@alephium/web3 0.5.0-rc.8 → 0.5.0-rc.9

package/dist/src/utils/sign.js

@@ -43,8 +43,20 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.verifySignature = exports.sign = void 0;
 const elliptic_1 = require("elliptic");
 const __1 = require("..");
-const secp = __importStar(require("tiny-secp256k1"));
+const necc = __importStar(require("@noble/secp256k1"));
+const crypto_1 = require("crypto");
 const ec = new elliptic_1.ec('secp256k1');
+necc.utils.sha256Sync = (...messages) => {
+    const sha256 = (0, crypto_1.createHash)('sha256');
+    for (const message of messages)
+        sha256.update(message);
+    return sha256.digest();
+};
+necc.utils.hmacSha256Sync = (key, ...messages) => {
+    const hash = (0, crypto_1.createHmac)('sha256', Buffer.from(key));
+    messages.forEach((m) => hash.update(m));
+    return Uint8Array.from(hash.digest());
+};
 // hash has to be 32 bytes
 function sign(hash, privateKey, _keyType) {
     const keyType = _keyType ?? 'default';
@@ -54,7 +66,7 @@ function sign(hash, privateKey, _keyType) {
         return (0, __1.encodeSignature)(signature);
     }
     else {
-        const signature = secp.signSchnorr((0, __1.hexToBinUnsafe)(hash), (0, __1.hexToBinUnsafe)(privateKey));
+        const signature = necc.schnorr.signSync((0, __1.hexToBinUnsafe)(hash), (0, __1.hexToBinUnsafe)(privateKey));
         return (0, __1.binToHex)(signature);
     }
 }
@@ -67,7 +79,7 @@ function verifySignature(hash, publicKey, signature, _keyType) {
             return key.verify(hash, (0, __1.signatureDecode)(ec, signature));
         }
         else {
-            return secp.verifySchnorr((0, __1.hexToBinUnsafe)(hash), (0, __1.hexToBinUnsafe)(publicKey), (0, __1.hexToBinUnsafe)(signature));
+            return necc.schnorr.verifySync((0, __1.hexToBinUnsafe)(signature), (0, __1.hexToBinUnsafe)(hash), (0, __1.hexToBinUnsafe)(publicKey));
         }
     }
     catch (error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alephium/web3",
-  "version": "0.5.0-rc.8",
+  "version": "0.5.0-rc.9",
   "description": "A JS/TS library to interact with the Alephium platform",
   "license": "GPL",
   "main": "dist/src/index.js",
@@ -40,6 +40,7 @@
   },
   "type": "commonjs",
   "dependencies": {
+    "@noble/secp256k1": "1.7.1",
     "base-x": "4.0.0",
     "blakejs": "1.2.1",
     "buffer": "^6.0.3",

package/src/utils/sign.ts

@@ -19,10 +19,23 @@ along with the library. If not, see <http://www.gnu.org/licenses/>.
 import { ec as EC } from 'elliptic'
 import { binToHex, encodeSignature, hexToBinUnsafe, signatureDecode } from '..'
 import { KeyType } from '../signer'
-import * as secp from 'tiny-secp256k1'
+import * as necc from '@noble/secp256k1'
+import { createHash, createHmac } from 'crypto'
 
 const ec = new EC('secp256k1')
 
+necc.utils.sha256Sync = (...messages: Uint8Array[]): Uint8Array => {
+  const sha256 = createHash('sha256')
+  for (const message of messages) sha256.update(message)
+  return sha256.digest()
+}
+
+necc.utils.hmacSha256Sync = (key: Uint8Array, ...messages: Uint8Array[]): Uint8Array => {
+  const hash = createHmac('sha256', Buffer.from(key))
+  messages.forEach((m) => hash.update(m))
+  return Uint8Array.from(hash.digest())
+}
+
 // hash has to be 32 bytes
 export function sign(hash: string, privateKey: string, _keyType?: KeyType): string {
   const keyType = _keyType ?? 'default'
@@ -32,7 +45,7 @@ export function sign(hash: string, privateKey: string, _keyType?: KeyType): stri
     const signature = key.sign(hash)
     return encodeSignature(signature)
   } else {
-    const signature = secp.signSchnorr(hexToBinUnsafe(hash), hexToBinUnsafe(privateKey))
+    const signature = necc.schnorr.signSync(hexToBinUnsafe(hash), hexToBinUnsafe(privateKey))
     return binToHex(signature)
   }
 }
@@ -45,7 +58,7 @@ export function verifySignature(hash: string, publicKey: string, signature: stri
       const key = ec.keyFromPublic(publicKey, 'hex')
       return key.verify(hash, signatureDecode(ec, signature))
     } else {
-      return secp.verifySchnorr(hexToBinUnsafe(hash), hexToBinUnsafe(publicKey), hexToBinUnsafe(signature))
+      return necc.schnorr.verifySync(hexToBinUnsafe(signature), hexToBinUnsafe(hash), hexToBinUnsafe(publicKey))
     }
   } catch (error) {
     return false