@bitgo-beta/sdk-lib-mpc 8.2.0-beta.210 → 8.2.0-beta.2100

package/dist/src/tss/eddsa-mps/dkg.js

@@ -0,0 +1,303 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DKG = void 0;
+const cbor_x_1 = require("cbor-x");
+const crypto_1 = __importDefault(require("crypto"));
+const types_1 = require("./types");
+/**
+ * EdDSA Distributed Key Generation (DKG) implementation using @bitgo/wasm-mps.
+ *
+ * State is explicit: each round function returns `{ msg, state }` bytes.
+ * The state bytes are stored between rounds and passed to the next round function,
+ * mirroring the server-side persistence pattern (state would be serialised to DB).
+ *
+ * @example
+ * ```typescript
+ * const dkg = new DKG(3, 2, 0);
+ * // X25519 keys come from GPG encryption subkeys (extracted by the orchestrator)
+ * await dkg.initDkg(myX25519PrivKey, [otherParty1X25519PubKey, otherParty2X25519PubKey]);
+ * const msg1 = dkg.getFirstMessage();
+ * const msg2s = dkg.handleIncomingMessages(allThreeMsg1s);
+ * dkg.handleIncomingMessages(allThreeMsg2s);  // completes DKG
+ * const keyShare = dkg.getKeyShare();
+ * ```
+ */
+class DKG {
+    constructor(n, t, partyIdx, retrofitData) {
+        /** Private X25519 key (from GPG encryption subkey) */
+        this.decryptionKey = null;
+        /** Other parties' X25519 public keys (from their GPG encryption subkeys), sorted by party index */
+        this.otherPubKeys = null;
+        /** Serialised round state bytes returned by the previous round function */
+        this.dkgStateBytes = null;
+        /** Opaque bincode-serialised keyshare from round2 */
+        this.keyShare = null;
+        /** 32-byte Ed25519 public key from round2 */
+        this.sharePk = null;
+        /** 32-byte chain code from round2 */
+        this.shareChaincode = null;
+        /** Lazily loaded WASM module */
+        this.wasmMps = null;
+        this.dkgState = types_1.DkgState.Uninitialized;
+        this.n = n;
+        this.t = t;
+        this.partyIdx = partyIdx;
+        this.retrofitData = retrofitData;
+    }
+    async loadWasmMps() {
+        if (!this.wasmMps) {
+            if (typeof window !== 'undefined' &&
+                /* checks for electron processes */
+                !window.process &&
+                !window.process?.['type']) {
+                // Browser: web build has explicit init() — guaranteed ready after await
+                // eslint-disable-next-line import/no-internal-modules -- @bitgo/wasm-mps exposes environment-specific subpath exports.
+                const webWasm = await Promise.resolve().then(() => __importStar(require('@bitgo/wasm-mps/web')));
+                await webWasm.default();
+                this.wasmMps = webWasm;
+            }
+            else {
+                // Node.js: dynamic import() rewritten to require() by tsc → CJS build → readFileSync
+                this.wasmMps = await Promise.resolve().then(() => __importStar(require('@bitgo/wasm-mps')));
+            }
+        }
+    }
+    getWasmMps() {
+        if (!this.wasmMps) {
+            throw Error('WASM module not loaded');
+        }
+        return this.wasmMps;
+    }
+    getState() {
+        return this.dkgState;
+    }
+    /**
+     * Initialises the DKG session with this party's X25519 private key and the other parties'
+     * X25519 public keys. Keys are extracted from GPG encryption subkeys by the orchestrator.
+     *
+     * @param decryptionKey - This party's 32-byte X25519 private key (GPG enc subkey private part).
+     * @param otherEncPublicKeys - Other parties' 32-byte X25519 public keys, sorted by ascending
+     *   party index (excluding own). For a 3-party setup, this is [party_A_pub, party_B_pub].
+     */
+    async initDkg(decryptionKey, otherEncPublicKeys) {
+        await this.loadWasmMps();
+        if (!decryptionKey || decryptionKey.length !== 32) {
+            throw Error('Missing or invalid decryption key: must be 32 bytes');
+        }
+        if (!otherEncPublicKeys || otherEncPublicKeys.length !== this.n - 1) {
+            throw Error(`Expected ${this.n - 1} other parties' public keys`);
+        }
+        if (this.t > this.n || this.partyIdx >= this.n) {
+            throw Error('Invalid parameters for DKG');
+        }
+        this.decryptionKey = decryptionKey;
+        this.otherPubKeys = otherEncPublicKeys;
+        this.dkgState = types_1.DkgState.Init;
+    }
+    /**
+     * Runs round0 of the DKG protocol. Returns this party's broadcast message.
+     * Stores the round state bytes internally for the next round.
+     *
+     * @param dkgSeed - Optional 32-byte seed for deterministic DKG output (testing only).
+     */
+    getFirstMessage(dkgSeed) {
+        if (this.dkgState !== types_1.DkgState.Init) {
+            throw Error('DKG session not initialized');
+        }
+        const seed = dkgSeed ?? crypto_1.default.randomBytes(32);
+        const wasm = this.getWasmMps();
+        let result;
+        try {
+            if (this.retrofitData) {
+                result = wasm.ed25519_dkg_round0_import(this.partyIdx, this.decryptionKey, this.otherPubKeys, Buffer.from(this.retrofitData.s_i_0, 'hex'), Buffer.from(this.retrofitData.expectedPk, 'hex'), Buffer.from(this.retrofitData.chainCode, 'hex'));
+            }
+            else {
+                result = wasm.ed25519_dkg_round0_process(this.partyIdx, this.decryptionKey, this.otherPubKeys, seed);
+            }
+        }
+        catch (err) {
+            throw new Error(`Error while creating the first message from party ${this.partyIdx}: ${err}`);
+        }
+        this.dkgStateBytes = Buffer.from(result.state);
+        this.dkgState = types_1.DkgState.WaitMsg1;
+        // Clear retrofit key material once consumed — it is not needed after round 0
+        this.retrofitData = undefined;
+        return { payload: new Uint8Array(result.msg), from: this.partyIdx };
+    }
+    /**
+     * Handles incoming messages from all parties and advances the protocol.
+     *
+     * - In WaitMsg1: runs round1, returns this party's round1 broadcast message.
+     * - In WaitMsg2: runs round2, completes DKG, returns [].
+     *
+     * The caller passes all n messages (including own); own message is filtered
+     * out internally. Other parties' messages are sorted by ascending party index,
+     * matching the ordering expected by @bitgo/wasm-mps.
+     *
+     * @param messagesForIthRound - All n messages for this round (including own).
+     */
+    handleIncomingMessages(messagesForIthRound) {
+        if (this.dkgState === types_1.DkgState.Complete) {
+            throw Error('DKG session already completed');
+        }
+        if (this.dkgState === types_1.DkgState.Uninitialized) {
+            throw Error('DKG session not initialized');
+        }
+        if (this.dkgState === types_1.DkgState.Init) {
+            throw Error('DKG session must call getFirstMessage() before handling incoming messages. Call getFirstMessage() first.');
+        }
+        if (messagesForIthRound.length !== this.n) {
+            throw Error('Invalid number of messages for the round. Number of messages should be equal to N');
+        }
+        // Extract other parties' messages, sorted by party index (ascending)
+        const otherMsgs = messagesForIthRound
+            .filter((m) => m.from !== this.partyIdx)
+            .sort((a, b) => a.from - b.from)
+            .map((m) => m.payload);
+        const wasm = this.getWasmMps();
+        if (this.dkgState === types_1.DkgState.WaitMsg1) {
+            let result;
+            try {
+                result = wasm.ed25519_dkg_round1_process(otherMsgs, this.dkgStateBytes);
+            }
+            catch (err) {
+                throw new Error(`Error while creating messages from party ${this.partyIdx}, round ${this.dkgState}: ${err}`);
+            }
+            // Store new state; this is what would be persisted to DB between API rounds
+            this.dkgStateBytes = Buffer.from(result.state);
+            this.dkgState = types_1.DkgState.WaitMsg2;
+            return [{ payload: new Uint8Array(result.msg), from: this.partyIdx }];
+        }
+        if (this.dkgState === types_1.DkgState.WaitMsg2) {
+            let share;
+            try {
+                share = wasm.ed25519_dkg_round2_process(otherMsgs, this.dkgStateBytes);
+            }
+            catch (err) {
+                throw new Error(`Error while creating messages from party ${this.partyIdx}, round ${this.dkgState}: ${err}`);
+            }
+            this.keyShare = Buffer.from(share.share);
+            this.sharePk = Buffer.from(share.pk);
+            this.shareChaincode = Buffer.from(share.chaincode);
+            this.dkgStateBytes = null;
+            this.dkgState = types_1.DkgState.Complete;
+            return [];
+        }
+        throw Error('Unexpected DKG state');
+    }
+    /**
+     * Returns the opaque bincode-serialised keyshare produced by round2.
+     * This is used as input to the signing protocol.
+     */
+    getKeyShare() {
+        if (!this.keyShare) {
+            throw Error('DKG session not initialized');
+        }
+        return this.keyShare;
+    }
+    /**
+     * Returns the 32-byte Ed25519 public key agreed by all parties during DKG.
+     */
+    getSharePublicKey() {
+        if (!this.sharePk) {
+            throw Error('DKG session not initialized');
+        }
+        return this.sharePk;
+    }
+    /**
+     * Returns the 128-char hex common keychain: 64-char public key + 64-char chain code.
+     * This matches the format expected by address derivation (Eddsa.deriveUnhardened).
+     */
+    getCommonKeychain() {
+        if (!this.sharePk || !this.shareChaincode) {
+            throw Error('DKG session not initialized');
+        }
+        return this.sharePk.toString('hex') + this.shareChaincode.toString('hex');
+    }
+    /**
+     * Returns a CBOR-encoded ReducedKeyShare buffer containing the party's opaque
+     * signing key share in the `keyShare` field. This buffer is private key material.
+     * The caller encrypts it and stores it as `reducedEncryptedPrv` on the key card QR code.
+     */
+    getReducedKeyShare() {
+        if (!this.keyShare || !this.sharePk || !this.shareChaincode) {
+            throw Error('DKG session not initialized');
+        }
+        const reducedKeyShare = {
+            keyShare: Array.from(this.keyShare),
+            pub: Array.from(this.sharePk),
+            rootChainCode: Array.from(this.shareChaincode),
+        };
+        return Buffer.from((0, cbor_x_1.encode)(reducedKeyShare));
+    }
+    /**
+     * Exports the current session state as a JSON string for persistence.
+     * Includes: round state bytes, current DKG round, decryption key, other parties' pub keys.
+     * This mirrors what a server would store in a database between API rounds.
+     */
+    getSession() {
+        if (this.dkgState === types_1.DkgState.Complete) {
+            throw Error('DKG session is complete. Exporting the session is not allowed.');
+        }
+        if (this.dkgState === types_1.DkgState.Uninitialized) {
+            throw Error('DKG session not initialized');
+        }
+        return JSON.stringify({
+            dkgStateBytes: this.dkgStateBytes?.toString('base64') ?? null,
+            dkgRound: this.dkgState,
+            decryptionKey: this.decryptionKey?.toString('base64') ?? null,
+            otherPubKeys: this.otherPubKeys?.map((k) => k.toString('base64')) ?? null,
+            retrofitData: this.retrofitData,
+        });
+    }
+    /**
+     * Restores a previously exported session. Allows the protocol to continue
+     * from where it left off, as if the round state was loaded from a database.
+     */
+    restoreSession(session) {
+        const data = JSON.parse(session);
+        this.dkgStateBytes = data.dkgStateBytes ? Buffer.from(data.dkgStateBytes, 'base64') : null;
+        this.dkgState = data.dkgRound;
+        this.decryptionKey = data.decryptionKey ? Buffer.from(data.decryptionKey, 'base64') : null;
+        this.otherPubKeys = data.otherPubKeys ? data.otherPubKeys.map((k) => Buffer.from(k, 'base64')) : null;
+        this.retrofitData = data.retrofitData ?? undefined;
+    }
+}
+exports.DKG = DKG;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/tss/eddsa-mps/dsg.d.ts

@@ -0,0 +1,96 @@
+import { DeserializedMessage, DeserializedMessages, DsgState } from './types';
+/**
+ * EdDSA Distributed Sign Generation (DSG) implementation using @bitgo/wasm-mps.
+ *
+ * State is explicit: each WASM round function returns
+ * `{ msg, state }` bytes; the state bytes are stored between rounds and passed to the
+ * next round function (this is what a server would persist to a database between API
+ * rounds).
+ *
+ * The protocol is hard-coded 2-of-3: each signing party communicates with exactly one
+ * counterpart. `handleIncomingMessages` accepts both messages (own + counterpart), and
+ * filters own out internally.
+ *
+ * @example
+ * ```typescript
+ * const dsg = new DSG(0);  // partyIdx 0
+ * await dsg.initDsg(keyShare, message, 'm', 2);  // counterpart is party 2
+ * const msg1 = dsg.getFirstMessage();
+ * const msg2 = dsg.handleIncomingMessages([msg1, peerMsg1]);  // emits SignMsg2
+ * const msg3 = dsg.handleIncomingMessages([msg2[0], peerMsg2]);  // emits SignMsg3
+ * dsg.handleIncomingMessages([msg3[0], peerMsg3]);  // completes DSG
+ * const signature = dsg.getSignature();  // 64-byte Ed25519 signature
+ * ```
+ */
+export declare class DSG {
+    protected partyIdx: number;
+    protected otherPartyIdx: number | null;
+    /** Opaque bincode-serialised Keyshare from a prior DKG */
+    private keyShare;
+    /** Raw message bytes to sign (Ed25519 hashes internally; no prehashing required) */
+    private message;
+    /** BIP-32-style derivation path, e.g. "m" or "m/0/1". Folded in via Keyshare::derive_with_offset */
+    private derivationPath;
+    /** Serialised round state bytes returned by the previous round function */
+    private dsgStateBytes;
+    /** Final 64-byte Ed25519 signature, available after WaitMsg3 -> Complete */
+    private signature;
+    /** Lazily loaded WASM module */
+    private wasmMps;
+    protected dsgState: DsgState;
+    constructor(partyIdx: number);
+    getState(): DsgState;
+    getPartyIdx(): number;
+    getOtherPartyIdx(): number | null;
+    private loadWasmMps;
+    private getWasmMps;
+    /**
+     * Initialises the DSG session. The keyshare must come from a prior DKG run, and
+     * `otherPartyIdx` must be the single counterpart who will co-sign with this party.
+     *
+     * @param keyShare - Opaque bincode-serialised Keyshare bytes from `DKG.getKeyShare()`.
+     * @param message - Raw message bytes to sign (no prehashing).
+     * @param derivationPath - BIP-32-style derivation path. Use `"m"` for the root key.
+     * @param otherPartyIdx - Party index of the single counterpart in this signing session.
+     *   Must differ from this party's own `partyIdx` and be in `[0, 2]`.
+     */
+    initDsg(keyShare: Buffer, message: Buffer, derivationPath: string, otherPartyIdx: number): Promise<void>;
+    /**
+     * Runs round 0 of the DSG protocol. Returns this party's broadcast message
+     * (a `SignMsg1` containing the commitment to `R_i`). Stores the round state
+     * bytes internally for the next round.
+     */
+    getFirstMessage(): DeserializedMessage;
+    /**
+     * Handles incoming messages for the current round and advances the protocol.
+     *
+     * - In `WaitMsg1`: runs round 1, returns this party's `SignMsg2` broadcast.
+     * - In `WaitMsg2`: runs round 2 (which internally fuses two Silence Labs transitions),
+     *   returns this party's `SignMsg3` broadcast (partial signature).
+     * - In `WaitMsg3`: runs round 3, completes DSG, returns `[]`.
+     *
+     * The caller passes both messages (own + counterpart) for symmetry with
+     * `DKG.handleIncomingMessages`. Own message is filtered out internally; only the
+     * counterpart's payload is forwarded to the WASM round function.
+     *
+     * @param messagesForIthRound - Both messages for this round (own + counterpart).
+     */
+    handleIncomingMessages(messagesForIthRound: DeserializedMessages): DeserializedMessages;
+    /**
+     * Returns the final 64-byte Ed25519 signature produced by round 3.
+     * Only available once the protocol reaches `Complete`.
+     */
+    getSignature(): Buffer;
+    /**
+     * Exports the current session state as a JSON string for persistence.
+     * Includes the opaque round state bytes plus everything needed to re-enter the
+     * protocol after a restart (keyshare, message, derivation path, counterpart).
+     */
+    getSession(): string;
+    /**
+     * Restores a previously exported session. Allows the protocol to continue from
+     * where it left off, as if the round state was loaded from a database.
+     */
+    restoreSession(session: string): Promise<void>;
+}
+//# sourceMappingURL=dsg.d.ts.map

package/dist/src/tss/eddsa-mps/dsg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dsg.d.ts","sourceRoot":"","sources":["../../../../src/tss/eddsa-mps/dsg.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAM9E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,GAAG;IACd,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAQ;IAE9C,0DAA0D;IAC1D,OAAO,CAAC,QAAQ,CAAuB;IACvC,oFAAoF;IACpF,OAAO,CAAC,OAAO,CAAuB;IACtC,oGAAoG;IACpG,OAAO,CAAC,cAAc,CAAuB;IAE7C,2EAA2E;IAC3E,OAAO,CAAC,aAAa,CAAuB;IAC5C,4EAA4E;IAC5E,OAAO,CAAC,SAAS,CAAuB;IACxC,gCAAgC;IAChC,OAAO,CAAC,OAAO,CAAwB;IAEvC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAA0B;gBAE1C,QAAQ,EAAE,MAAM;IAI5B,QAAQ,IAAI,QAAQ;IAIpB,WAAW,IAAI,MAAM;IAIrB,gBAAgB,IAAI,MAAM,GAAG,IAAI;YAInB,WAAW;IAoBzB,OAAO,CAAC,UAAU;IAOlB;;;;;;;;;OASG;IACG,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsB9G;;;;OAIG;IACH,eAAe,IAAI,mBAAmB;IAqBtC;;;;;;;;;;;;;OAaG;IACH,sBAAsB,CAAC,mBAAmB,EAAE,oBAAoB,GAAG,oBAAoB;IAsEvF;;;OAGG;IACH,YAAY,IAAI,MAAM;IAOtB;;;;OAIG;IACH,UAAU,IAAI,MAAM;IAqBpB;;;OAGG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CA4DrD"}