da74b98565
The addition of the pre-computed values for the ScalarBaseMult optimizations added a benign race condition since a pointer to each pre-computed Jacobian point was being used in the call to addJacobian instead of a local stack copy. This resulted in the code which normalizes the field values to check for further optimization conditions such as equal Z values to race against the IsZero checks when multiple goroutines were performing EC operations since they were all operating on the same point in memory. In practice this was benign since the value was being replaced with the same thing and thus it was the same before and after the race, but it's never a good idea to have races. |
||
|---|---|---|
| .gitignore | ||
| .travis.yml | ||
| bench_test.go | ||
| btcec.go | ||
| btcec_test.go | ||
| cov_report.sh | ||
| doc.go | ||
| example_test.go | ||
| field.go | ||
| field_test.go | ||
| gensecp256k1.go | ||
| internal_test.go | ||
| LICENSE | ||
| privkey.go | ||
| privkey_test.go | ||
| pubkey.go | ||
| pubkey_test.go | ||
| README.md | ||
| secp256k1.go | ||
| signature.go | ||
| signature_test.go | ||
btcec
[
]
(https://travis-ci.org/conformal/btcec) [![Coverage Status]
(https://coveralls.io/repos/conformal/btcec/badge.png?branch=master)]
(https://coveralls.io/r/conformal/btcec?branch=master)
Package btcec implements elliptic curve cryptography needed for working with Bitcoin (secp256k1 only for now). It is designed so that it may be used with the standard crypto/ecdsa packages provided with go. A comprehensive suite of test is provided to ensure proper functionality. Package btcec was originally based on work from ThePiachu which is licensed under the same terms as Go, but it has signficantly diverged since then. The Conformal original is licensed under the liberal ISC license.
This package is one of the core packages from btcd, an alternative full-node implementation of bitcoin which is under active development by Conformal. Although it was primarily written for btcd, this package has intentionally been designed so it can be used as a standalone package for any projects needing to use secp256k1 elliptic curve cryptography.
Documentation
[
]
(http://godoc.org/github.com/conformal/btcec)
Full go doc style documentation for the project can be viewed online without
installing this package by using the GoDoc site
here.
You can also view the documentation locally once the package is installed with
the godoc tool by running godoc -http=":6060" and pointing your browser to
http://localhost:6060/pkg/github.com/conformal/btcec
Installation
$ go get github.com/conformal/btcec
Examples
-
[Sign Message] (http://godoc.org/github.com/conformal/btcec#example-package--SignMessage)
Demonstrates signing a message with a secp256k1 private key that is first parsed form raw bytes and serializing the generated signature. -
[Verify Signature] (http://godoc.org/github.com/conformal/btcec#example-package--VerifySignature)
Demonstrates verifying a secp256k1 signature against a public key that is first parsed from raw bytes. The signature is also parsed from raw bytes.
GPG Verification Key
All official release tags are signed by Conformal so users can ensure the code has not been tampered with and is coming from Conformal. To verify the signature perform the following:
-
Download the public key from the Conformal website at https://opensource.conformal.com/GIT-GPG-KEY-conformal.txt
-
Import the public key into your GPG keyring:
gpg --import GIT-GPG-KEY-conformal.txt -
Verify the release tag with the following command where
TAG_NAMEis a placeholder for the specific tag:git tag -v TAG_NAME
License
Package btcec is licensed under the copyfree ISC License except for btcec.go and btcec_test.go which is under the same license as Go.