bitcoinjs-lib/test/ecdsa.js

var assert = require('assert')
var crypto = require('../src/crypto')
var ecdsa = require('../src/ecdsa')
var message = require('../src/message')
var networks = require('../src/networks')

var sec = require('../src/sec')
var ecparams = sec("secp256k1")

var BigInteger = require('bigi')
var ECKey = require('../src/eckey')
var ECPubKey = require('../src/ecpubkey')

var fixtures = require('./fixtures/ecdsa.js')

describe('ecdsa', function() {
  describe('deterministicGenerateK', function() {
    it('matches the test vectors', function() {
      fixtures.forEach(function(f) {
        var priv = BigInteger.fromHex(f.D)
        var h1 = crypto.sha256(f.message)

        var k = ecdsa.deterministicGenerateK(h1, priv)
        assert.deepEqual(k.toHex(), f.k)
      })
    })
  })

  describe('recoverPubKey', function() {
    it('succesfully recovers a public key', function() {
      var signature = new Buffer('H0PG6+PUo96UPTJ/DVj8aBU5it+Nuli4YdsLuTMvfJxoHH9Jb7jYTQXCCOX2jrTChD5S1ic3vCrUQHdmB5/sEQY=', 'base64')

      var obj = ecdsa.parseSigCompact(signature)
      var hash = message.magicHash('1111', networks.bitcoin)

      var pubKey = new ECPubKey(ecdsa.recoverPubKey(obj.r, obj.s, hash, obj.i))

      assert.equal(pubKey.toHex(), '02e8fcf4d749b35879bc1f3b14b49e67ab7301da3558c5a9b74a54f1e6339c334c')
    })
  })

  describe('sign', function() {
    it('matches the test vectors', function() {
      fixtures.forEach(function(f) {
        var D = BigInteger.fromHex(f.D)
        var priv = new ECKey(D)
        var hash = crypto.sha256(f.message)
        var sig = ecdsa.parseSig(priv.sign(hash))

        assert.equal(sig.r.toHex(), f.signature.slice(0, 64))
        assert.equal(sig.s.toHex(), f.signature.slice(64))
      })
    })

    it('should sign with low S value', function() {
      var priv = ECKey.makeRandom()
      var hash = crypto.sha256('Vires in numeris')
      var signature = priv.sign(hash)
      var psig = ecdsa.parseSig(signature)

      // See BIP62 for more information
      assert(psig.s.compareTo(ecparams.getN().divide(BigInteger.valueOf(2))) <= 0)
    })
  })

  describe('verifyRaw', function() {
    it('matches the test vectors', function() {
      fixtures.forEach(function(f) {
        var D = BigInteger.fromHex(f.D)
        var priv = new ECKey(D)

        var r = BigInteger.fromHex(f.signature.slice(0, 64))
        var s = BigInteger.fromHex(f.signature.slice(64))
        var e = BigInteger.fromBuffer(crypto.sha256(f.message))

        assert(ecdsa.verifyRaw(e, r, s, priv.pub.Q))
      })
    })
  })
})