feat: upgrade @noble/curves and @noble/hashes to v2

- @noble/curves ^1.8.1 → ^2.0.1, @noble/hashes ^1.7.1 → ^2.0.1
- Migrate import paths to .js suffixed subpaths (sha2.js, utils.js, secp256k1.js)
- API: ProjectivePoint → Point, CURVE.n → Point.Fn.ORDER,
  randomPrivateKey → randomSecretKey, toRawBytes → toBytes

Author: TheCryptoDonkey

package-lock.json

@@ -36,8 +36,8 @@
     "url": "https://github.com/forgesworn/range-proof.git"
   },
   "dependencies": {
-    "@noble/curves": "^1.8.1",
-    "@noble/hashes": "^1.7.1"
+    "@noble/curves": "^2.0.1",
+    "@noble/hashes": "^2.0.1"
   },
   "devDependencies": {
     "@semantic-release/changelog": "^6.0.3",

package.json

@@ -1,7 +1,7 @@
 // Pedersen Commitments + Range Proofs on secp256k1
 // Proves "value is in [min, max]" without revealing the exact value.
 
-import { hexToBytes, utf8ToBytes } from '@noble/hashes/utils';
+import { hexToBytes, utf8ToBytes } from '@noble/hashes/utils.js';
 import {
   Point,
   type ProjectivePoint,
@@ -18,7 +18,7 @@ import {
 import { ValidationError, CryptoError } from './errors.js';
 
 function pointToBytes(p: ProjectivePoint): Uint8Array {
-  return p.toRawBytes(true);
+  return p.toBytes();
 }
 
 const DOMAIN_BIT_PROOF = 'pedersen-bit-proof-v1';

src/range-proof.ts

@@ -1,12 +1,12 @@
 // Shared secp256k1 utilities for range-proof.ts.
 
-import { secp256k1 } from '@noble/curves/secp256k1';
-import { sha256 } from '@noble/hashes/sha256';
-import { bytesToHex, hexToBytes, utf8ToBytes, concatBytes } from '@noble/hashes/utils';
+import { secp256k1 } from '@noble/curves/secp256k1.js';
+import { sha256 } from '@noble/hashes/sha2.js';
+import { bytesToHex, hexToBytes, utf8ToBytes, concatBytes } from '@noble/hashes/utils.js';
 import { ValidationError, CryptoError } from './errors.js';
 
-export const Point = secp256k1.ProjectivePoint;
-export const N = secp256k1.CURVE.n;
+export const Point = secp256k1.Point;
+export const N = secp256k1.Point.Fn.ORDER;
 export type ProjectivePoint = typeof Point.BASE;
 
 /** Constant-time comparison of two equal-length Uint8Arrays.
@@ -31,7 +31,7 @@ export function mod(a: bigint, m: bigint = N): bigint {
 export function randomScalar(): bigint {
   let s: bigint;
   do {
-    const bytes = secp256k1.utils.randomPrivateKey();
+    const bytes = secp256k1.utils.randomSecretKey();
     s = mod(BigInt('0x' + bytesToHex(bytes)));
   } while (s === 0n);
   return s;