zsOBQApdGPj@eUgbgY|;#7m3JaI(AoBQ^1NwVHN~uw9ZSihW`zv=7
z10(1h-Z>5kgs=SW$V=L+E-BBlsj^DGl>`B0RGOQeH8~Zmn2oBsg%Gu@7-ywO++5wnR*K#4JqJf20SIj%KEIM
zMo|+p=!K~aKj*KIU&V8#Yq#oi-?M4HWF0je9OxjlZ)&quAU+yaKFE?j3n%%
z@yWtHF9Aol)8tM(ImWM9W1u_U})|e>pDanNNP)z(e}me!UcbUf^>?mTyCldy@2WWHi}A`FM3MA7IBK8x{BMGrQ0{@Luy->i|q
zL%pbC73Z>^c2%Bz{(XGcQPKv)8$bcL{mc`{EPAN#NeKoyP)Y{y_vt#6$2I)9LntGAJczd>Wn8~oD7y%MD
z7{qADujW?~WaFRrq>2`J#$SX?k2T0ug0R-FqzQr)h~d$zt+OXa!N_EyHvFyX`EEOu
zZ?w`n_Ohl-$~q^kxOn-D$F|tlSpj-~BRuW^Pvn5yYV~Ncyy!B}5gHpGf5M%ZnK7pw
zuFM#>r`KH@S(McuOT@a5ODC&M0bMb9YvJ0)`X_72W~%slOm=74gGuzCCUWO1Q817X
z-MTRye2!=H%``pz?2jlkqr5LF`E0Ng=&~Hcv46jS>Pf}iyZ)iVXYmwey1=#JDbxg%
z?+W>^jllH)XNEgmlP|3IHHH_1QG3TOV$DnhM0l^hxMYw(%$wfZt&uJyVoUW2y+
zA?GfQl3(dbjEy=0e@0j!9q8wlkYPcP7CL#;S1#w+pfy#^7N9lBsYiNfy-ag6Il^?u
ziZ>>Cfd&yYPEW&7wOt}Ax59hx55Y%$qRRYan~ELc?qUFQF++z8x2`Q%Gk9=S(^jJ?
z>W`yHDTD-A#E^cd_>E#;wM4VB=hzTlXzr%`+qPzwbNag0!tZs75N2n))QCp(M
zGQ5a2sqK=Zz|JsQb)d$e8y!v1Q%7n}b8J|Y@A~iyne@b87f=*
z;W*_6h&T{#qL~#C0GAT|e)shRP|bP?=IRrkA&7frwRSZsPx|wr9@({pE?MxD@-+nl
zn*P(h!L~&b)#e*c6DswtJP|+GFhnMlwzlj{XVt-zBhz<}?METHhM(s^Pb$f|ch^aF
zqL!tU33=!7jC~m}G-+UrJxdP?2nroA%Vxwt$fKaUVe!Cu-~&z`VvHb`T>TH$!Pe7T
zq7fZmFOuz2B=!iMbjB-ie6F23S%B#&v#BuT$Jw)~(7~V}=CV3ga*gT}OdM&A4Cb3M
z!=fum74KNyV7;2@wka9P!wHj2L%t@w_%Jikwe2P(ypF~F)zs=5Q~5v718ce7DJ}WX
zaiUK|s2UQ&`hss;4Rjr{<+aM(y5$K+5PC=QfHC75MsMxJrp^eLjWSxbY$Ij
z$IC~*Gp9Z3e@Gdt3G$%4qs-}dAA7%gA!6D;`_w5CwqD{wigj{
zwQ?v&d&l&-u6c$Zb_?cVfhX@{3C)ZmzBFi(d)~a0`vRzyae|U=Wl-R<+^Uwj)Y}`l
zk@#*mj2y!tUsyFCg?ONaX`Mg2#ms1pLe+o@uX3eCwoFL=a5;96UQeAR2PbzR=s`xH
zM~1yC=Az`Q$k?76SiUyprjKfoh5+BrlOG%~Y7)2?rq~oMY^H5L#;9TsgmOf_)@QEL
z`c(l`Sb2_a!A;aZrn}1JbWFoo9dI_4Q;tzM8pcAr26FNOW2A}sP+|*wY@f`mgQ;tD
zpVtk(MXlpAv$
z%J&)|NS7MxE3t|{(G6cz)<#K%%zIqem$RL=F(0TQ=NI+j!f(db&MK8a=S<_dOm@Y#
zH0&d!RXvRmEo3)v=_yLAL`cHC=-zNOAxKE^%FB+~`&oFSZ?MP+qU`Za5I9>&=8f>O
zQgo)n64=C2s$x4Ym|@1V57SIDHeN?fiYS^YF7I!
zkQstVKMbsyv4#XAHU9MT^U{^rmy45ThtOfTXZrP$s>}380V=%*ciWIn^ew>q0plhF
zy-x1;Y@Fokxh0gWyc78J8baD3?dJMwuJYYq(4_XH-&h(Fg-X?(bw}fzGA}dY4(ATr
z0g7K^tpSceW!cWiAAhbA#Y~_HpaGu3(Rw-&b>p(I=T}GwZ&xOTUzr&-ZiBj(i@Yuk
zd#(3r7(D`KQt8byg_yAhGTdHEAZk7jaBrtRaD?f0fhCtusO!tS#<8-?$aurC0XPN#
zjWLeX6$2mgm1tOA2VkcA44Q~cb}tiTyL~u*Olx2(r01T^X~+?8ltAa|^oabrPcI}f
zULhav1G}O*=n@zovAEPlEy!Z@GkJcq2+wwhxh?!h#hWS#!;xm`%UlVHrC0LdeMrq`
z2*>EWDFoL$H(Sckd64L+CpZQ_eSJN#_slWAvQ%$f1X#+645A`*T$=gpV8NkP4pzew
z+Dkc=O#1QE@sbMpD^>S2C0Hhvl^x(k8kayLo*!9&cKkRJG5a_BkHiz0hSb;U?VxB%
z8JIRtoPxtOhX6VtAYVU=Au%pUg}SVDSFj9&ZkvVpEb!y)?UBTrrekY4_mP{abh-vX
zB_0{A*~EMC4+q)J69agu=SgofC;Nov(=;lj28%i5A90GXFJUVJo57-`Y?KaTj7qHON=0-Bz}t*bf6
z5py8|&PLoyFOf#flsq#ZG1a9mk5AK0LZe)WOdc*JOLMHv&()~9Fjfg21aQ@nt;7~X
zKU1iHB9Y!e<2udj_R1MFdQvLApTRTtt~Rj%>$BD)xd)xstmW`yid6`hs=x&v
ze}@75m>-&tC}_TS69eDAZRNR_BOSLTMr~zj3hlFvkFoH)Z{}ZL4Sl}8%LFP<;vy``
zJVvAaoCw@)XhxQhy}Xag^p{(IWGs<6wKm)asg&W!_3S-RrMFXw#zSk?2@9Ha0t6{%
z{#v-|3ADMLv`dwJ2gLdd2=AjWUtgNq
z^x6sP=;U^k_&wp96}%ZCo}tbk6QgWMeW90EV#D7o>iVumXVw>}^CWDVCzA)SzgQC;
zoN})oD#c^xvNv0vc&Gu=rno)!9|4c8vljWa=YakZi}XJV0YeK_pM+A7fMv{Sq^v1j
z_d%$(ZX}dy+TCjerH-FJ|f^h=EJnPDK>Qs84-qpI+>5q_SDq&)?;p^?SCmR&B
zwh}d}4@F6?^=aWoe|8HIm51550$DKX4GGm@F2uhe{7#61SV1)=e7)Kr*wvPXw_$)}
zOWnUFUlp&bsp%wjt_=Cu`KlH4PEvt1r;w{!Zd9$D|c6r@?
z8rW5_i^z1axo_AmlSoalLL73+eU~RiH*D9M20MF|@0n%E%6*GIU;_Sl1XbmU$g$7q7?26TRlr1E~awictcjA
zDHkWu2$p*br4i>6GU;Jr!z#_5Takt}aHhL?$RW-G{gQZ=&T|^uZP>G1r9p=v9p^y>P{b`uL8ZOpS3;RG_
zQ%PmuxtAbky7Vp*1J=oM*S5(ZKeILI0_8V1FynI=07~C*U5iNfq21gfP&7X~(0&A8
zw$U<}w0$=Ggrv_4#`a9n^W?C2NS}LmywIc9^=9E9v((q;{GVS#!m9o@2eP@MenS_c
zU#%Kdmf7`vhcc+2a$KeIOmDNv+F9B#&uZ(va*Z_U>xg2-gpa&3c`o(*SndhCc+>R(JY~4LWxrW!-`yf2_5t4wU_l
zuWhAzOJ;t+&AVzzY!0yf%}U|X`(R+P;rhSrMz3jgnG77bzdF3@q3@GhrUQ>-m2()C
zI=u9~2>#tRK;}@&5S^z1;}ShP7%RW^xW0>IjqPI_eKiy%I+kO56%9p#OMGb!Q8~h2
zixUx_3)-Wu%n40aI7uBKCjqoWXSZFB9oH45V)`ebQ)m23o}U`Tn`RCHvB1Z>A~Y!l
z33FVH&+yUG5V9KKUtR9T
zTVZ6fBxiYS-H7@&q3A;HSk*h)RMgnP$85YncuRjj%984eCOMFTg>(==Q;hFP?t4=60Qk
zrm)EKFKN#Zkd=vW#WS0QtLg?)WNr^5fzJ<3@J4EQl~R8n7t5w#*m*^g)oQP70!b)$
z)l5bs*_7eN;G+#v$_YG4M$KrXgbvGn^}F|2$A(eUC)Zzjh9xMx_k^YcXRzeP`tQNv
z)!=>I=iZk-uI>1ai&!{0M^?^#CnG1de6P(mio36fHtwYH1Dpn!MRr|wnY^vk5noXe
z=DSqUXGL^SJlH4F#*sz4Zhd?Km)O%S{(QiEj5#B{v{zwUw5fSW%H@3?-b*>%dcFDq
zqfFgIHs?x0-Xh#pdF}Vkzh-_yDkR0yxdSI#7fWgwKcP0wcPUQm=teIYQ%S&sQj1AL
zbFB!qf4s+}Lsl)me=MQ3z7=FE9x^8wVdp~lv_SL|q`R%n+G5itINCb-(F2xHOEhj2
zN5Vpsj)6J7Ms+D~{Y7qlJ8E4esE=pEE30g4&vsW*DrAZldS$Vz??y(1J
z)oDeBfWfK5Sy$uKot9W>%!oMKc2lJLi(ivP$0QCR!>agRtSQ*+0KN~vUMFB9!N$u@vc7?~)@Hl@71)F0Y&k;!ZkdFsjMU1m+;)vX^#TL7WA>
z_5jtSlyPK>uYdHU=gZ-b!xOij`*Uzh-ob49&M){|OyGMhQMljT>M`WBUGQ4zY8sxb
zejVk4M0hRnK>eZx0lW=BjXP%3X1`7gk!3scWtk$NWL89DfHwSsyoCX)zg
z9y;45AoY=;e9^y!<3x9AP|cJtQA?&yM9ThnI=rZqm_5d-#T%2&{t@R>4j8Tg#t-#Q
zlr7V^Xb)Y=69v9NI7P{|Q92B;8MIMLh;e3Dx!UNTJ-?;lVq>3ec1LYP5jweAsnq+D`25To+%uR4{
z=z0trtz0&(a$!)6=k`X!b(!T=4>ghmlgIFHPZfkLe0H@P;&1fY&Zrg`oAQ|MEQa=v
zkHsM!Vz0u@@Kz$c_|NIRp`VMml|T)qd}Qi6FE-tm
zJU5FMLTYoMb+OvETf><2NRu&2mVB6oXuT)mI|F3Xtda-=aUhB4@d3vTO}7xRF&>ek
z4Zk>y+>s8@aS&r&>&SDuuiqbz_I|eR?t@N!Tx+cc0keVxv)HF@UISbV$K1QZClr*M
z5+@(@{Nb}V@BKqr*2*xoK|8=hktT#1HLWmS&0o1gYeqS4??TwlW&n5_Bl||M$n$gw
z@raMBBy~x5$Bl;IWDWAGERJ^6ym>f*t~|0W5L^WYxmDD0`m=r_Q9)mO@q5EcdjURA
zd2YXc)#QgN$R25eeeO|XSf}u%9_esIv=V|c!_Xv64wXZveSt`aow|~r%9!cylq+L;
zUes$A_5I+rD`h9eP|jzRmdVyHG9rOE7zxm(V_~&yeokUR$3HGG0zI==liuWj{`1uP@DS+H~7;C(6+?K5_Ukm&tHW>i`>e+fUTu?
z6|#t@0Ol?o;vDPiY?-xYrb9CnVrr8Yq%BfgU!ze)h$tA*)>c}-jRc;=hw9L9whZ6e
zy`;n(`oA$=oiQB8B
z13wi|M|V0*yXvOxMt3qCY%Hb#Bw9FZ#uc;*Y5s6Ee?GcsJc0Xw#2Sh5?0f+N6Xrjm
zruefuyrzDC;w&>q$Z1f2DufAP`9sJG!p+2>9krvx>FHI(hjKav^7G}+_Qqwv9i#p>
z)^cTCDuXap>>e@gnrp}^@Dqv(0#o&1Sx5)(p+o_~i=z&z572YBCtPREf3tr-DnwnU
zqaH+HNkp3IALPyoi9^L12FXig2{C4R`;7R9TRH)~Js|<_78zBccQ%M-_1_a$+2QoM
zZu*m_Q7DCCar0we`HZymT7l(QRw;#-LbQsp0t)JHQ*`j{+|t>f1J1iP+{+JMSNt0B
zt;MNf=1b#1?m_9b4Wq;^*u8ECdO6Nl%A~U18>Xe#ao|ulpZF`6i!i}}KaP6d6G1bZ
zf=j#a#)V&ot$6h3bXejn&d#pNIFwI`%zhli4R@qj!x_;`xk?MVTz0BU+ql48@6l}R
z$Sz~Us|?Dp00dQ2mKWE>FE!GL#4lu1EEMR|_k`a-mIYOcXU1==^%=Rkhe^I~)v(TK
z#4A^jxNHhWMmh0|!yY6DS*)fqL8_Q>*odNno(Eq0kxNL)7kR|~Gm5lg
z;gCgt0@n1MFzBx`8`9V91+x0e@zri;M>JE+9{NJiJa7(&ifH;oWsL6>+D8B>jHb!$
z;1QvOqck81)}Fo{jPaO{hZc+*?uO5k8t$hrzq>|128w-SJH01)mD}MDi_Zx6uY5}E
zBCP`OwQFd>=V^1{l5uVUhB%y}@h7@EZFiUc>qKOrn3Au#3D*;8dbr;&qq$
zG~ky>6_|;_)_^+!i7N%%(lh#d`SSR8Cfjff(&=JL8NVOPYiZ^ng&JwGcYHkIAcu@7
zcdaf9n%b8vH+kC{^|V9D$2qVxDl=Zh8XW7&0g;BNhi$7;nWTUb!Lw`0Cx2Nr0vHJ3
z>rF*#005Wp?--btmCySpA=1-fl0*06g}5Dm(4bSt$a6e*VOg!$ztVdw_d?{`!MSrVfl8Vt79prf)qsv`5eXI|4B+7s94-MW&(REYYD`{mBNa`K8
zqIqi)2|5IckbIVeCg@6|gg)=z-#%-XUF2hxkg(f?v9a>a2-Nn6vQirfy|`Ar6(b~%
z0gPCu%hIVN!g@YZiVQY>#FLg0X)nehemD{|qr3oiwT-E$y1FfFS%C`xjy5Gaqu-YEm~KA_xP)h-HOVY{twQN&z-yCXLJwj(VX`a{KKgDbY9&rC5B
zO^!qP@72b|K$EYmiPkbEiz|^IO^l~<#HE*HDtQDdQk1!=BuMjsJlnu=ekXmxV>9vlgo5riCEPd8-JNl`baupwTGq~$-?JjG)_t8XBDR_~XutRQmH~X`6*zytayDsyJ!jZxP!jI;F;Peb!N8!|%52veG0P
zJE>9HDIcRxqtePUiUoKA;?`dEy(~NBJDygAt)f*mKXKcJ>s()TlguSVrI3u;V=;Y0
zOj{{3L*BG0gC&U!x;=Wq#J7d%r!T_OD8Ii63%`v7yUQdjHI$vNs5L70fqi&6ztz-P
zEG+^?k+|A6IY}X%ija(uQ#R8WKxL|)Yc!q3w*jMYEyN^tF(0XDD(=
zPFnm&5sUnP3&uW>$GrI+3uxxg3ae>$bp1exs#+-4M^Ne7&o-Mh2kJK6M%<-vtRjT?
z7z$7(_$Uf{$Zu9h32cE8)wKZM3kz9UCAz5
zfKA~$DkcXo3MRnW9E_{L9S9drdMaG?8+R8olIdd^X+60TF{+`hbbCTeq3EhjP{#Fu
z+p4TLO(QfW35lUR)#^m~PZ#O}5Aq}&js09fQ$5VTx)05Q^JdC))`CCE`8;HKK&&An
zdYMUqI+m%ma@p*-!GPQzGZXx~Nn!RV;vFr^nHZ)jpbh{ouvlgzpE>rCw?7?v80Fz#
zU`7mvKXP7?WE-$2PS=rpnH(M<8QTZDhgO%4@KgNMH5bB3c|sYsapkcndx?Gh)OCJV
zK*Q@gpOe~dYNzSo?WMv)A2J_ttsQ|ol1edoja!aOGLLp*vZ5z`)=Y01t&Q)O!9#nwqr^?EBim7uzR1FIw=X@4Qn}Df^2#KFgtOeUXq|5Ba*ft6}#aDRQnMebaZJJ^kT)V*R{i;2_fvQy?<_2V3Tx4-tD?9Qb9*B`b{$Y
zKN^L62PLtE+k8H(M8mSW%TT%AmzMt1=Vdm77()!@c%o+(Sii$*v>z@}fF@FYr(K{F
zH?5l3v82?O6vJx?2-nF!;Dqz+{6WlytT9Wojg_PbXu3h@53>dfDP
z1i^i8ZR_qxS=K3CL3|C~mh27alRN#A=;(xQe!(N;JXxGkM5WeA)jv=$U5{?So|eX9
zeoVWP23~O!H+<=bSYcZdjKlEcB>iu1oJS?}qHF#Y&F7`zyHiwiov%>sfl8eH+$$Wi
zXvfMuz?)}t(0})(M)j^WGHH|ZESxrJD7jnFsd_CyG!btooN0UlT&k^!&ADq6%*d+a
z3rYcQR{3Bz;31?~W~2p3!DIVy>^#74A6DsgQG%B@F94EL%n+P
z-ClO&{QJwsYcuFo>6|YD0|f#&u&P|}hM9KB>N>kBT7?g*cIf8)8@f78K@y6lq*k8d
z6Nq~3X17j_@zFo9u#0tHJ=7!wv6-io;yX1K;qfYH=Ygi;C7mTfsYeDx(FBv*Lp192
z43lMxM?+af;L*j`pWo4!Fe|paRHyRu!l|POYY_P