LBRYCommunity/bitcoinjs-lib
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

stealth: add stealth child key recover example

Browse source
This commit is contained in:
Daniel Cousens 2016-11-25 13:42:17 +11:00 • committed by Daniel Cousens
parent 7227017b40
commit 11850cc1a5
1 changed files with 25 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
test/integration/stealth.js
View file

@ -34,6 +34,14 @@ function stealthReceive (d, eG) {
return v
}
function stealthRecoverLeaked (d, e, Q) {
var eQ = Q.multiply(e) // shared secret
var c = bigi.fromBuffer(bitcoin.crypto.sha256(eQ.getEncoded()))
var v = new bitcoin.ECPair(d.subtract(c).mod(n))
return v
}
describe('bitcoinjs-lib (crypto)', function () {
it('can generate a single-key stealth address', function () {
// XXX: should be randomly generated, see next test for example
@ -70,6 +78,23 @@ describe('bitcoinjs-lib (crypto)', function () {
assert.equal(forSender.getAddress(), forRecipient.getAddress())
})
it('can recover parent recipient.d, if a derived private key is leaked [and nonce was revealed]', function () {
var recipient = bitcoin.ECPair.makeRandom() // private to recipient
var nonce = bitcoin.ECPair.makeRandom() // private to sender
// ... recipient reveals public key (recipient.Q) to sender
var forSender = stealthSend(nonce.d, recipient.Q)
assert.throws(function () { forSender.toWIF() }, /Error: Missing private key/)
// ... sender reveals nonce public key (nonce.Q) to recipient
var forRecipient = stealthReceive(recipient.d, nonce.Q)
assert.doesNotThrow(function () { forRecipient.toWIF() })
// ... recipient accidentally leaks forRecipient.d on the blockchain
var leaked = stealthRecoverLeaked(forRecipient.d, nonce.d, recipient.Q)
assert.equal(leaked.toWIF(), recipient.toWIF())
})
// TODO
it.skip('can generate a dual-key stealth address', function () {})
})