block_io 1.0.6 → 3.0.0

data/lib/block_io/key.rb

@@ -0,0 +1,38 @@
+module BlockIo
+
+  class Key
+
+    def self.generate
+      # returns a new key
+      Bitcoin::Key.generate(Bitcoin::Key::TYPES[:compressed]) # compressed
+    end
+
+    def self.from_private_key_hex(priv_key_hex)
+      # returns Bitcoin::Key (compressed)
+      # quirky behavior from bitcoinrb 0.7.0: use IntegerOctetString.encode on private key (integer) first
+      Bitcoin::Key.new(:priv_key => ECDSA::Format::IntegerOctetString.encode(priv_key_hex.to_i(16), 32).bth, :key_type => Bitcoin::Key::TYPES[:compressed])
+    end
+    
+    def self.from_passphrase(passphrase)
+      # ATTENTION: use BlockIo::Key.new to generate new private keys. Using passphrases is not recommended due to lack of / low entropy.
+      # create a private/public key pair from a given passphrase
+      # use a long, random passphrase. your security depends on the passphrase's entropy.
+      
+      raise Exception.new("Must provide passphrase at least 8 characters long.") if passphrase.nil? or passphrase.length < 8
+      
+      hashed_key = Helper.sha256([passphrase].pack("H*")) # must pass bytes to sha256
+      
+      # modding is for backward compatibility with legacy bitcoinjs
+      BlockIo::Key.from_private_key_hex((hashed_key.to_i(16) % ECDSA::Group::Secp256k1.order).to_s(16))
+    end
+
+    def self.from_wif(wif)
+      # returns a new key extracted from the Wallet Import Format provided
+
+      Bitcoin::Key.from_wif(wif)
+
+    end
+
+  end
+  
+end

data/lib/block_io/version.rb

@@ -1,3 +1,3 @@
 module BlockIo
-  VERSION = "1.0.6"
+  VERSION = "3.0.0"
 end

data/spec/client_misc_spec.rb

@@ -0,0 +1,76 @@
+require 'securerandom'
+
+describe "Client" do
+
+  before(:each) do
+    @api_key = "0000-0000-0000-0000"
+    @req_params = {:to_address => "QTLcyTFrH7T6kqUsi1VV2mJVXmX3AmwUNH", :amounts => "0.248"}
+    @headers = {
+      'Accept' => 'application/json',
+      'Connection' => 'Keep-Alive',
+      'Content-Type' => 'application/json; charset=UTF-8',
+      'Host' => 'block.io',
+      'User-Agent' => "gem:block_io:#{BlockIo::VERSION}"
+    }
+    
+    @prepare_transaction_response = File.new("spec/test-cases/json/prepare_transaction_response_with_blockio_fee_and_expected_unsigned_txid.json").read
+    @stub1 = stub_request(:post, "https://block.io/api/v2/prepare_transaction").
+               with(
+                 body: @req_params.merge({:api_key => @api_key}).to_json,
+                 headers: @headers).
+               to_return(status: 200, body: @prepare_transaction_response, headers: {})
+
+    @create_and_sign_transaction_response = File.new("spec/test-cases/json/create_and_sign_transaction_response_with_blockio_fee_and_expected_unsigned_txid.json").read
+    @summarize_prepared_transaction_response = File.new("spec/test-cases/json/summarize_prepared_transaction_response_with_blockio_fee_and_expected_unsigned_txid.json").read
+    
+    @insecure_pin_valid = "d1650160bd8d2bb32bebd139d0063eb6063ffa2f9e4501ad" # still insecure, don't use this!
+    @insecure_pin_invalid = "blockiotestpininsecure"
+  end
+
+  context "summarize_prepare_transaction" do
+
+    before(:each) do
+
+      @blockio = BlockIo::Client.new(:api_key => @api_key, :pin => @insecure_pin_valid)
+      
+    end
+    
+    it "success" do
+
+      @blockio.prepare_transaction(@req_params)
+
+      expect(@stub1).to have_been_requested.times(1)
+
+      expect(@blockio.summarize_prepared_transaction(Oj.safe_load(@prepare_transaction_response))).to eq(Oj.safe_load(@summarize_prepared_transaction_response))
+      
+      expect(@blockio.create_and_sign_transaction(Oj.safe_load(@prepare_transaction_response))).to eq(Oj.safe_load(@create_and_sign_transaction_response))
+
+    end
+
+  end
+  
+  context "create_and_sign_transaction_with_invalid_expected_unsigned_txid" do
+
+    before(:each) do
+
+      @blockio = BlockIo::Client.new(:api_key => @api_key, :pin => @insecure_pin_valid)
+      
+    end
+    
+    it "fails" do
+
+      @blockio.prepare_transaction(@req_params)
+
+      expect(@stub1).to have_been_requested.times(1)
+
+      @bad_response = Oj.safe_load(@prepare_transaction_response)
+      @bad_response['data']['expected_unsigned_txid'] = SecureRandom.hex(32)
+      
+      expect{@blockio.create_and_sign_transaction(@bad_response)}.to raise_error(Exception, "Expected unsigned transaction ID mismatch. Please report this error to support@block.io.")
+
+    end
+
+  end
+  
+end
+  

data/spec/client_spec.rb

@@ -0,0 +1,68 @@
+describe "Client.prepare_transaction" do
+
+  before(:each) do
+    @api_key = "0000-0000-0000-0000"
+    @req_params = {:to_address => "QTLcyTFrH7T6kqUsi1VV2mJVXmX3AmwUNH", :amounts => "0.248"}
+    @headers = {
+      'Accept' => 'application/json',
+      'Connection' => 'Keep-Alive',
+      'Content-Type' => 'application/json; charset=UTF-8',
+      'Host' => 'block.io',
+      'User-Agent' => "gem:block_io:#{BlockIo::VERSION}"
+    }
+    
+    @prepare_transaction_response = File.new("spec/test-cases/json/prepare_transaction_response.json").read
+    @stub1 = stub_request(:post, "https://block.io/api/v2/prepare_transaction").
+               with(
+                 body: @req_params.merge({:api_key => @api_key}).to_json,
+                 headers: @headers).
+               to_return(status: 200, body: @prepare_transaction_response, headers: {})
+
+    @create_and_sign_transaction_response = File.new("spec/test-cases/json/create_and_sign_transaction_response.json").read
+    
+    @insecure_pin_valid = "d1650160bd8d2bb32bebd139d0063eb6063ffa2f9e4501ad" # still insecure, don't use this!
+    @insecure_pin_invalid = "blockiotestpininsecure"
+  end
+
+  context "pin_valid" do
+
+    before(:each) do
+
+      @blockio = BlockIo::Client.new(:api_key => @api_key, :pin => @insecure_pin_valid)
+      
+    end
+    
+    it "success" do
+
+      @blockio.prepare_transaction(@req_params)
+
+      expect(@stub1).to have_been_requested.times(1)
+
+      expect(@blockio.create_and_sign_transaction(Oj.safe_load(@prepare_transaction_response))).to eq(Oj.safe_load(@create_and_sign_transaction_response))
+
+    end
+
+  end
+  
+  context "pin_invalid" do
+
+    before(:each) do
+
+      @blockio = BlockIo::Client.new(:api_key => @api_key, :pin => @insecure_pin_invalid)
+      
+    end
+    
+    it "fails" do
+
+      @blockio.prepare_transaction(@req_params)
+
+      expect(@stub1).to have_been_requested.times(1)
+
+      expect { @blockio.create_and_sign_transaction(Oj.safe_load(@prepare_transaction_response)) }.to raise_error(Exception, "Invalid Secret PIN provided.")
+      
+    end
+
+  end
+
+end
+  

data/spec/dtrust_spec.rb

@@ -0,0 +1,167 @@
+describe "Client.prepare_dtrust_transaction" do
+
+  before(:each) do
+    @api_key = "0000-0000-0000-0000"
+    @private_keys = ["b515fd806a662e061b488e78e5d0c2ff46df80083a79818e166300666385c0a2",
+                     "1584b821c62ecdc554e185222591720d6fe651ed1b820d83f92cdc45c5e21f",
+                     "2f9090b8aa4ddb32c3b0b8371db1b50e19084c720c30db1d6bb9fcd3a0f78e61",
+                     "6c1cefdfd9187b36b36c3698c1362642083dcc1941dc76d751481d3aa29ca65"]
+    @to_address = "QcnYiN3t3foHxHv7CnqXrmRoiMkADhapZw"
+    @amount = "0.00020000"
+    @headers = {
+      'Accept' => 'application/json',
+      'Connection' => 'Keep-Alive',
+      'Content-Type' => 'application/json; charset=UTF-8',
+      'Host' => 'block.io',
+      'User-Agent' => "gem:block_io:#{BlockIo::VERSION}"
+    }
+
+  end
+
+  context "p2sh" do
+
+    before(:each) do
+
+      @blockio = BlockIo::Client.new(:api_key => @api_key)
+      @from_address = "QZVSzPeaEJxB9bYuDEL7iWrHSdGbAP3pXV"
+      @prepare_dtrust_transaction_response_p2sh = File.new("spec/test-cases/json/prepare_dtrust_transaction_response_p2sh.json").read
+      @req_params = {:from_address => @from_address, :amount => @amount, :to_address => @to_address}
+      @stub1 = stub_request(:post, "https://block.io/api/v2/prepare_dtrust_transaction").
+                 with(
+                   body: @req_params.merge({:api_key => @api_key}).to_json,
+                   headers: @headers).
+                 to_return(status: 200, body: @prepare_dtrust_transaction_response_p2sh, headers: {})
+      
+      @create_and_sign_transaction_response_dtrust_p2sh_3_of_5_keys = File.new("spec/test-cases/json/create_and_sign_transaction_response_dtrust_p2sh_3_of_5_keys.json").read
+      @create_and_sign_transaction_response_dtrust_p2sh_4_of_5_keys = File.new("spec/test-cases/json/create_and_sign_transaction_response_dtrust_p2sh_4_of_5_keys.json").read
+      
+    end
+
+    context "3_of_5_keys" do
+      it "success" do
+        
+        @blockio.prepare_dtrust_transaction(@req_params)
+        
+        expect(@stub1).to have_been_requested.times(1)
+        
+        expect(
+          @blockio.create_and_sign_transaction(Oj.safe_load(@prepare_dtrust_transaction_response_p2sh), @private_keys.first(3))
+        ).to eq(Oj.safe_load(@create_and_sign_transaction_response_dtrust_p2sh_3_of_5_keys))
+
+      end
+    end
+
+    context "4_of_5_keys" do
+      it "success" do
+
+        @blockio.prepare_dtrust_transaction(@req_params)
+        
+        expect(@stub1).to have_been_requested.times(1)
+        
+        expect(@blockio.create_and_sign_transaction(Oj.safe_load(@prepare_dtrust_transaction_response_p2sh), @private_keys)).to eq(Oj.safe_load(@create_and_sign_transaction_response_dtrust_p2sh_4_of_5_keys))
+
+      end
+    end
+    
+  end
+  
+  context "p2wsh_over_p2sh" do
+
+    before(:each) do
+
+      @blockio = BlockIo::Client.new(:api_key => @api_key)
+      @from_address = "Qg1QzgjUDkwaHeT7Yznuyu2V1keJieDVAF"
+      @prepare_dtrust_transaction_response_p2wsh_over_p2sh = File.new("spec/test-cases/json/prepare_dtrust_transaction_response_p2wsh_over_p2sh.json").read
+      @req_params = {:from_address => @from_address, :amount => @amount, :to_address => @to_address}
+      @stub1 = stub_request(:post, "https://block.io/api/v2/prepare_dtrust_transaction").
+                 with(
+                   body: @req_params.merge({:api_key => @api_key}).to_json,
+                   headers: @headers).
+                 to_return(status: 200, body: @prepare_dtrust_transaction_response_p2wsh_over_p2sh, headers: {})
+      
+      @create_and_sign_transaction_response_dtrust_p2wsh_over_p2sh_3_of_5_keys = File.new("spec/test-cases/json/create_and_sign_transaction_response_dtrust_p2wsh_over_p2sh_3_of_5_keys.json").read
+      @create_and_sign_transaction_response_dtrust_p2wsh_over_p2sh_4_of_5_keys = File.new("spec/test-cases/json/create_and_sign_transaction_response_dtrust_p2wsh_over_p2sh_4_of_5_keys.json").read
+      
+    end
+
+    context "3_of_5_keys" do
+      it "success" do
+        
+        @blockio.prepare_dtrust_transaction(@req_params)
+        
+        expect(@stub1).to have_been_requested.times(1)
+        
+        expect(
+          @blockio.create_and_sign_transaction(Oj.safe_load(@prepare_dtrust_transaction_response_p2wsh_over_p2sh), @private_keys.first(3))
+        ).to eq(Oj.safe_load(@create_and_sign_transaction_response_dtrust_p2wsh_over_p2sh_3_of_5_keys))
+
+      end
+    end
+
+    context "4_of_5_keys" do
+      it "success" do
+
+        @blockio.prepare_dtrust_transaction(@req_params)
+        
+        expect(@stub1).to have_been_requested.times(1)
+        
+        expect(
+          @blockio.create_and_sign_transaction(Oj.safe_load(@prepare_dtrust_transaction_response_p2wsh_over_p2sh), @private_keys)
+        ).to eq(Oj.safe_load(@create_and_sign_transaction_response_dtrust_p2wsh_over_p2sh_4_of_5_keys))
+
+      end
+    end
+    
+  end
+  
+  context "witness_v0" do
+
+    before(:each) do
+
+      @blockio = BlockIo::Client.new(:api_key => @api_key)
+      @from_address = "tltc1qtvscupcwnlsykujp98y0jhf8s4x48mzrr3v8v822ytg6vmprvzaqj8jd0h"
+      @prepare_dtrust_transaction_response_witness_v0 = File.new("spec/test-cases/json/prepare_dtrust_transaction_response_witness_v0.json").read
+      @req_params = {:from_address => @from_address, :amount => @amount, :to_address => @to_address}
+      @stub1 = stub_request(:post, "https://block.io/api/v2/prepare_dtrust_transaction").
+                 with(
+                   body: @req_params.merge({:api_key => @api_key}).to_json,
+                   headers: @headers).
+                 to_return(status: 200, body: @prepare_dtrust_transaction_response_witness_v0, headers: {})
+      
+      @create_and_sign_transaction_response_dtrust_witness_v0_3_of_5_keys = File.new("spec/test-cases/json/create_and_sign_transaction_response_dtrust_witness_v0_3_of_5_keys.json").read
+      @create_and_sign_transaction_response_dtrust_witness_v0_4_of_5_keys = File.new("spec/test-cases/json/create_and_sign_transaction_response_dtrust_witness_v0_4_of_5_keys.json").read
+      
+    end
+
+    context "3_of_5_keys" do
+      it "success" do
+        
+        @blockio.prepare_dtrust_transaction(@req_params)
+        
+        expect(@stub1).to have_been_requested.times(1)
+        
+        expect(
+          @blockio.create_and_sign_transaction(Oj.safe_load(@prepare_dtrust_transaction_response_witness_v0), @private_keys.first(3))
+        ).to eq(Oj.safe_load(@create_and_sign_transaction_response_dtrust_witness_v0_3_of_5_keys))
+
+      end
+    end
+
+    context "4_of_5_keys" do
+      it "success" do
+
+        @blockio.prepare_dtrust_transaction(@req_params)
+        
+        expect(@stub1).to have_been_requested.times(1)
+        
+        expect(
+          @blockio.create_and_sign_transaction(Oj.safe_load(@prepare_dtrust_transaction_response_witness_v0), @private_keys)
+        ).to eq(Oj.safe_load(@create_and_sign_transaction_response_dtrust_witness_v0_4_of_5_keys))
+
+      end
+    end
+    
+  end
+  
+end
+  

data/spec/helper_spec.rb

@@ -0,0 +1,44 @@
+
+describe "Helper.sha256" do
+  it "deadbeef" do
+    expect(BlockIo::Helper.sha256("deadbeef")).to eq("2baf1f40105d9501fe319a8ec463fdf4325a2a5df445adf3f572f626253678c9")
+  end  
+end
+
+describe "Helper.pinToAesKey" do
+  it "deadbeef" do
+    expect(BlockIo::Helper.pinToAesKey("deadbeef", false)).to eq([["b87ddac3d84865782a0edbc21b5786d56795dd52bab0fe49270b3726372a83fe"].pack("H*")].pack("m0"))
+  end
+end
+
+describe "Helper.encrypt" do
+  before(:each) do
+    @encryption_key = BlockIo::Helper.pinToAesKey("deadbeef")
+    @encrypted_data = BlockIo::Helper.encrypt("beadbeef", @encryption_key)
+  end
+
+  it "beadbeef" do
+    expect(@encrypted_data).to eq("3wIJtPoC8KO6S7x6LtrN0g==")
+  end
+
+end
+
+describe "Helper.decrypt" do
+  before(:each) do
+    @encryption_key = BlockIo::Helper.pinToAesKey("deadbeef")
+    @bad_encryption_key = BlockIo::Helper.pinToAesKey(SecureRandom.hex(8))
+    @encrypted_data = BlockIo::Helper.encrypt("beadbeef", @encryption_key)
+  end
+
+  it "encryption_key" do
+    @decrypted_data = BlockIo::Helper.decrypt(@encrypted_data, @encryption_key)
+    expect(@decrypted_data).to eq("beadbeef")
+  end
+
+  it "bad_encryption_key" do
+    expect{
+      BlockIo::Helper.decrypt(@encrypted_data, @bad_encryption_key)
+    }.to raise_error(Exception, "Invalid Secret PIN provided.")
+  end
+  
+end

data/spec/key_spec.rb

@@ -0,0 +1,92 @@
+describe "Key.from_private_key_hex" do
+  # generates faulty signature with Native Ruby bitcoinrb 0.7.0 unless the private key is padded to be 64 char hex (below is 63 chars)
+  
+  context "6c1cefdfd9187b36b36c3698c1362642083dcc1941dc76d751481d3aa29ca65" do
+
+    before(:each) do
+      @key = BlockIo::Key.from_private_key_hex("6c1cefdfd9187b36b36c3698c1362642083dcc1941dc76d751481d3aa29ca65")
+      @data_to_sign = "c290b6e7e43ae83124499a06d1c0f8d385cc86f28aad77260599654061847547"
+    end
+
+    it "succeeds" do
+      @signature = @key.sign([@data_to_sign].pack("H*"))
+      expect(@signature.unpack("H*")[0]).to eq("304402204ad00b8fd0918e5a0e9ec353a32139265ab3e633748dc85494561f1cee748551022073b229aad08f7bf62020300a34df587336a30784b29439abb405435413c961f4")
+      expect(@key.verify(@signature, [@data_to_sign].pack("H*"))).to eq(true)
+    end
+    
+  end
+  
+end
+
+describe "Key.from_wif" do
+
+  context "L1cq4uDmSKMiViT4DuR8jqJv8AiiSZ9VeJr82yau5nfVQYaAgDdr" do
+    
+    before(:each) do
+      Bitcoin.chain_params = "BTC"
+      @key_low_r = Bitcoin::Key.from_wif("L1cq4uDmSKMiViT4DuR8jqJv8AiiSZ9VeJr82yau5nfVQYaAgDdr")
+    end
+    
+    it "match(public_key)" do
+      expect(@key_low_r.public_key_hex).to eq("024988bae7e0ade83cb1b6eb0fd81e6161f6657ad5dd91d216fbeab22aea3b61a0")
+    end
+    
+    it "match(private_key)" do
+      expect(@key_low_r.private_key_hex).to eq("833e2256c42b4a41ee0a6ee284c39cf8e1978bc8e878eb7ae87803e22d48caa9")
+    end
+    
+    it "sign_with_low_r" do
+      expect(@key_low_r.sign(["e76f0f78b7e7474f04cc14ad1343e4cc28f450399a79457d1240511a054afd63"].pack("H*")).unpack("H*")[0]).to eq("3044022061753424b6936ca4cfcc81b883dab55f16d84d3eaf9d5da77c1e25f54fda963802200d3db78e8f5aac62909c2a89ab1b2b413c00c0860926e824f37a19fa140c79f4")
+    end
+  end
+  
+end
+
+describe "Key.from_passphrase" do
+
+  context "deadbeef" do
+
+    before(:each) do
+      @key_low_r = BlockIo::Key.from_passphrase("deadbeef")
+      @data = "e76f0f78b7e7474f04cc14ad1343e4cc28f450399a79457d1240511a054afd63"
+    end
+
+    it "match(public_key)" do
+      expect(@key_low_r.public_key_hex).to eq("02953b9dfcec241eec348c12b1db813d3cd5ec9d93923c04d2fa3832208b8c0f84")
+    end
+
+    it "match(private_key)" do
+      expect(@key_low_r.private_key_hex).to eq("5f78c33274e43fa9de5659265c1d917e25c03722dcb0b8d27db8d5feaa813953")
+    end
+    
+    it "sign_with_low_r" do
+      expect(@key_low_r.sign([@data].pack("H*")).unpack("H*")[0]).to eq("304402204ac97a4cdad5f842e745e27c3ffbe08b3704900baafab602277a5a196c3a4a3202202bacdf06afaf58032383447a9f3e9a42bfaeabf6dbcf9ab275d8f24171d272cf")
+    end
+
+  end
+
+end
+
+describe "Key.generate" do
+
+  context "compressed" do
+
+    before(:each) do
+      Bitcoin.chain_params = "BTC"
+      @key = Bitcoin::Key.generate
+    end
+
+    it "compressed?" do
+      expect(@key.compressed?).to eq(true)
+    end
+    
+  end
+
+  context "uncompressed" do
+    Bitcoin.chain_params = "BTC"
+  end
+
+  it "raises_exception" do
+    expect {Bitcoin::Key.generate(0x00)}.to raise_error(RuntimeError, "key_type must always be Bitcoin::KEY::TYPES[:compressed]")
+  end
+end