block_io 1.0.1 → 1.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 0a5c7f9ebfcf7f608010b2f742ebe7e2c44035ab
-  data.tar.gz: 29253bde1cdcf14f17c7000165ea00571936fef7
+  metadata.gz: 4d6707d92cd82ae2d2ac1fa8fac10003e2428c38
+  data.tar.gz: f039eddd8e676ecd72483c0b6009eca69adf1d3a
 SHA512:
-  metadata.gz: d999194b92fe5b45ba67ebb21a422f4e1796ffaadfe5a6bb57c0735486e9150339cc0c8638f1577e68fe1392047ba3e8773abea859d7ab26fc12574ca5dc655e
-  data.tar.gz: 0332287b974c9bab30ed52f59031d0508b1e410be694c1bcb9b5363e459b1efbf74ebcd59443146f9f35bf8a7b38816926f68753532e26801340177afe9d3565
+  metadata.gz: 1c86cf460f1e41c8f54dbfa4112229c35236286eb68110357e8e755c4e2b88792349ae2efc924c59fd98328ac28f5493303b3250676d8c49f89adcfee6a4ae0d
+  data.tar.gz: 7ecb21200297d0719e76238ce6e45294689f4576769786917999cc51531a1be536f780c4bd1db9510f5e1bcfe86076bed7c38372d00a808a6f2908a44562c26c

data/.gitignore

@@ -0,0 +1,2 @@
+Gemfile.lock
+pkg

data/README.md

@@ -14,14 +14,11 @@ And then execute:
 
 Or install it yourself as:
 
-    $ gem install block_io
+    $ gem install block_io -v=1.0.2
 
 ## Changelog
 
-*09/27/14*: Now supporting client-side signatures. API v2 recommended.
-   
-*07/01/14*: Forcing TLSv1 usage since Block.io does not support SSLv3 due to its vulnerable nature. Fixed:
-	    HTTPClient.new.ssl_config.ssl_version = :TLSv1
+*10/18/14*: Now using deterministic signatures (RFC6979), and BIP62 to hinder transaction malleability.  
 
 
 ## Usage

data/lib/block_io.rb

@@ -160,14 +160,20 @@ module BlockIo
     def sign(data)
       # signed the given hexadecimal string
 
-      nonce = 1 + SecureRandom.random_number(@group.order - 1) # nonce, can be made deterministic TODO
+      nonce = deterministicGenerateK([data].pack("H*"), @private_key) # RFC6979
       
-      signature = ECDSA.sign(@group, @private_key, [data].pack("H*"), nonce)
+      signature = ECDSA.sign(@group, @private_key, data.to_i(16), nonce)
 
-      # DER encode this, and return it in hex form
+      # BIP0062 -- use lower S values only
+      r, s = signature.components
 
-      return ECDSA::Format::SignatureDerString.encode(signature).unpack("H*")[0]
+      over_two = @group.order >> 1 # half of what it was                     
+      s = @group.order - s if (s > over_two)
 
+      signature = ECDSA::Signature.new(r, s)
+
+      # DER encode this, and return it in hex form
+      return ECDSA::Format::SignatureDerString.encode(signature).unpack("H*")[0]
     end
     
     def self.from_passphrase(passphrase)
@@ -182,6 +188,60 @@ module BlockIo
       return Key.new(hashed_key)
     end
     
+    def isPositive(i)
+      sig = "!+-"[i <=> 0]
+      
+      return sig.eql?("+")
+    end
+    
+    def deterministicGenerateK(data, privkey, group = ECDSA::Group::Secp256k1)
+      # returns a deterministic K  -- RFC6979
+
+      hash = data.bytes.to_a
+
+      x = [privkey.to_s(16)].pack("H*").bytes.to_a
+      
+      k = []
+      32.times { k.insert(0, 0) }
+      
+      v = []
+      32.times { v.insert(0, 1) }
+      
+      # step D
+      k = OpenSSL::HMAC.digest(OpenSSL::Digest.new('sha256'), k.pack("C*"), [].concat(v).concat([0]).concat(x).concat(hash).pack("C*")).bytes.to_a
+      
+      # step E
+      v = OpenSSL::HMAC.digest(OpenSSL::Digest.new('sha256'), k.pack("C*"), v.pack("C*")).bytes.to_a
+      
+      #  puts "E: " + v.pack("C*").unpack("H*")[0]
+      
+      # step F
+      k = OpenSSL::HMAC.digest(OpenSSL::Digest.new('sha256'), k.pack("C*"), [].concat(v).concat([1]).concat(x).concat(hash).pack("C*")).bytes.to_a
+      
+      # step G
+      v = OpenSSL::HMAC.digest(OpenSSL::Digest.new('sha256'), k.pack("C*"), v.pack("C*")).bytes.to_a
+      
+      # step H2b (Step H1/H2a ignored)
+      v = OpenSSL::HMAC.digest(OpenSSL::Digest.new('sha256'), k.pack("C*"), v.pack("C*")).bytes.to_a
+      
+      h2b = v.pack("C*").unpack("H*")[0]
+      tNum = h2b.to_i(16)
+      
+      # step H3
+      while (!isPositive(tNum) or tNum >= group.order) do
+        # k = crypto.HmacSHA256(Buffer.concat([v, new Buffer([0])]), k)
+        k = OpenSSL::HMAC.digest(OpenSSL::Digest.new('sha256'), k.pack("C*"), [].concat(v).concat([0]).pack("C*")).bytes.to_a
+        
+        # v = crypto.HmacSHA256(v, k)
+        v = OpenSSL::HMAC.digest(OpenSSL::Digest.new('sha256'), k.pack("C*"), v.pack("C*")).bytes.to_a
+        
+        # T = BigInteger.fromBuffer(v)
+        tNum = v.pack("C*").unpack("H*")[0].to_i(16)
+      end
+      
+      return tNum
+    end
+
   end
   
   module Helper

data/lib/block_io/version.rb

@@ -1,3 +1,3 @@
 module BlockIo
-  VERSION = "1.0.1"
+  VERSION = "1.0.3"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: block_io
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 1.0.3
 platform: ruby
 authors:
 - Atif Nazir
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-10-05 00:00:00.000000000 Z
+date: 2014-10-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -127,6 +127,7 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".gitignore"
 - Gemfile
 - LICENSE
 - README.md