@bitgo-beta/sdk-core 8.2.1-beta.213 → 8.2.1-beta.2131

package/dist/test/unit/bitgo/recovery/initiate.js

@@ -0,0 +1,159 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+require("should");
+const sinon = __importStar(require("sinon"));
+const sjcl = __importStar(require("@bitgo-beta/sjcl"));
+const initiate_1 = require("../../../../src/bitgo/recovery/initiate");
+// A deterministic xprv used across all tests.
+const TEST_XPRV = 'xprv9s21ZrQH143K2fJ91S4BRsupcYrE6mmY96fcX5HkhoTrrwmwjd16Cn87cWinJjByrfpojjx7ezsJLx7TAKLT8m8hM5Kax9YcoxnBeJZ3t2k';
+const TEST_XPUB = 'xpub661MyMwAqRbcF9Nc7TbBo1rZAagiWEVPWKbDKThNG8zqjk76HAKLkaSbTn6dK2dQPfuD7xjicxCZVWvj67fP5nQ9W7QURmoMVAX8m6jZsGp';
+/**
+ * Encrypt plaintext with SJCL (legacy v1 envelope, matching `encryptionVersion: 1`).
+ */
+function sjclEncrypt(password, input) {
+    return sjcl.encrypt(password, input);
+}
+function makeMockBitGo(decryptImpl) {
+    return {
+        decrypt: sinon.stub().callsFake(async (params) => decryptImpl(params)),
+        encrypt: sinon.stub(),
+    };
+}
+describe('validateKey', () => {
+    afterEach(() => {
+        sinon.restore();
+    });
+    it('returns a BIP32 node directly when key starts with xprv (bypasses decrypt)', async () => {
+        const bitgo = makeMockBitGo(() => {
+            throw new Error('should not be called');
+        });
+        const node = await (0, initiate_1.validateKey)(bitgo, {
+            key: TEST_XPRV,
+            source: 'user',
+            passphrase: 'secret',
+            isUnsignedSweep: false,
+            isKrsRecovery: false,
+        });
+        node.toBase58().should.equal(TEST_XPRV);
+        bitgo.decrypt.callCount.should.equal(0);
+    });
+    it('calls decrypt and returns BIP32 node when key is encrypted (not xprv)', async () => {
+        const passphrase = 'hunter2';
+        const encryptedKey = sjclEncrypt(passphrase, TEST_XPRV);
+        const bitgo = makeMockBitGo(({ password, input }) => {
+            if (input === encryptedKey && password === passphrase)
+                return TEST_XPRV;
+            throw new Error('unexpected decrypt call');
+        });
+        const node = await (0, initiate_1.validateKey)(bitgo, {
+            key: encryptedKey,
+            source: 'user',
+            passphrase,
+            isUnsignedSweep: false,
+            isKrsRecovery: false,
+        });
+        node.toBase58().should.equal(TEST_XPRV);
+        bitgo.decrypt.callCount.should.equal(1);
+    });
+    it('rejects with friendly message when decrypt fails (wrong passphrase)', async () => {
+        const bitgo = makeMockBitGo(() => {
+            throw new Error('sjcl: ccm: tag does not match');
+        });
+        await (0, initiate_1.validateKey)(bitgo, {
+            key: 'notAnXprv',
+            source: 'user',
+            passphrase: 'wrong',
+            isUnsignedSweep: false,
+            isKrsRecovery: false,
+        }).should.be.rejectedWith('Failed to decrypt user key with passcode - try again!');
+    });
+    it('skips decrypt for unsigned sweep (isUnsignedSweep = true)', async () => {
+        const bitgo = makeMockBitGo(() => {
+            throw new Error('should not be called');
+        });
+        const node = await (0, initiate_1.validateKey)(bitgo, {
+            key: TEST_XPUB,
+            source: 'user',
+            passphrase: 'secret',
+            isUnsignedSweep: true,
+            isKrsRecovery: false,
+        });
+        node.neutered().toBase58().should.equal(TEST_XPUB);
+        bitgo.decrypt.callCount.should.equal(0);
+    });
+});
+describe('getBip32Keys', () => {
+    afterEach(() => {
+        sinon.restore();
+    });
+    it('returns [userKey, backupKey] when both are provided as xprv', async () => {
+        const bitgo = makeMockBitGo(() => {
+            throw new Error('should not be called');
+        });
+        const keys = await (0, initiate_1.getBip32Keys)(bitgo, { userKey: TEST_XPRV, backupKey: TEST_XPRV, recoveryDestination: 'addr' }, { requireBitGoXpub: false });
+        keys.should.have.length(2);
+        keys[0].toBase58().should.equal(TEST_XPRV);
+        keys[1].toBase58().should.equal(TEST_XPRV);
+    });
+    it('returns three keys when requireBitGoXpub is true and bitgoKey is valid', async () => {
+        const bitgo = makeMockBitGo(() => {
+            throw new Error('should not be called');
+        });
+        const keys = await (0, initiate_1.getBip32Keys)(bitgo, { userKey: TEST_XPRV, backupKey: TEST_XPRV, bitgoKey: TEST_XPUB, recoveryDestination: 'addr' }, { requireBitGoXpub: true });
+        keys.should.have.length(3);
+        keys[2].neutered().toBase58().should.equal(TEST_XPUB);
+    });
+    it('calls decrypt for encrypted user key', async () => {
+        const passphrase = 'pass1';
+        const encryptedUserKey = sjclEncrypt(passphrase, TEST_XPRV);
+        const bitgo = makeMockBitGo(({ password, input }) => {
+            if (input === encryptedUserKey && password === passphrase)
+                return TEST_XPRV;
+            throw new Error('unexpected decrypt call');
+        });
+        const keys = await (0, initiate_1.getBip32Keys)(bitgo, { userKey: encryptedUserKey, backupKey: TEST_XPRV, walletPassphrase: passphrase, recoveryDestination: 'addr' }, { requireBitGoXpub: false });
+        keys.should.have.length(2);
+        keys[0].toBase58().should.equal(TEST_XPRV);
+        bitgo.decrypt.callCount.should.equal(1);
+    });
+    it('rejects when requireBitGoXpub is true but bitgoKey is missing', async () => {
+        const bitgo = makeMockBitGo(() => {
+            throw new Error('should not be called');
+        });
+        await (0, initiate_1.getBip32Keys)(bitgo, { userKey: TEST_XPRV, backupKey: TEST_XPRV, recoveryDestination: 'addr' }, { requireBitGoXpub: true }).should.be.rejectedWith('BitGo xpub required but not provided');
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/unit/bitgo/safe/derivableEd25519Pub.d.ts

@@ -0,0 +1,2 @@
+import 'should';
+//# sourceMappingURL=derivableEd25519Pub.d.ts.map

package/dist/test/unit/bitgo/safe/derivableEd25519Pub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derivableEd25519Pub.d.ts","sourceRoot":"","sources":["../../../../../test/unit/bitgo/safe/derivableEd25519Pub.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,CAAC"}

package/dist/test/unit/bitgo/safe/derivableEd25519Pub.js

@@ -0,0 +1,257 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+require("should");
+const crypto_1 = require("crypto");
+const nacl = __importStar(require("tweetnacl"));
+const src_1 = require("../../../../src");
+// Cross-repo fixture: byte-identical to wallet-platform
+// test/unit/base/safes/fixtures/derivableEd25519Pub.json. Four independent implementations of this
+// format will otherwise drift, and the failure mode is unrecoverable wallets.
+const fixture = __importStar(require("./fixtures/derivableEd25519Pub.json"));
+const PUBLIC_KEY = Buffer.alloc(32);
+const CHAIN_CODE = Buffer.alloc(32, 0xab);
+const ROOT_PUB = (0, src_1.encodeDerivableEd25519Pub)(PUBLIC_KEY, CHAIN_CODE);
+const ROOT_KEYCHAIN = Buffer.concat([PUBLIC_KEY, CHAIN_CODE]).toString('hex');
+const STRKEY_PUBLIC = 'GA5WUJ54Z23KILLCUOUNAKTPBVZWKMQVO4O6EQ5GHLAERIMLLHNCSKYH';
+const STRKEY_SEED = 'SAAACAQDAQCQMBYIBEFAWDANBYHRAEISCMKBKFQXDAMRUGY4DUPB6NKI';
+describe('derivableEd25519Pub', function () {
+    describe('base32 root format', function () {
+        it('encodes 32-byte public key plus 32-byte chain code', function () {
+            src_1.DERIVABLE_ED25519_CHAIN_CODE_BYTES.should.equal(32);
+            src_1.DERIVABLE_ED25519_PUB_LENGTH.should.equal(103);
+            ROOT_PUB.should.match(/^[A-Z2-7]{103}$/);
+            (0, src_1.decodeDerivableEd25519Pub)(ROOT_PUB).pub.equals(PUBLIC_KEY).should.equal(true);
+            (0, src_1.decodeDerivableEd25519Pub)(ROOT_PUB).chainCode.equals(CHAIN_CODE).should.equal(true);
+        });
+        it('matches the constants pinned in the shared fixture', function () {
+            src_1.DERIVABLE_ED25519_PUB_LENGTH.should.equal(fixture.rootPubBase32Length);
+            src_1.DERIVABLE_ED25519_CHAIN_CODE_BYTES.should.equal(fixture.chainCodeBytes);
+        });
+        it('generates raw chain code for root composition', function () {
+            (0, src_1.generateEd25519ChainCode)().length.should.equal(32);
+        });
+    });
+    describe('fixture vectors', function () {
+        for (const vector of fixture.valid) {
+            it(`round-trips ${vector.name}`, function () {
+                const composite = (0, src_1.encodeDerivableEd25519Pub)(Buffer.from(vector.pub, 'hex'), Buffer.from(vector.chainCode, 'hex'));
+                composite.should.equal(vector.composite);
+                const decoded = (0, src_1.decodeDerivableEd25519Pub)(vector.composite);
+                decoded.pub.toString('hex').should.equal(vector.pub);
+                decoded.chainCode.toString('hex').should.equal(vector.chainCode);
+                (0, src_1.isDerivableEd25519Pub)(vector.composite).should.equal(true);
+            });
+        }
+        for (const vector of fixture.invalidComposite) {
+            it(`rejects ${vector.name}`, function () {
+                (0, src_1.isDerivableEd25519Pub)(vector.composite).should.equal(false);
+                (() => (0, src_1.decodeDerivableEd25519Pub)(vector.composite)).should.throw(/Invalid derivable ed25519 pub/);
+            });
+        }
+    });
+    describe('raw public soft derivation', function () {
+        it('derives a deterministic public key and discards the child chain code', async function () {
+            const eddsa = await src_1.Eddsa.initialize(await src_1.Ed25519BIP32.initialize());
+            const derived = eddsa.deriveUnhardened(ROOT_KEYCHAIN, 'm/7');
+            derived.length.should.equal(128);
+            derived.slice(0, 64).should.match(/^[0-9a-f]{64}$/);
+            derived.slice(64).should.match(/^[0-9a-f]{64}$/);
+            (await (0, src_1.softDeriveChildPubEd25519)(ROOT_PUB, 7)).toString('hex').should.equal(derived.slice(0, 64));
+        });
+        // The golden vectors below pin the unhardened derivation output shared cross-repo with
+        // wallet-platform: a divergent implementation derives co-signer keys nobody else can
+        // reproduce, permanently bricking the wallets minted with it.
+        for (const vector of fixture.softDerivation) {
+            it(`derives the pinned golden child: ${vector.name}`, async function () {
+                // The pub/chainCode fields must encode to the composite actually derived from.
+                (0, src_1.encodeDerivableEd25519Pub)(Buffer.from(vector.pub, 'hex'), Buffer.from(vector.chainCode, 'hex')).should.equal(vector.composite);
+                const child = await (0, src_1.softDeriveChildPubEd25519)(vector.composite, vector.index);
+                child.toString('hex').should.equal(vector.childPub);
+            });
+        }
+        it('rejects a hardened or out-of-range index', async function () {
+            await (0, src_1.softDeriveChildPubEd25519)(ROOT_PUB, -1).should.be.rejectedWith(/non-hardened/);
+            await (0, src_1.softDeriveChildPubEd25519)(ROOT_PUB, 0x80000000).should.be.rejectedWith(/non-hardened/);
+            await (0, src_1.softDeriveChildPubEd25519)(ROOT_PUB, 1.5).should.be.rejectedWith(/non-hardened/);
+        });
+        it('rejects a malformed root', async function () {
+            await (0, src_1.softDeriveChildPubEd25519)(fixture.invalidComposite[1].composite, 0).should.be.rejectedWith(/Invalid derivable ed25519 pub/);
+            await (0, src_1.softDeriveChildPubEd25519)(STRKEY_PUBLIC, 0).should.be.rejectedWith(/Invalid derivable ed25519 pub/);
+        });
+    });
+    describe('multi-segment soft derivation', function () {
+        const seed = (0, src_1.decodeEd25519StrKeySecretSeed)(STRKEY_SEED);
+        const rootPub = Buffer.from(nacl.sign.keyPair.fromSeed(seed).publicKey);
+        const rootChainCode = Buffer.alloc(32, 0xab);
+        const composite = (0, src_1.encodeDerivableEd25519Pub)(rootPub, rootChainCode);
+        const chainCodeStr = (0, src_1.encodeEd25519ChainCode)(rootChainCode);
+        it('private derive public half matches public derive at m/0 and m/44/283/2/0', async function () {
+            for (const path of ['m/0', 'm/44/283/2/0']) {
+                const pub = await (0, src_1.softDeriveChildPubEd25519AtPath)(composite, path);
+                const prv = await (0, src_1.softDeriveChildPrvEd25519AtPath)({ seedStrKey: STRKEY_SEED, chainCode: chainCodeStr, path });
+                prv.pub.equals(pub).should.equal(true);
+                // Recompute the public point directly from kL to prove the private scalar maps to pub.
+                (0, src_1.bigIntToBufferLE)(src_1.Eddsa.curve.basePointMult((0, src_1.bigIntFromBufferLE)(prv.kL)), 32)
+                    .equals(prv.pub)
+                    .should.equal(true);
+            }
+        });
+        it('rejects hardened and out-of-range paths', async function () {
+            await (0, src_1.softDeriveChildPubEd25519AtPath)(composite, "m/0'").should.be.rejectedWith(/Invalid soft derivation path/);
+            await (0, src_1.softDeriveChildPrvEd25519AtPath)({
+                seedStrKey: STRKEY_SEED,
+                chainCode: chainCodeStr,
+                path: "m/0'",
+            }).should.be.rejectedWith(/Invalid soft derivation path/);
+            await (0, src_1.softDeriveChildPubEd25519AtPath)(composite, 'm/2147483648').should.be.rejectedWith(/out of range/);
+        });
+    });
+    describe('Stellar user-key codecs', function () {
+        it('keeps Stellar encoding separate from the neutral root format', function () {
+            (0, src_1.isValidEd25519StrKeyPublicKey)(STRKEY_PUBLIC).should.equal(true);
+            (0, src_1.encodeEd25519StrKeyPublicKey)((0, src_1.decodeEd25519StrKeyPublicKey)(STRKEY_PUBLIC)).should.equal(STRKEY_PUBLIC);
+            (0, src_1.decodeEd25519StrKeySecretSeed)(STRKEY_SEED).length.should.equal(32);
+            (0, src_1.isDerivableEd25519Pub)(STRKEY_PUBLIC).should.equal(false);
+            (0, src_1.isChecksumValidStrKeyEd25519Pub)(STRKEY_PUBLIC).should.equal(true);
+        });
+        it('rejects a public key with a corrupted checksum', function () {
+            (0, src_1.isValidEd25519StrKeyPublicKey)('GA5WUJ54Z23KILLCUOUNAKTPBVZWKMQVO4O6EQ5GHLAERIMLLHNCSKYA').should.equal(false);
+        });
+        it('rejects a secret seed where a public key is required', function () {
+            (0, src_1.isValidEd25519StrKeyPublicKey)('SA5WUJ54Z23KILLCUOUNAKTPBVZWKMQVO4O6EQ5GHLAERIMLLHNCSKYH').should.equal(false);
+            (() => (0, src_1.decodeEd25519StrKeyPublicKey)('SA5WUJ54Z23KILLCUOUNAKTPBVZWKMQVO4O6EQ5GHLAERIMLLHNCSKYH')).should.throw(/StrKey public key/);
+        });
+        it('rejects a non-base32 character, the empty string, and lowercase', function () {
+            (0, src_1.isValidEd25519StrKeyPublicKey)('GA5WUJ54Z23KILLCUOUNAKTPBVZWKMQVO4O6EQ5GHLAERIMLLHNCSKY1').should.equal(false);
+            (0, src_1.isValidEd25519StrKeyPublicKey)('').should.equal(false);
+            (0, src_1.isValidEd25519StrKeyPublicKey)(STRKEY_PUBLIC.toLowerCase()).should.equal(false);
+        });
+    });
+    describe('extended-key signing', function () {
+        const seed = (0, src_1.decodeEd25519StrKeySecretSeed)(STRKEY_SEED);
+        const message = Buffer.from('extended-key signature');
+        const rootChainCode = Buffer.alloc(32, 0xab);
+        const chainCodeStr = (0, src_1.encodeEd25519ChainCode)(rootChainCode);
+        it('matches the seed-based signer for a seed-backed key', async function () {
+            const h = (0, crypto_1.createHash)('sha512').update(seed).digest();
+            const kL = (0, src_1.bigIntToBufferLE)((0, src_1.clamp)((0, src_1.bigIntFromBufferLE)(h.subarray(0, 32))), 32);
+            const kR = h.subarray(32);
+            const sig = await (0, src_1.signEd25519Extended)(message, kL, kR);
+            const expected = Buffer.from(nacl.sign.detached(message, nacl.sign.keyPair.fromSeed(seed).secretKey));
+            sig.equals(expected).should.equal(true);
+        });
+        it('signs a soft-derived key with no seed and verifies against its pub', async function () {
+            const prv = await (0, src_1.softDeriveChildPrvEd25519AtPath)({
+                seedStrKey: STRKEY_SEED,
+                chainCode: chainCodeStr,
+                path: 'm/0',
+            });
+            const sig = await (0, src_1.signEd25519Extended)(message, prv.kL, prv.kR);
+            nacl.sign.detached.verify(message, sig, prv.pub).should.equal(true);
+            // The soft-derived scalar has no seed: treating kL as a seed yields a different pub.
+            Buffer.from(nacl.sign.keyPair.fromSeed(prv.kL).publicKey).equals(prv.pub).should.equal(false);
+        });
+        it('rejects kL/kR that are not 32 bytes', async function () {
+            await (0, src_1.signEd25519Extended)(message, Buffer.alloc(31), Buffer.alloc(32)).should.be.rejectedWith(/kL length/);
+            await (0, src_1.signEd25519Extended)(message, Buffer.alloc(32), Buffer.alloc(33)).should.be.rejectedWith(/kR length/);
+        });
+    });
+    describe('ExternalEd25519Signer', function () {
+        const message = Buffer.from('external-signer message');
+        const keyPair = nacl.sign.keyPair.fromSeed(Buffer.alloc(32, 0x42));
+        const publicKey = Buffer.from(keyPair.publicKey).toString('hex');
+        const otherKeyPair = nacl.sign.keyPair.fromSeed(Buffer.alloc(32, 0x77));
+        const validSigner = {
+            publicKey,
+            sign: async (m) => ({
+                signature: Buffer.from(nacl.sign.detached(m, keyPair.secretKey)).toString('hex'),
+            }),
+        };
+        it('rejects a malformed public key', function () {
+            (() => (0, src_1.assertValidExternalEd25519Signer)({
+                publicKey: 'not-hex',
+                sign: async () => ({ signature: 'a'.repeat(128) }),
+            })).should.throw(/expected 32 bytes/);
+        });
+        it('rejects a public key with trailing garbage after 64 hex chars', function () {
+            // Buffer.from(pub, 'hex') truncates at the first bad pair, so a length-only check would
+            // accept this; the strict regex must not.
+            (() => (0, src_1.assertValidExternalEd25519Signer)({
+                publicKey: 'f1'.repeat(32) + 'zz',
+                sign: async () => ({ signature: 'a'.repeat(128) }),
+            })).should.throw(/expected 32 bytes/);
+        });
+        it('rejects a signer without a sign function', function () {
+            (() => (0, src_1.assertValidExternalEd25519Signer)({
+                publicKey,
+                sign: undefined,
+            })).should.throw(/sign must be a function/);
+        });
+        it('rejects a non-64-byte signature', async function () {
+            await (0, src_1.signWithExternalEd25519Signer)({ publicKey, sign: async () => ({ signature: 'ab' }) }, message).should.be.rejectedWith(/expected 64 bytes/);
+        });
+        it('rejects when sign resolves to a non-object', async function () {
+            await (0, src_1.signWithExternalEd25519Signer)({ publicKey, sign: async () => null }, message).should.be.rejectedWith(/sign must resolve to \{ signature: string \}/);
+        });
+        it('rejects a well-formed signature from the wrong key', async function () {
+            await (0, src_1.signWithExternalEd25519Signer)({
+                publicKey,
+                sign: async (m) => ({
+                    signature: Buffer.from(nacl.sign.detached(m, otherKeyPair.secretKey)).toString('hex'),
+                }),
+            }, message).should.be.rejectedWith(/does not verify against its public key/);
+        });
+        it('signs and returns a verified 64-byte signature', async function () {
+            const signature = await (0, src_1.signWithExternalEd25519Signer)(validSigner, message);
+            signature.should.match(/^[0-9a-f]{128}$/);
+            nacl.sign.detached.verify(message, Buffer.from(signature, 'hex'), keyPair.publicKey).should.equal(true);
+        });
+        it('rejects a signer that mutates its message argument, leaving the original message intact', async function () {
+            const originalMessage = Uint8Array.from(message);
+            const mutatingSigner = {
+                publicKey,
+                sign: async (m) => {
+                    m.fill(0x00);
+                    return { signature: Buffer.from(nacl.sign.detached(m, keyPair.secretKey)).toString('hex') };
+                },
+            };
+            await (0, src_1.signWithExternalEd25519Signer)(mutatingSigner, originalMessage).should.be.rejectedWith(/does not verify against its public key/);
+            // The authoritative message must be unchanged: the signer only ever saw a defensive copy.
+            Buffer.from(originalMessage).equals(Buffer.from(message)).should.equal(true);
+        });
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/unit/bitgo/safe/fixtures/derivableEd25519Pub.json

@@ -0,0 +1,72 @@
+{
+    "$comment": "Shared ed25519Multisig safe-root fixture: raw 32-byte public key || raw 32-byte chain code encoded together as canonical unpadded RFC 4648 base32 (uppercase A-Z2-7, 103 characters). Plain JSON with no repo-specific imports so wallet-platform, BitGoJS sdk-core, BitGoJS modules/key-card and WRW can all consume this identical file. The final base32 character carries 2 significant bits and 3 zero padding bits, so 8 spellings decode to the same 64 bytes and only the zero-padded one is valid — validators must re-encode, not just match the alphabet. The softDerivation vectors pin the m/<index> unhardened child public key expected from a root: they were generated with @bitgo-beta/account-lib's Eddsa.deriveUnhardened (via @bitgo-beta/sdk-core) over genuine ed25519 points, and every consuming implementation MUST reproduce them exactly — a divergent unhardened derivation derives co-signer keys nobody else can reproduce, permanently bricking the wallets minted with it. The child chain code is deliberately not pinned: consumers discard it after deriving the child public key.",
+    "publicKeyBytes": 32,
+    "chainCodeBytes": 32,
+    "rootPubBase32Length": 103,
+    "valid": [
+        {
+            "name": "zero public key and repeated chain code",
+            "pub": "0000000000000000000000000000000000000000000000000000000000000000",
+            "chainCode": "abababababababababababababababababababababababababababababababab",
+            "composite": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKXK5LVOV2XK5LVOV2XK5LVOV2XK5LVOV2XK5LVOV2XK5LVOV2XKY"
+        },
+        {
+            "name": "mixed public key and chain code",
+            "pub": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+            "chainCode": "fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210",
+            "composite": "AERUKZ4JVPG66AJDIVTYTK6N54ASGRLHRGV433YBENCWPCNLZXX75XF2TB3FIMQQ73OLVGDWKQZBB7W4XKMHMVBSCD7NZOUYOZKDEEA"
+        },
+        {
+            "name": "typical public key with a mixed chain code",
+            "pub": "d5a7c39b1f84e206a93f7c4b8d2e615f0a9c3b7e5d1f48c2a6b0e3947f518d26",
+            "chainCode": "3c9f1a7b5e2d84c6a0f3b9d7e1c5a2846f0b3d9e7c1a5f8b2d04e6c9a3f7b1d5",
+            "composite": "2WT4HGY7QTRANKJ7PRFY2LTBL4FJYO36LUPURQVGWDRZI72RRUTDZHY2PNPC3BGGUDZ3TV7BYWRII3YLHWPHYGS7RMWQJZWJUP33DVI"
+        },
+        {
+            "name": "typical public key with a repeating chain code",
+            "pub": "9b2f7d4a1e8c3b6f5a0d9e2c7b4f1a8d3e6c9b2f5a8d1e4c7b0f3a6d9e2c5b81",
+            "chainCode": "cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
+            "composite": "TMXX2SQ6RQ5W6WQNTYWHWTY2RU7GZGZPLKGR4TD3B45G3HRMLOA43TONZXG43TONZXG43TONZXG43TONZXG43TONZXG43TONZXG43TI"
+        }
+    ],
+    "invalidComposite": [
+        {
+            "name": "lowercase",
+            "composite": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaakxk5lvov2xk5lvov2xk5lvov2xk5lvov2xk5lvov2xk5lvov2xky"
+        },
+        {
+            "name": "short",
+            "composite": "AA"
+        },
+        {
+            "name": "non-canonical trailing bits",
+            "composite": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKXK5LVOV2XK5LVOV2XK5LVOV2XK5LVOV2XK5LVOV2XK5LVOV2XKZ"
+        }
+    ],
+    "softDerivation": [
+        {
+            "name": "root A at m/0",
+            "index": 0,
+            "pub": "07a2206d82e1238043906260d95f86e046056610756050d558d282476556d0a6",
+            "chainCode": "1111111111111111111111111111111111111111111111111111111111111111",
+            "composite": "A6RCA3MC4ERYAQ4QMJQNSX4G4BDAKZQQOVQFBVKY2KBEOZKW2CTBCEIRCEIRCEIRCEIRCEIRCEIRCEIRCEIRCEIRCEIRCEIRCEIRCEI",
+            "childPub": "3cec3c1be67f00f8f8d5a33cc3937ba7d7da96a79332af622942f38150f32d6e"
+        },
+        {
+            "name": "root A at m/1",
+            "index": 1,
+            "pub": "07a2206d82e1238043906260d95f86e046056610756050d558d282476556d0a6",
+            "chainCode": "1111111111111111111111111111111111111111111111111111111111111111",
+            "composite": "A6RCA3MC4ERYAQ4QMJQNSX4G4BDAKZQQOVQFBVKY2KBEOZKW2CTBCEIRCEIRCEIRCEIRCEIRCEIRCEIRCEIRCEIRCEIRCEIRCEIRCEI",
+            "childPub": "b315782a33f863e87a40731157456e62ce7d4e941cfb2e3f71c56edb993bf7af"
+        },
+        {
+            "name": "root B at max non-hardened m/2147483647",
+            "index": 2147483647,
+            "pub": "6af98980a20d1d090d729aee97e8cab65df61eeec9dc7b6070baa6b0e02f860d",
+            "chainCode": "cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
+            "composite": "NL4YTAFCBUOQSDLSTLXJP2GKWZO7MHXOZHOHWYDQXKTLBYBPQYG43TONZXG43TONZXG43TONZXG43TONZXG43TONZXG43TONZXG43TI",
+            "childPub": "acda5ebd6543ed99141eb9da0cf1101e3ce11a637ee83743786b67a3b319439e"
+        }
+    ]
+}