@pezkuwi/util-crypto 14.0.10 → 14.0.12

package/signature/verify.js

@@ -0,0 +1,78 @@
+import { u8aIsWrapped, u8aToU8a, u8aUnwrapBytes, u8aWrapBytes } from '@pezkuwi/util';
+import { decodeAddress } from '../address/decode.js';
+import { ed25519Verify } from '../ed25519/verify.js';
+import { secp256k1Verify } from '../secp256k1/verify.js';
+import { sr25519Verify } from '../sr25519/verify.js';
+const secp256k1VerifyHasher = (hashType) => (message, signature, publicKey) => secp256k1Verify(message, signature, publicKey, hashType, true);
+const VERIFIERS_ECDSA = [
+    ['ecdsa', secp256k1VerifyHasher('blake2')],
+    ['ethereum', secp256k1VerifyHasher('keccak')]
+];
+const VERIFIERS = [
+    ['ed25519', ed25519Verify],
+    ['sr25519', sr25519Verify]
+];
+function verifyDetect(result, { message, publicKey, signature }, verifiers = [...VERIFIERS, ...VERIFIERS_ECDSA]) {
+    result.isValid = verifiers.some(([crypto, verify]) => {
+        try {
+            if (verify(message, signature, publicKey)) {
+                result.crypto = crypto;
+                return true;
+            }
+        }
+        catch {
+            // do nothing, result.isValid still set to false
+        }
+        return false;
+    });
+    return result;
+}
+function verifyMultisig(result, { message, publicKey, signature }) {
+    if (![0, 1, 2].includes(signature[0]) || ![65, 66].includes(signature.length)) {
+        throw new Error(`Unknown crypto type, expected signature prefix [0..2], found ${signature[0]}`);
+    }
+    // If the signature is 66 bytes it must be an ecdsa signature
+    // containing: prefix [1 byte] + signature [65] bytes.
+    // Remove the and then verify
+    if (signature.length === 66) {
+        result = verifyDetect(result, { message, publicKey, signature: signature.subarray(1) }, VERIFIERS_ECDSA);
+    }
+    else {
+        // The signature contains 65 bytes which is either
+        // - A ed25519 or sr25519 signature [1 byte prefix + 64 bytes]
+        // - An ecdsa signature [65 bytes]
+        result = verifyDetect(result, { message, publicKey, signature: signature.subarray(1) }, VERIFIERS);
+        if (!result.isValid) {
+            result = verifyDetect(result, { message, publicKey, signature }, VERIFIERS_ECDSA);
+        }
+        // If both failed, explicitly set crypto to 'none'
+        if (!result.isValid) {
+            result.crypto = 'none';
+        }
+    }
+    return result;
+}
+function getVerifyFn(signature) {
+    return [0, 1, 2].includes(signature[0]) && [65, 66].includes(signature.length)
+        ? verifyMultisig
+        : verifyDetect;
+}
+export function signatureVerify(message, signature, addressOrPublicKey) {
+    const signatureU8a = u8aToU8a(signature);
+    if (![64, 65, 66].includes(signatureU8a.length)) {
+        throw new Error(`Invalid signature length, expected [64..66] bytes, found ${signatureU8a.length}`);
+    }
+    const publicKey = decodeAddress(addressOrPublicKey);
+    const input = { message: u8aToU8a(message), publicKey, signature: signatureU8a };
+    const result = { crypto: 'none', isValid: false, isWrapped: u8aIsWrapped(input.message, true), publicKey };
+    const isWrappedBytes = u8aIsWrapped(input.message, false);
+    const verifyFn = getVerifyFn(signatureU8a);
+    verifyFn(result, input);
+    if (result.crypto !== 'none' || (result.isWrapped && !isWrappedBytes)) {
+        return result;
+    }
+    input.message = isWrappedBytes
+        ? u8aUnwrapBytes(input.message)
+        : u8aWrapBytes(input.message);
+    return verifyFn(result, input);
+}

package/sr25519/agreement.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @name sr25519Agreement
+ * @description Key agreement between other's public key and self secret key
+ */
+export declare function sr25519Agreement(secretKey: string | Uint8Array, publicKey: string | Uint8Array): Uint8Array;

package/sr25519/agreement.js

@@ -0,0 +1,17 @@
+import { getSharedSecret } from '@scure/sr25519';
+import { u8aToU8a } from '@pezkuwi/util';
+/**
+ * @name sr25519Agreement
+ * @description Key agreement between other's public key and self secret key
+ */
+export function sr25519Agreement(secretKey, publicKey) {
+    const secretKeyU8a = u8aToU8a(secretKey);
+    const publicKeyU8a = u8aToU8a(publicKey);
+    if (publicKeyU8a.length !== 32) {
+        throw new Error(`Invalid publicKey, received ${publicKeyU8a.length} bytes, expected 32`);
+    }
+    else if (secretKeyU8a.length !== 64) {
+        throw new Error(`Invalid secretKey, received ${secretKeyU8a.length} bytes, expected 64`);
+    }
+    return getSharedSecret(secretKeyU8a, publicKeyU8a);
+}

package/sr25519/derive.d.ts

@@ -0,0 +1,2 @@
+import type { Keypair } from '../types.js';
+export declare function createDeriveFn(derive: (pair: Uint8Array, cc: Uint8Array) => Uint8Array): (keypair: Keypair, chainCode: Uint8Array) => Keypair;

package/sr25519/derive.js

@@ -0,0 +1,12 @@
+import * as sr25519 from '@scure/sr25519';
+import { isU8a } from '@pezkuwi/util';
+export function createDeriveFn(derive) {
+    return (keypair, chainCode) => {
+        if (!isU8a(chainCode) || chainCode.length !== 32) {
+            throw new Error('Invalid chainCode passed to derive');
+        }
+        const secretKey = derive(keypair.secretKey, chainCode);
+        const publicKey = sr25519.getPublicKey(secretKey);
+        return { publicKey, secretKey };
+    };
+}

package/sr25519/deriveHard.d.ts

@@ -0,0 +1 @@
+export declare const sr25519DeriveHard: (keypair: import("../types.js").Keypair, chainCode: Uint8Array) => import("../types.js").Keypair;

package/sr25519/deriveHard.js

@@ -0,0 +1,3 @@
+import * as sr25519 from '@scure/sr25519';
+import { createDeriveFn } from './derive.js';
+export const sr25519DeriveHard = /*#__PURE__*/ createDeriveFn(sr25519.HDKD.secretHard);

package/sr25519/derivePublic.d.ts

@@ -0,0 +1 @@
+export declare function sr25519DerivePublic(publicKey: string | Uint8Array, chainCode: Uint8Array): Uint8Array;

package/sr25519/derivePublic.js

@@ -0,0 +1,12 @@
+import * as sr25519 from '@scure/sr25519';
+import { isU8a, u8aToU8a } from '@pezkuwi/util';
+export function sr25519DerivePublic(publicKey, chainCode) {
+    const publicKeyU8a = u8aToU8a(publicKey);
+    if (!isU8a(chainCode) || chainCode.length !== 32) {
+        throw new Error('Invalid chainCode passed to derive');
+    }
+    else if (publicKeyU8a.length !== 32) {
+        throw new Error(`Invalid publicKey, received ${publicKeyU8a.length} bytes, expected 32`);
+    }
+    return sr25519.HDKD.publicSoft(publicKeyU8a, chainCode);
+}

package/sr25519/deriveSoft.d.ts

@@ -0,0 +1 @@
+export declare const sr25519DeriveSoft: (keypair: import("../types.js").Keypair, chainCode: Uint8Array) => import("../types.js").Keypair;

package/sr25519/deriveSoft.js

@@ -0,0 +1,3 @@
+import * as sr25519 from '@scure/sr25519';
+import { createDeriveFn } from './derive.js';
+export const sr25519DeriveSoft = /*#__PURE__*/ createDeriveFn(sr25519.HDKD.secretSoft);

package/sr25519/index.d.ts

@@ -0,0 +1,9 @@
+export { sr25519Agreement } from './agreement.js';
+export { sr25519DeriveHard } from './deriveHard.js';
+export { sr25519DerivePublic } from './derivePublic.js';
+export { sr25519DeriveSoft } from './deriveSoft.js';
+export { sr25519PairFromSeed } from './pair/fromSeed.js';
+export { sr25519Sign } from './sign.js';
+export { sr25519Verify } from './verify.js';
+export { sr25519VrfSign } from './vrfSign.js';
+export { sr25519VrfVerify } from './vrfVerify.js';

package/sr25519/index.js

@@ -0,0 +1,9 @@
+export { sr25519Agreement } from './agreement.js';
+export { sr25519DeriveHard } from './deriveHard.js';
+export { sr25519DerivePublic } from './derivePublic.js';
+export { sr25519DeriveSoft } from './deriveSoft.js';
+export { sr25519PairFromSeed } from './pair/fromSeed.js';
+export { sr25519Sign } from './sign.js';
+export { sr25519Verify } from './verify.js';
+export { sr25519VrfSign } from './vrfSign.js';
+export { sr25519VrfVerify } from './vrfVerify.js';

package/sr25519/pair/fromSeed.d.ts

@@ -0,0 +1,6 @@
+import type { Keypair } from '../../types.js';
+/**
+ * @name sr25519PairFromSeed
+ * @description Returns a object containing a `publicKey` & `secretKey` generated from the supplied seed.
+ */
+export declare function sr25519PairFromSeed(seed: string | Uint8Array): Keypair;

package/sr25519/pair/fromSeed.js

@@ -0,0 +1,18 @@
+import * as sr25519 from '@scure/sr25519';
+import { u8aToU8a } from '@pezkuwi/util';
+/**
+ * @name sr25519PairFromSeed
+ * @description Returns a object containing a `publicKey` & `secretKey` generated from the supplied seed.
+ */
+export function sr25519PairFromSeed(seed) {
+    const seedU8a = u8aToU8a(seed);
+    if (seedU8a.length !== 32) {
+        throw new Error(`Expected a seed matching 32 bytes, found ${seedU8a.length}`);
+    }
+    const sec = sr25519.secretFromSeed(seedU8a);
+    const pub = sr25519.getPublicKey(sec);
+    return {
+        publicKey: pub,
+        secretKey: sec
+    };
+}

package/sr25519/pair/fromU8a.d.ts

@@ -0,0 +1,2 @@
+import type { Keypair } from '../../types.js';
+export declare function sr25519PairFromU8a(full: string | Uint8Array): Keypair;

package/sr25519/pair/fromU8a.js

@@ -0,0 +1,14 @@
+import { u8aToU8a } from '@pezkuwi/util';
+const SEC_LEN = 64;
+const PUB_LEN = 32;
+const TOT_LEN = SEC_LEN + PUB_LEN;
+export function sr25519PairFromU8a(full) {
+    const fullU8a = u8aToU8a(full);
+    if (fullU8a.length !== TOT_LEN) {
+        throw new Error(`Expected keypair with ${TOT_LEN} bytes, found ${fullU8a.length}`);
+    }
+    return {
+        publicKey: fullU8a.slice(SEC_LEN, TOT_LEN),
+        secretKey: fullU8a.slice(0, SEC_LEN)
+    };
+}

package/sr25519/pair/toU8a.d.ts

@@ -0,0 +1,2 @@
+import type { Keypair } from '../../types.js';
+export declare function sr25519KeypairToU8a({ publicKey, secretKey }: Keypair): Uint8Array;

package/sr25519/pair/toU8a.js

@@ -0,0 +1,4 @@
+import { u8aConcat } from '@pezkuwi/util';
+export function sr25519KeypairToU8a({ publicKey, secretKey }) {
+    return u8aConcat(secretKey, publicKey).slice();
+}

package/sr25519/sign.d.ts

@@ -0,0 +1,6 @@
+import type { Keypair } from '../types.js';
+/**
+ * @name sr25519Sign
+ * @description Returns message signature of `message`, using the supplied pair
+ */
+export declare function sr25519Sign(message: string | Uint8Array, { publicKey, secretKey }: Partial<Keypair>): Uint8Array;

package/sr25519/sign.js

@@ -0,0 +1,15 @@
+import * as sr25519 from '@scure/sr25519';
+import { u8aToU8a } from '@pezkuwi/util';
+/**
+ * @name sr25519Sign
+ * @description Returns message signature of `message`, using the supplied pair
+ */
+export function sr25519Sign(message, { publicKey, secretKey }) {
+    if (publicKey?.length !== 32) {
+        throw new Error('Expected a valid publicKey, 32-bytes');
+    }
+    else if (secretKey?.length !== 64) {
+        throw new Error('Expected a valid secretKey, 64-bytes');
+    }
+    return sr25519.sign(secretKey, u8aToU8a(message));
+}

package/sr25519/verify.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @name sr25519Verify
+ * @description Verifies the signature of `message`, using the supplied pair
+ */
+export declare function sr25519Verify(message: string | Uint8Array, signature: string | Uint8Array, publicKey: string | Uint8Array): boolean;

package/sr25519/verify.js

@@ -0,0 +1,17 @@
+import * as sr25519 from '@scure/sr25519';
+import { u8aToU8a } from '@pezkuwi/util';
+/**
+ * @name sr25519Verify
+ * @description Verifies the signature of `message`, using the supplied pair
+ */
+export function sr25519Verify(message, signature, publicKey) {
+    const publicKeyU8a = u8aToU8a(publicKey);
+    const signatureU8a = u8aToU8a(signature);
+    if (publicKeyU8a.length !== 32) {
+        throw new Error(`Invalid publicKey, received ${publicKeyU8a.length} bytes, expected 32`);
+    }
+    else if (signatureU8a.length !== 64) {
+        throw new Error(`Invalid signature, received ${signatureU8a.length} bytes, expected 64`);
+    }
+    return sr25519.verify(u8aToU8a(message), signatureU8a, publicKeyU8a);
+}

package/sr25519/vrfSign.d.ts

@@ -0,0 +1,6 @@
+import type { Keypair } from '../types.js';
+/**
+ * @name sr25519VrfSign
+ * @description Sign with sr25519 vrf signing (deterministic)
+ */
+export declare function sr25519VrfSign(message: string | Uint8Array, { secretKey }: Partial<Keypair>, context?: string | Uint8Array, extra?: string | Uint8Array): Uint8Array;

package/sr25519/vrfSign.js

@@ -0,0 +1,15 @@
+import { randomBytes } from '@noble/hashes/utils';
+import * as sr25519 from '@scure/sr25519';
+import { u8aToU8a } from '@pezkuwi/util';
+const EMPTY_U8A = new Uint8Array();
+/**
+ * @name sr25519VrfSign
+ * @description Sign with sr25519 vrf signing (deterministic)
+ */
+export function sr25519VrfSign(message, { secretKey }, context = EMPTY_U8A, extra = EMPTY_U8A) {
+    if (secretKey?.length !== 64) {
+        throw new Error('Invalid secretKey, expected 64-bytes');
+    }
+    return sr25519.vrf.sign(u8aToU8a(message), secretKey, u8aToU8a(context), u8aToU8a(extra), randomBytes);
+    // return vrfSign(secretKey, u8aToU8a(context), u8aToU8a(message), u8aToU8a(extra));
+}

package/sr25519/vrfVerify.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @name sr25519VrfVerify
+ * @description Verify with sr25519 vrf verification
+ */
+export declare function sr25519VrfVerify(message: string | Uint8Array, signOutput: string | Uint8Array, publicKey: string | Uint8Array, context?: string | Uint8Array, extra?: string | Uint8Array): boolean;

package/sr25519/vrfVerify.js

@@ -0,0 +1,18 @@
+import * as sr25519 from '@scure/sr25519';
+import { u8aToU8a } from '@pezkuwi/util';
+const EMPTY_U8A = new Uint8Array();
+/**
+ * @name sr25519VrfVerify
+ * @description Verify with sr25519 vrf verification
+ */
+export function sr25519VrfVerify(message, signOutput, publicKey, context = EMPTY_U8A, extra = EMPTY_U8A) {
+    const publicKeyU8a = u8aToU8a(publicKey);
+    const proofU8a = u8aToU8a(signOutput);
+    if (publicKeyU8a.length !== 32) {
+        throw new Error('Invalid publicKey, expected 32-bytes');
+    }
+    else if (proofU8a.length !== 96) {
+        throw new Error('Invalid vrfSign output, expected 96 bytes');
+    }
+    return sr25519.vrf.verify(u8aToU8a(message), proofU8a, publicKeyU8a, u8aToU8a(context), u8aToU8a(extra));
+}

package/src/packageInfo.ts

@@ -3,4 +3,4 @@
 
 // Do not edit, auto-generated by @pezkuwi/dev
 
-export const packageInfo = { name: '@pezkuwi/util-crypto', path: 'auto', type: 'auto', version: '14.0.10' };
+export const packageInfo = { name: '@pezkuwi/util-crypto', path: 'auto', type: 'auto', version: '14.0.12' };