diff --git a/dnssec-prover b/dnssec-prover
index c4e06c7d..d25045e0 160000
--- a/dnssec-prover
+++ b/dnssec-prover
@@ -1 +1 @@
-Subproject commit c4e06c7d6099683b080d2f0c3b8b15d2d9e63824
+Subproject commit d25045e0819823d851a73cb2ed09659506e5508f
diff --git a/src/utils/dnssec/dnssec_prover_wasm.d.ts b/src/utils/dnssec/dnssec_prover_wasm.d.ts
index beb07a00..4e424097 100644
--- a/src/utils/dnssec/dnssec_prover_wasm.d.ts
+++ b/src/utils/dnssec/dnssec_prover_wasm.d.ts
@@ -5,9 +5,6 @@
  * `name`.
  *
  * After calling this [`get_next_query`] should be called to fetch the initial query.
- * @param {string} name
- * @param {number} ty
- * @returns {WASMProofBuilder | undefined}
  */
 export function init_proof_builder(name: string, ty: number): WASMProofBuilder | undefined;
 /**
@@ -15,34 +12,26 @@ export function init_proof_builder(name: string, ty: number): WASMProofBuilder |
  *
  * After calling this, [`get_next_query`] should be called until pending queries are exhausted and
  * no more pending queries exist, at which point [`get_unverified_proof`] should be called.
- * @param {WASMProofBuilder} proof_builder
- * @param {Uint8Array} response
  */
 export function process_query_response(proof_builder: WASMProofBuilder, response: Uint8Array): void;
 /**
  * Gets the next query (if any) that should be sent to the resolver for the given proof builder.
  *
  * Once the resolver responds [`process_query_response`] should be called with the response.
- * @param {WASMProofBuilder} proof_builder
- * @returns {Uint8Array | undefined}
  */
 export function get_next_query(proof_builder: WASMProofBuilder): Uint8Array | undefined;
 /**
  * Gets the final, unverified, proof once all queries fetched via [`get_next_query`] have
  * completed and their responses passed to [`process_query_response`].
- * @param {WASMProofBuilder} proof_builder
- * @returns {Uint8Array}
  */
 export function get_unverified_proof(proof_builder: WASMProofBuilder): Uint8Array;
 /**
  * Verifies an RFC 9102-formatted proof and returns verified records matching the given name
  * (resolving any C/DNAMEs as required).
- * @param {Uint8Array} stream
- * @param {string} name_to_resolve
- * @returns {string}
  */
 export function verify_byte_stream(stream: Uint8Array, name_to_resolve: string): string;
 export class WASMProofBuilder {
+  private constructor();
   free(): void;
 }
 
@@ -53,9 +42,9 @@ export interface InitOutput {
   readonly __wbg_wasmproofbuilder_free: (a: number, b: number) => void;
   readonly init_proof_builder: (a: number, b: number, c: number) => number;
   readonly process_query_response: (a: number, b: number, c: number) => void;
-  readonly get_next_query: (a: number) => Array;
-  readonly get_unverified_proof: (a: number) => Array;
-  readonly verify_byte_stream: (a: number, b: number, c: number, d: number) => Array;
+  readonly get_next_query: (a: number) => [number, number];
+  readonly get_unverified_proof: (a: number) => [number, number, number, number];
+  readonly verify_byte_stream: (a: number, b: number, c: number, d: number) => [number, number];
   readonly __wbindgen_export_0: WebAssembly.Table;
   readonly __wbindgen_malloc: (a: number, b: number) => number;
   readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
diff --git a/src/utils/dnssec/dnssec_prover_wasm.js b/src/utils/dnssec/dnssec_prover_wasm.js
index 0a0e655e..893b5eb0 100644
--- a/src/utils/dnssec/dnssec_prover_wasm.js
+++ b/src/utils/dnssec/dnssec_prover_wasm.js
@@ -93,7 +93,6 @@ function _assertClass(instance, klass) {
     if (!(instance instanceof klass)) {
         throw new Error(`expected instance of ${klass.name}`);
     }
-    return instance.ptr;
 }
 
 function passArray8ToWasm0(arg, malloc) {
@@ -247,13 +246,6 @@ async function __wbg_load(module, imports) {
 function __wbg_get_imports() {
     const imports = {};
     imports.wbg = {};
-    imports.wbg.__wbindgen_string_new = function(arg0, arg1) {
-        const ret = getStringFromWasm0(arg0, arg1);
-        return ret;
-    };
-    imports.wbg.__wbindgen_throw = function(arg0, arg1) {
-        throw new Error(getStringFromWasm0(arg0, arg1));
-    };
     imports.wbg.__wbindgen_init_externref_table = function() {
         const table = wasm.__wbindgen_export_0;
         const offset = table.grow(4);
@@ -264,6 +256,13 @@ function __wbg_get_imports() {
         table.set(offset + 3, false);
         ;
     };
+    imports.wbg.__wbindgen_string_new = function(arg0, arg1) {
+        const ret = getStringFromWasm0(arg0, arg1);
+        return ret;
+    };
+    imports.wbg.__wbindgen_throw = function(arg0, arg1) {
+        throw new Error(getStringFromWasm0(arg0, arg1));
+    };
 
     return imports;
 }
diff --git a/src/utils/dnssec/dnssec_prover_wasm_bg.wasm b/src/utils/dnssec/dnssec_prover_wasm_bg.wasm
index 790bae35..15ad7095 100644
Binary files a/src/utils/dnssec/dnssec_prover_wasm_bg.wasm and b/src/utils/dnssec/dnssec_prover_wasm_bg.wasm differ
diff --git a/src/utils/dnssec/dnssec_prover_wasm_bg.wasm.d.ts b/src/utils/dnssec/dnssec_prover_wasm_bg.wasm.d.ts
index 9dd3f0a4..45b6ca7e 100644
--- a/src/utils/dnssec/dnssec_prover_wasm_bg.wasm.d.ts
+++ b/src/utils/dnssec/dnssec_prover_wasm_bg.wasm.d.ts
@@ -1,15 +1,15 @@
 /* tslint:disable */
 /* eslint-disable */
 export const memory: WebAssembly.Memory;
-export function __wbg_wasmproofbuilder_free(a: number, b: number): void;
-export function init_proof_builder(a: number, b: number, c: number): number;
-export function process_query_response(a: number, b: number, c: number): void;
-export function get_next_query(a: number): Array;
-export function get_unverified_proof(a: number): Array;
-export function verify_byte_stream(a: number, b: number, c: number, d: number): Array;
+export const __wbg_wasmproofbuilder_free: (a: number, b: number) => void;
+export const init_proof_builder: (a: number, b: number, c: number) => number;
+export const process_query_response: (a: number, b: number, c: number) => void;
+export const get_next_query: (a: number) => [number, number];
+export const get_unverified_proof: (a: number) => [number, number, number, number];
+export const verify_byte_stream: (a: number, b: number, c: number, d: number) => [number, number];
 export const __wbindgen_export_0: WebAssembly.Table;
-export function __wbindgen_malloc(a: number, b: number): number;
-export function __wbindgen_realloc(a: number, b: number, c: number, d: number): number;
-export function __wbindgen_free(a: number, b: number, c: number): void;
-export function __externref_table_dealloc(a: number): void;
-export function __wbindgen_start(): void;
+export const __wbindgen_malloc: (a: number, b: number) => number;
+export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
+export const __wbindgen_free: (a: number, b: number, c: number) => void;
+export const __externref_table_dealloc: (a: number) => void;
+export const __wbindgen_start: () => void;