Merge pull request #11 from bip32JP/deterministick
Added vectors for rfc6979 and organized them
This commit is contained in:
OutCast3k
commit
ca9b1d4710
1 changed files with 121 additions and 41 deletions
162
js/coin.js
162
js/coin.js
|
|
@ -270,6 +270,120 @@
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
coinjs.testdeterministicK = function() {
|
||||||
|
// https://github.com/bitpay/bitcore/blob/9a5193d8e94b0bd5b8e7f00038e7c0b935405a03/test/crypto/ecdsa.js
|
||||||
|
// Line 21 and 22 specify digest hash and privkey for the first 2 test vectors.
|
||||||
|
// Line 96-117 tells expected result.
|
||||||
|
|
||||||
|
var tx = coinjs.transaction();
|
||||||
|
|
||||||
|
var test_vectors = [
|
||||||
|
{
|
||||||
|
'message': 'test data',
|
||||||
|
'privkey': 'fee0a1f7afebf9d2a5a80c0c98a31c709681cce195cbcd06342b517970c0be1e',
|
||||||
|
'k_bad00': 'fcce1de7a9bcd6b2d3defade6afa1913fb9229e3b7ddf4749b55c4848b2a196e',
|
||||||
|
'k_bad01': '727fbcb59eb48b1d7d46f95a04991fc512eb9dbf9105628e3aec87428df28fd8',
|
||||||
|
'k_bad15': '398f0e2c9f79728f7b3d84d447ac3a86d8b2083c8f234a0ffa9c4043d68bd258'
|
||||||
|
},
|
||||||
|
{
|
||||||
|
'message': 'Everything should be made as simple as possible, but not simpler.',
|
||||||
|
'privkey': '0000000000000000000000000000000000000000000000000000000000000001',
|
||||||
|
'k_bad00': 'ec633bd56a5774a0940cb97e27a9e4e51dc94af737596a0c5cbb3d30332d92a5',
|
||||||
|
'k_bad01': 'df55b6d1b5c48184622b0ead41a0e02bfa5ac3ebdb4c34701454e80aabf36f56',
|
||||||
|
'k_bad15': 'def007a9a3c2f7c769c75da9d47f2af84075af95cadd1407393dc1e26086ef87'
|
||||||
|
},
|
||||||
|
{
|
||||||
|
'message': 'Satoshi Nakamoto',
|
||||||
|
'privkey': '0000000000000000000000000000000000000000000000000000000000000002',
|
||||||
|
'k_bad00': 'd3edc1b8224e953f6ee05c8bbf7ae228f461030e47caf97cde91430b4607405e',
|
||||||
|
'k_bad01': 'f86d8e43c09a6a83953f0ab6d0af59fb7446b4660119902e9967067596b58374',
|
||||||
|
'k_bad15': '241d1f57d6cfd2f73b1ada7907b199951f95ef5ad362b13aed84009656e0254a'
|
||||||
|
},
|
||||||
|
{
|
||||||
|
'message': 'Diffie Hellman',
|
||||||
|
'privkey': '7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f7f',
|
||||||
|
'k_bad00': 'c378a41cb17dce12340788dd3503635f54f894c306d52f6e9bc4b8f18d27afcc',
|
||||||
|
'k_bad01': '90756c96fef41152ac9abe08819c4e95f16da2af472880192c69a2b7bac29114',
|
||||||
|
'k_bad15': '7b3f53300ab0ccd0f698f4d67db87c44cf3e9e513d9df61137256652b2e94e7c'
|
||||||
|
},
|
||||||
|
{
|
||||||
|
'message': 'Japan',
|
||||||
|
'privkey': '8080808080808080808080808080808080808080808080808080808080808080',
|
||||||
|
'k_bad00': 'f471e61b51d2d8db78f3dae19d973616f57cdc54caaa81c269394b8c34edcf59',
|
||||||
|
'k_bad01': '6819d85b9730acc876fdf59e162bf309e9f63dd35550edf20869d23c2f3e6d17',
|
||||||
|
'k_bad15': 'd8e8bae3ee330a198d1f5e00ad7c5f9ed7c24c357c0a004322abca5d9cd17847'
|
||||||
|
},
|
||||||
|
{
|
||||||
|
'message': 'Bitcoin',
|
||||||
|
'privkey': 'fffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364140',
|
||||||
|
'k_bad00': '36c848ffb2cbecc5422c33a994955b807665317c1ce2a0f59c689321aaa631cc',
|
||||||
|
'k_bad01': '4ed8de1ec952a4f5b3bd79d1ff96446bcd45cabb00fc6ca127183e14671bcb85',
|
||||||
|
'k_bad15': '56b6f47babc1662c011d3b1f93aa51a6e9b5f6512e9f2e16821a238d450a31f8'
|
||||||
|
},
|
||||||
|
{
|
||||||
|
'message': 'i2FLPP8WEus5WPjpoHwheXOMSobUJVaZM1JPMQZq',
|
||||||
|
'privkey': 'fffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364140',
|
||||||
|
'k_bad00': '6e9b434fcc6bbb081a0463c094356b47d62d7efae7da9c518ed7bac23f4e2ed6',
|
||||||
|
'k_bad01': 'ae5323ae338d6117ce8520a43b92eacd2ea1312ae514d53d8e34010154c593bb',
|
||||||
|
'k_bad15': '3eaa1b61d1b8ab2f1ca71219c399f2b8b3defa624719f1e96fe3957628c2c4ea'
|
||||||
|
},
|
||||||
|
{
|
||||||
|
'message': 'lEE55EJNP7aLrMtjkeJKKux4Yg0E8E1SAJnWTCEh',
|
||||||
|
'privkey': '3881e5286abc580bb6139fe8e83d7c8271c6fe5e5c2d640c1f0ed0e1ee37edc9',
|
||||||
|
'k_bad00': '5b606665a16da29cc1c5411d744ab554640479dd8abd3c04ff23bd6b302e7034',
|
||||||
|
'k_bad01': 'f8b25263152c042807c992eacd2ac2cc5790d1e9957c394f77ea368e3d9923bd',
|
||||||
|
'k_bad15': 'ea624578f7e7964ac1d84adb5b5087dd14f0ee78b49072aa19051cc15dab6f33'
|
||||||
|
},
|
||||||
|
{
|
||||||
|
'message': '2SaVPvhxkAPrayIVKcsoQO5DKA8Uv5X/esZFlf+y',
|
||||||
|
'privkey': '7259dff07922de7f9c4c5720d68c9745e230b32508c497dd24cb95ef18856631',
|
||||||
|
'k_bad00': '3ab6c19ab5d3aea6aa0c6da37516b1d6e28e3985019b3adb388714e8f536686b',
|
||||||
|
'k_bad01': '19af21b05004b0ce9cdca82458a371a9d2cf0dc35a813108c557b551c08eb52e',
|
||||||
|
'k_bad15': '117a32665fca1b7137a91c4739ac5719fec0cf2e146f40f8e7c21b45a07ebc6a'
|
||||||
|
},
|
||||||
|
{
|
||||||
|
'message': '00A0OwO2THi7j5Z/jp0FmN6nn7N/DQd6eBnCS+/b',
|
||||||
|
'privkey': '0d6ea45d62b334777d6995052965c795a4f8506044b4fd7dc59c15656a28f7aa',
|
||||||
|
'k_bad00': '79487de0c8799158294d94c0eb92ee4b567e4dc7ca18addc86e49d31ce1d2db6',
|
||||||
|
'k_bad01': '9561d2401164a48a8f600882753b3105ebdd35e2358f4f808c4f549c91490009',
|
||||||
|
'k_bad15': 'b0d273634129ff4dbdf0df317d4062a1dbc58818f88878ffdb4ec511c77976c0'
|
||||||
|
}
|
||||||
|
];
|
||||||
|
|
||||||
|
var result_txt = '\n----------------------\nResults\n----------------------\n\n';
|
||||||
|
|
||||||
|
for (i = 0; i < test_vectors.length; i++) {
|
||||||
|
var hash = Crypto.SHA256(test_vectors[i]['message'].split('').map(function (c) { return c.charCodeAt (0); }), { asBytes: true });
|
||||||
|
var wif = coinjs.privkey2wif(test_vectors[i]['privkey']);
|
||||||
|
|
||||||
|
var KBigInt = tx.deterministicK(wif, hash);
|
||||||
|
var KBigInt0 = tx.deterministicK(wif, hash, 0);
|
||||||
|
var KBigInt1 = tx.deterministicK(wif, hash, 1);
|
||||||
|
var KBigInt15 = tx.deterministicK(wif, hash, 15);
|
||||||
|
|
||||||
|
var K = Crypto.util.bytesToHex(KBigInt.toByteArrayUnsigned());
|
||||||
|
var K0 = Crypto.util.bytesToHex(KBigInt0.toByteArrayUnsigned());
|
||||||
|
var K1 = Crypto.util.bytesToHex(KBigInt1.toByteArrayUnsigned());
|
||||||
|
var K15 = Crypto.util.bytesToHex(KBigInt15.toByteArrayUnsigned());
|
||||||
|
|
||||||
|
if (K != test_vectors[i]['k_bad00']) {
|
||||||
|
result_txt += 'Failed Test #' + (i + 1) + '\n K = ' + K + '\nExpected = ' + test_vectors[i]['k_bad00'] + '\n\n';
|
||||||
|
} else if (K0 != test_vectors[i]['k_bad00']) {
|
||||||
|
result_txt += 'Failed Test #' + (i + 1) + '\n K0 = ' + K0 + '\nExpected = ' + test_vectors[i]['k_bad00'] + '\n\n';
|
||||||
|
} else if (K1 != test_vectors[i]['k_bad01']) {
|
||||||
|
result_txt += 'Failed Test #' + (i + 1) + '\n K1 = ' + K1 + '\nExpected = ' + test_vectors[i]['k_bad01'] + '\n\n';
|
||||||
|
} else if (K15 != test_vectors[i]['k_bad15']) {
|
||||||
|
result_txt += 'Failed Test #' + (i + 1) + '\n K15 = ' + K15 + '\nExpected = ' + test_vectors[i]['k_bad15'] + '\n\n';
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
if (result_txt.length < 60) {
|
||||||
|
result_txt = 'All Tests OK!';
|
||||||
|
};
|
||||||
|
|
||||||
|
return result_txt;
|
||||||
|
};
|
||||||
|
|
||||||
|
|
||||||
/* start of script functions */
|
/* start of script functions */
|
||||||
|
|
||||||
|
|
@ -655,6 +769,12 @@
|
||||||
badrs++
|
badrs++
|
||||||
} while (r.compareTo(BigInteger.ZERO) <= 0 || s.compareTo(BigInteger.ZERO) <= 0);
|
} while (r.compareTo(BigInteger.ZERO) <= 0 || s.compareTo(BigInteger.ZERO) <= 0);
|
||||||
|
|
||||||
|
// Force lower s values per BIP62
|
||||||
|
var halfn = n.shiftRight(1);
|
||||||
|
if (s.compareTo(halfn) > 0) {
|
||||||
|
s = n.subtract(s);
|
||||||
|
};
|
||||||
|
|
||||||
var sig = serializeSig(r, s);
|
var sig = serializeSig(r, s);
|
||||||
sig.push(parseInt(1, 10));
|
sig.push(parseInt(1, 10));
|
||||||
|
|
||||||
|
|
@ -719,6 +839,7 @@
|
||||||
while (KBigInt.compareTo(N) >= 0 || KBigInt.compareTo(BigInteger.ZERO) <= 0 || i < badrs) {
|
while (KBigInt.compareTo(N) >= 0 || KBigInt.compareTo(BigInteger.ZERO) <= 0 || i < badrs) {
|
||||||
k = Crypto.HMAC(Crypto.SHA256, v.concat([0]), k, { asBytes: true });
|
k = Crypto.HMAC(Crypto.SHA256, v.concat([0]), k, { asBytes: true });
|
||||||
v = Crypto.HMAC(Crypto.SHA256, v, k, { asBytes: true });
|
v = Crypto.HMAC(Crypto.SHA256, v, k, { asBytes: true });
|
||||||
|
v = Crypto.HMAC(Crypto.SHA256, v, k, { asBytes: true });
|
||||||
T = v;
|
T = v;
|
||||||
KBigInt = BigInteger.fromByteArrayUnsigned(T);
|
KBigInt = BigInteger.fromByteArrayUnsigned(T);
|
||||||
i++
|
i++
|
||||||
|
|
@ -727,47 +848,6 @@
|
||||||
return KBigInt;
|
return KBigInt;
|
||||||
};
|
};
|
||||||
|
|
||||||
r.testdeterministicK = function() {
|
|
||||||
// https://github.com/bitpay/bitcore/blob/9a5193d8e94b0bd5b8e7f00038e7c0b935405a03/test/crypto/ecdsa.js
|
|
||||||
// Line 21 and 22 specify digest hash and privkey.
|
|
||||||
// Line 96-117 tells expected result.
|
|
||||||
var hash = Crypto.SHA256('test data'.split('').map(function (c) { return c.charCodeAt (0); }), { asBytes: true });
|
|
||||||
var wif = coinjs.privkey2wif("fee0a1f7afebf9d2a5a80c0c98a31c709681cce195cbcd06342b517970c0be1e");
|
|
||||||
|
|
||||||
var KBigInt = this.deterministicK(wif, hash);
|
|
||||||
var KBigInt0 = this.deterministicK(wif, hash, 0);
|
|
||||||
var KBigInt1 = this.deterministicK(wif, hash, 1);
|
|
||||||
|
|
||||||
var K = Crypto.util.bytesToHex(KBigInt.toByteArrayUnsigned());
|
|
||||||
var K0 = Crypto.util.bytesToHex(KBigInt0.toByteArrayUnsigned());
|
|
||||||
var K1 = Crypto.util.bytesToHex(KBigInt1.toByteArrayUnsigned());
|
|
||||||
|
|
||||||
if (K != "fcce1de7a9bcd6b2d3defade6afa1913fb9229e3b7ddf4749b55c4848b2a196e") {
|
|
||||||
return false;
|
|
||||||
} else if (K0 != "fcce1de7a9bcd6b2d3defade6afa1913fb9229e3b7ddf4749b55c4848b2a196e") {
|
|
||||||
return false;
|
|
||||||
} else if (K1 != "6f4dcca6fa7a137ae9d110311905013b3c053c732ad18611ec2752bb3dcef9d8") {
|
|
||||||
return false;
|
|
||||||
};
|
|
||||||
|
|
||||||
hash = Crypto.SHA256('Everything should be made as simple as possible, but not simpler.'.split('').map(function (c) { return c.charCodeAt (0); }), { asBytes: true });
|
|
||||||
wif = coinjs.privkey2wif("0000000000000000000000000000000000000000000000000000000000000001");
|
|
||||||
|
|
||||||
KBigInt = this.deterministicK(wif, hash);
|
|
||||||
KBigInt0 = this.deterministicK(wif, hash, 0);
|
|
||||||
|
|
||||||
K = Crypto.util.bytesToHex(KBigInt.toByteArrayUnsigned());
|
|
||||||
K0 = Crypto.util.bytesToHex(KBigInt0.toByteArrayUnsigned());
|
|
||||||
|
|
||||||
if (K != "ec633bd56a5774a0940cb97e27a9e4e51dc94af737596a0c5cbb3d30332d92a5") {
|
|
||||||
return false;
|
|
||||||
} else if (K0 != "ec633bd56a5774a0940cb97e27a9e4e51dc94af737596a0c5cbb3d30332d92a5") {
|
|
||||||
return false;
|
|
||||||
};
|
|
||||||
|
|
||||||
return true;
|
|
||||||
};
|
|
||||||
|
|
||||||
/* sign a "standard" input */
|
/* sign a "standard" input */
|
||||||
r.signinput = function(index, wif){
|
r.signinput = function(index, wif){
|
||||||
var key = coinjs.wif2pubkey(wif);
|
var key = coinjs.wif2pubkey(wif);
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue