lnbits-legend/lnbits/extensions/cashu/static/js/dhke.js

async function hashToCurve(secretMessage) {
  console.log(
    '### secretMessage',
    nobleSecp256k1.utils.bytesToHex(secretMessage)
  )
  let point
  while (!point) {
    const hash = await nobleSecp256k1.utils.sha256(secretMessage)
    const hashHex = nobleSecp256k1.utils.bytesToHex(hash)
    const pointX = '02' + hashHex
    console.log('### pointX', pointX)
    try {
      point = nobleSecp256k1.Point.fromHex(pointX)
      console.log('### point', point.toHex())
    } catch (error) {
      secretMessage = await nobleSecp256k1.utils.sha256(secretMessage)
    }
  }
  return point
}

async function step1Alice(secretMessage) {
  const Y = await hashToCurve(secretMessage)
  const r = bytesToNumber(nobleSecp256k1.utils.randomPrivateKey())
  const P = nobleSecp256k1.Point.fromPrivateKey(r)
  const B_ = Y.add(P)
  return {B_: B_.toHex(true), r}
}

function step3Alice(C_, r, A) {
  const rInt = BigInt(r)
  const C = C_.subtract(A.multiply(rInt))
  return C
}