@smartledger/bsv 5.0.1 → 5.2.0

package/docs/getting-started/INSTALLATION.md

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@5.0.1/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@5.0.1/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@5.0.1/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@5.0.1/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@5.0.1/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@5.0.1/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@5.0.1/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@5.0.1/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@5.0.1/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@5.0.1/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@5.0.1/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@5.0.1/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@5.2.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@5.2.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@5.2.0/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@5.2.0/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@5.2.0/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@5.2.0/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@5.2.0/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@5.2.0/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@5.2.0/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@5.2.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@5.2.0/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@5.2.0/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv.min.js"></script>
 
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv.min.js"></script>
 
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv-smartcontract.min.js"></script>
 
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv-ltp.min.js"></script>
 
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@5.0.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.2.0/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/lib/ecies/bitcore-ecies.js

@@ -1,25 +1,38 @@
 'use strict'
 
-var bsv = require('../../')
+// Bitcore ECIES, backed by the audited @noble suite (secp256k1 ECDH, SHA-2,
+// HMAC, AES-CBC) instead of the elliptic/aes-js primitives. The wire format is
+// unchanged and byte-compatible with prior versions (locked by the golden
+// known-answer vector in test/ecies/bitcore-ecies.js). The scheme is unchanged:
+//
+//   S       = X coord of (senderPriv * recipientPub)        (ECDH, secp256k1)
+//   kE||kM  = SHA-512(S)                                     (KDF)
+//   c       = IV || AES-256-CBC_PKCS7(kE, IV, message)
+//   d       = HMAC-SHA256(kM, c)                             (encrypt-then-MAC)
+//   out     = [Rpub] || c || d
+//
+// Public API is identical to bitcore-ecies so it is a drop-in: it accepts the
+// same bsv PrivateKey/PublicKey objects. Only key *decoding* touches bsv; all
+// cryptography is @noble.
+
+var { secp256k1 } = require('@noble/curves/secp256k1.js')
+var { sha512, sha256 } = require('@noble/hashes/sha2.js')
+var { hmac } = require('@noble/hashes/hmac.js')
+var { cbc } = require('@noble/ciphers/aes.js')
 
+var bsv = require('../../')
 var PublicKey = bsv.PublicKey
-var Hash = bsv.crypto.Hash
 var $ = bsv.util.preconditions
-var aesjs = require('aes-js')
-var CBC = aesjs.ModeOfOperation.cbc
 var Random = bsv.crypto.Random
 
-// Constant-time buffer comparison. Works in Node and browser bundles alike
-// (crypto.timingSafeEqual is not provided by crypto-browserify). Compares the
-// full length unconditionally so timing does not leak how many bytes matched.
+function buf (u8) { return Buffer.from(u8.buffer, u8.byteOffset, u8.byteLength) }
+function hmacSha256 (key, data) { return buf(hmac(sha256, key, data)) }
+
+// Constant-time buffer comparison (see bitcore-ecies for rationale).
 function constantTimeEqual (a, b) {
-  if (a.length !== b.length) {
-    return false
-  }
+  if (a.length !== b.length) return false
   var diff = 0
-  for (var i = 0; i < a.length; i++) {
-    diff |= a[i] ^ b[i]
-  }
+  for (var i = 0; i < a.length; i++) diff |= a[i] ^ b[i]
   return diff === 0
 }
 
@@ -30,11 +43,8 @@ AESCBC.encrypt = function (messagebuf, cipherkeybuf, ivbuf) {
   $.checkArgument(cipherkeybuf)
   $.checkArgument(ivbuf)
   ivbuf = ivbuf || Random.getRandomBuffer(128 / 8)
-  messagebuf = aesjs.padding.pkcs7.pad(messagebuf)
-  var aesCbc = new CBC(cipherkeybuf, ivbuf)
-  var ctbuf = aesCbc.encrypt(messagebuf)
-  var encbuf = Buffer.concat([ivbuf, ctbuf])
-  return encbuf
+  var ct = cbc(Uint8Array.from(cipherkeybuf), Uint8Array.from(ivbuf)).encrypt(Uint8Array.from(messagebuf))
+  return Buffer.concat([Buffer.from(ivbuf), buf(ct)])
 }
 
 AESCBC.decrypt = function (encbuf, cipherkeybuf) {
@@ -42,33 +52,24 @@ AESCBC.decrypt = function (encbuf, cipherkeybuf) {
   $.checkArgument(cipherkeybuf)
   var ivbuf = encbuf.slice(0, 128 / 8)
   var ctbuf = encbuf.slice(128 / 8)
-  var aesCbc = new CBC(cipherkeybuf, ivbuf)
-  var messagebuf = aesCbc.decrypt(ctbuf)
-  messagebuf = aesjs.padding.pkcs7.strip(messagebuf)
-  return Buffer.from(messagebuf)
+  var msg = cbc(Uint8Array.from(cipherkeybuf), Uint8Array.from(ivbuf)).decrypt(Uint8Array.from(ctbuf))
+  return buf(msg)
 }
 
-// http://en.wikipedia.org/wiki/Integrated_Encryption_Scheme
 var ECIES = function ECIES (opts) {
-  if (!(this instanceof ECIES)) {
-    return new ECIES()
-  }
+  if (!(this instanceof ECIES)) return new ECIES()
   this.opts = opts || {}
 }
 
 ECIES.prototype.privateKey = function (privateKey) {
   $.checkArgument(privateKey, 'no private key provided')
-
   this._privateKey = privateKey || null
-
   return this
 }
 
 ECIES.prototype.publicKey = function (publicKey) {
   $.checkArgument(publicKey, 'no public key provided')
-
   this._publicKey = publicKey || null
-
   return this
 }
 
@@ -79,79 +80,53 @@ var cachedProperty = function (name, getter) {
     enumerable: true,
     get: function () {
       var value = this[cachedName]
-      if (!value) {
-        value = this[cachedName] = getter.apply(this)
-      }
+      if (!value) value = this[cachedName] = getter.apply(this)
       return value
     }
   })
 }
 
+// Sender's compressed public key (R), via @noble from the raw private scalar.
 cachedProperty('Rbuf', function () {
-  return this._privateKey.publicKey.toDER(true)
+  var priv = this._privateKey.bn.toBuffer({ size: 32 })
+  return buf(secp256k1.getPublicKey(Uint8Array.from(priv), true))
 })
 
+// ECDH + KDF: S = X(priv * pub); kE||kM = SHA-512(S).
 cachedProperty('kEkM', function () {
-  var r = this._privateKey.bn
-  var KB = this._publicKey.point
-  var P = KB.mul(r)
-  var S = P.getX()
-  var Sbuf = S.toBuffer({ size: 32 })
-  return Hash.sha512(Sbuf)
-})
-
-cachedProperty('kE', function () {
-  return this.kEkM.slice(0, 32)
+  var priv = this._privateKey.bn.toBuffer({ size: 32 })
+  var pub = this._publicKey.toDER() // SEC-encoded; @noble accepts either form
+  var shared = secp256k1.getSharedSecret(Uint8Array.from(priv), Uint8Array.from(pub), true)
+  var Sbuf = shared.slice(1) // drop the 02/03 prefix -> 32-byte X coordinate
+  return buf(sha512(Sbuf))
 })
 
-cachedProperty('kM', function () {
-  return this.kEkM.slice(32, 64)
-})
+cachedProperty('kE', function () { return this.kEkM.slice(0, 32) })
+cachedProperty('kM', function () { return this.kEkM.slice(32, 64) })
 
-// Encrypts the message (String or Buffer).
-// Optional `ivbuf` contains 16-byte Buffer to be used in AES-CBC.
-// By default, `ivbuf` is computed deterministically from message and private key using HMAC-SHA256.
-// Deterministic IV enables end-to-end test vectors for alternative implementations.
-// Note that identical messages have identical ciphertexts. If your protocol does not include some
-// kind of a sequence identifier inside the message *and* it is important to not allow attacker to learn
-// that message is repeated, then you should use custom IV.
-// For random IV, pass `Random.getRandomBuffer(16)` for the second argument.
 ECIES.prototype.encrypt = function (message, ivbuf) {
   if (!Buffer.isBuffer(message)) message = Buffer.from(message)
   if (ivbuf === undefined) {
-    ivbuf = Hash.sha256hmac(message, this._privateKey.toBuffer()).slice(0, 16)
+    ivbuf = hmacSha256(this._privateKey.toBuffer(), message).slice(0, 16)
   }
   var c = AESCBC.encrypt(message, this.kE, ivbuf)
-  var d = Hash.sha256hmac(c, this.kM)
+  var d = hmacSha256(this.kM, c)
   if (this.opts.shortTag) d = d.slice(0, 4)
-  var encbuf
-  if (this.opts.noKey) {
-    encbuf = Buffer.concat([c, d])
-  } else {
-    encbuf = Buffer.concat([this.Rbuf, c, d])
-  }
-  return encbuf
+  if (this.opts.noKey) return Buffer.concat([c, d])
+  return Buffer.concat([this.Rbuf, c, d])
 }
 
 ECIES.prototype.decrypt = function (encbuf) {
   $.checkArgument(encbuf)
   var offset = 0
-  var tagLength = 32
-  if (this.opts.shortTag) {
-    tagLength = 4
-  }
+  var tagLength = this.opts.shortTag ? 4 : 32
   if (!this.opts.noKey) {
     var pub
     switch (encbuf[0]) {
-      case 4:
-        pub = encbuf.slice(0, 65)
-        break
+      case 4: pub = encbuf.slice(0, 65); break
       case 3:
-      case 2:
-        pub = encbuf.slice(0, 33)
-        break
-      default:
-        throw new Error('Invalid type: ' + encbuf[0])
+      case 2: pub = encbuf.slice(0, 33); break
+      default: throw new Error('Invalid type: ' + encbuf[0])
     }
     this._publicKey = PublicKey.fromDER(pub)
     offset += pub.length
@@ -160,13 +135,9 @@ ECIES.prototype.decrypt = function (encbuf) {
   var c = encbuf.slice(offset, encbuf.length - tagLength)
   var d = encbuf.slice(encbuf.length - tagLength, encbuf.length)
 
-  var d2 = Hash.sha256hmac(c, this.kM)
+  var d2 = hmacSha256(this.kM, c)
   if (this.opts.shortTag) d2 = d2.slice(0, 4)
-
-  // Constant-time MAC comparison (encrypt-then-MAC verification).
-  if (!constantTimeEqual(d, d2)) {
-    throw new Error('Invalid checksum')
-  }
+  if (!constantTimeEqual(d, d2)) throw new Error('Invalid checksum')
 
   return AESCBC.decrypt(c, this.kE)
 }

package/lib/ecies/electrum-ecies.js

@@ -1,15 +1,24 @@
 'use strict'
 
+// Electrum BIE1 ECIES, backed by the audited @noble suite. Wire format unchanged
+// and byte-compatible with prior versions (locked by the golden known-answer
+// vector in test/ecies/electrum-ecies.js).
+
 var bsv = require('../../')
 
 var PublicKey = bsv.PublicKey
 var PrivateKey = bsv.PrivateKey
-var Hash = bsv.crypto.Hash
 var $ = bsv.util.preconditions
 var bitcoreECIES = require('./bitcore-ecies')
 var errors = require('./errors')
-var aesjs = require('aes-js')
-var CBC = aesjs.ModeOfOperation.cbc
+
+var { secp256k1 } = require('@noble/curves/secp256k1.js')
+var { sha512, sha256 } = require('@noble/hashes/sha2.js')
+var { hmac } = require('@noble/hashes/hmac.js')
+var { cbc } = require('@noble/ciphers/aes.js')
+
+function buf (u8) { return Buffer.from(u8.buffer, u8.byteOffset, u8.byteLength) }
+function sha256hmac (data, key) { return buf(hmac(sha256, key, data)) }
 
 var AESCBC = function AESCBC () {}
 
@@ -19,10 +28,7 @@ AESCBC.encrypt = function (messagebuf, keybuf, ivbuf) {
   $.checkArgument(ivbuf)
   $.checkArgument(keybuf.length === 16, 'keybuf length must be 16')
   $.checkArgument(ivbuf.length === 16, 'ivbuf length must be 16')
-  messagebuf = aesjs.padding.pkcs7.pad(messagebuf)
-  var aesCbc = new CBC(keybuf, ivbuf)
-  var encryptedBytes = aesCbc.encrypt(messagebuf)
-  return Buffer.from(encryptedBytes)
+  return buf(cbc(Uint8Array.from(keybuf), Uint8Array.from(ivbuf)).encrypt(Uint8Array.from(messagebuf)))
 }
 
 AESCBC.decrypt = function (encbuf, keybuf, ivbuf) {
@@ -31,35 +37,14 @@ AESCBC.decrypt = function (encbuf, keybuf, ivbuf) {
   $.checkArgument(ivbuf)
   $.checkArgument(keybuf.length === 16, 'keybuf length must be 16')
   $.checkArgument(ivbuf.length === 16, 'ivbuf length must be 16')
-  var aesCbc = new CBC(keybuf, ivbuf)
-  var decryptedBytes = aesCbc.decrypt(encbuf)
-  return Buffer.from(aesjs.padding.pkcs7.strip(decryptedBytes))
+  return buf(cbc(Uint8Array.from(keybuf), Uint8Array.from(ivbuf)).decrypt(Uint8Array.from(encbuf)))
 }
 
-// Electrum BIE1 ECIES
-// Difference from Original Bitcore ECIES:
-//  BIE1:
-//      1.Secret S is compressed P(33 bytes), while Bitcore's Secret is Px(32 bytes). See ivkEkM.
-//      2.use AES-128-CBC instead of AES-256-CBC.
-//      3.IV is retrived from first 16 bytes of Hashed Secret Buffer. See iv
-//      4.key Encryption(kE) is retrived from 17-32 bytes of Hashed Secret Buffer, instead of 1-32 bytes. See kE
-//      5.a magic word 'BIE1' is used to identify message type.
-//      6.ephemeral key is introduced, so you can encrypt messages only with public key.
-//      7.HMAC is whole message.
-//  Notice:
-//      Electrum does not support shortTag nor noKey
-//      Do NOT use those 2 options if you are to send a message to Electrum
-//      Encrypted message is NOT recoverable if you use ephemeral key
-//  Security:
-//
-
-// Default algorithm is set to BIE1, however original Bitcore ECIES is still preserved.
 var ECIES = function ECIES (opts, algorithm = 'BIE1') {
   if (algorithm !== 'BIE1') throw new errors.UnsupportAlgorithm(algorithm)
   if (!(this instanceof ECIES)) {
     return new ECIES(opts, algorithm)
   }
-  // use ephemeral key if privateKey is not set.
   this._privateKey = new bsv.PrivateKey()
   this.opts = opts || {}
   this.opts.ephemeralKey = true
@@ -67,19 +52,15 @@ var ECIES = function ECIES (opts, algorithm = 'BIE1') {
 
 ECIES.prototype.privateKey = function (privateKey) {
   $.checkArgument(PrivateKey.isValid(privateKey), 'no private key provided')
-
   this._privateKey = PrivateKey(privateKey.toHex()) || null
   this.opts.ephemeralKey = false
-
   return this
 }
 
 ECIES.prototype.publicKey = function (publicKey) {
   $.checkArgument(PublicKey.isValid(publicKey), 'no public key provided')
-
   this._publicKey = PublicKey(publicKey.toString()) || null
   if (this._publicKey != null) this.opts.fixedPublicKey = true
-
   return this
 }
 
@@ -97,31 +78,21 @@ var defineProperty = function (name, getter) {
 }
 
 defineProperty('Rbuf', function () {
-  return this._privateKey.publicKey.toDER(true)
+  var priv = this._privateKey.bn.toBuffer({ size: 32 })
+  return buf(secp256k1.getPublicKey(Uint8Array.from(priv), true))
 })
 
 defineProperty('ivkEkM', function () {
-  var r = this._privateKey.bn
-  var KB = this._publicKey.point
-  var P = KB.mul(r)
-  var S = PublicKey(P)
-  var Sbuf = S.toBuffer()
-  return Hash.sha512(Sbuf)
+  var priv = this._privateKey.bn.toBuffer({ size: 32 })
+  var pub = this._publicKey.toDER()
+  var Sbuf = secp256k1.getSharedSecret(Uint8Array.from(priv), Uint8Array.from(pub), true)
+  return buf(sha512(Sbuf))
 })
 
-defineProperty('iv', function () {
-  return this.ivkEkM.slice(0, 16)
-})
-
-defineProperty('kE', function () {
-  return this.ivkEkM.slice(16, 32)
-})
+defineProperty('iv', function () { return this.ivkEkM.slice(0, 16) })
+defineProperty('kE', function () { return this.ivkEkM.slice(16, 32) })
+defineProperty('kM', function () { return this.ivkEkM.slice(32, 64) })
 
-defineProperty('kM', function () {
-  return this.ivkEkM.slice(32, 64)
-})
-
-// Encrypts the message (String or Buffer).
 ECIES.prototype.encrypt = function (message) {
   if (!Buffer.isBuffer(message)) message = Buffer.from(message)
   var ciphertext = AESCBC.encrypt(message, this.kE, this.iv)
@@ -132,48 +103,37 @@ ECIES.prototype.encrypt = function (message) {
   } else {
     encbuf = Buffer.concat([BIE1, this.Rbuf, ciphertext])
   }
-  var hmac = Hash.sha256hmac(encbuf, this.kM)
-  if (this.opts.shortTag) hmac = hmac.slice(0, 4)
-  return Buffer.concat([encbuf, hmac])
+  var tag = sha256hmac(encbuf, this.kM)
+  if (this.opts.shortTag) tag = tag.slice(0, 4)
+  return Buffer.concat([encbuf, tag])
 }
 
 ECIES.prototype.decrypt = function (encbuf) {
   $.checkArgument(Buffer.isBuffer(encbuf), 'ciphetext must be a buffer')
-  var tagLength = 32
+  var tagLength = this.opts.shortTag ? 4 : 32
   var offset = 4
-  if (this.opts.shortTag) {
-    tagLength = 4
-  }
   var magic = encbuf.slice(0, 4)
   if (!magic.equals(Buffer.from('BIE1'))) {
     throw new errors.DecryptionError('Invalid Magic')
   }
   if (!this.opts.noKey) {
-    var pub
-    // BIE1 use compressed public key, length is always 33.
-    pub = encbuf.slice(4, 37)
+    var pub = encbuf.slice(4, 37)
     if (this.opts.fixedPublicKey) console.log('Notice: Overriding PublicKey in message. Consider use "noKey" option if you are not sending message to electrum and do not want to use ephemeral key')
     else this._publicKey = PublicKey.fromDER(pub)
     offset = 37
   }
 
   var ciphertext = encbuf.slice(offset, encbuf.length - tagLength)
-  var hmac = encbuf.slice(encbuf.length - tagLength, encbuf.length)
+  var tag = encbuf.slice(encbuf.length - tagLength, encbuf.length)
 
-  var hmac2 = Hash.sha256hmac(encbuf.slice(0, encbuf.length - tagLength), this.kM)
-  if (this.opts.shortTag) hmac2 = hmac2.slice(0, 4)
+  var tag2 = sha256hmac(encbuf.slice(0, encbuf.length - tagLength), this.kM)
+  if (this.opts.shortTag) tag2 = tag2.slice(0, 4)
 
-  // Constant-time tag comparison. Buffer.equals() short-circuits on the first
-  // differing byte, which leaks how many leading bytes matched and enables a
-  // forgery oracle on the MAC; compare every byte unconditionally instead
-  // (mirrors the loop in bitcore-ecies.js).
-  if (hmac.length !== hmac2.length) {
+  if (tag.length !== tag2.length) {
     throw new errors.DecryptionError('Invalid checksum')
   }
   var equal = 0
-  for (var i = 0; i < hmac2.length; i++) {
-    equal |= (hmac[i] ^ hmac2[i])
-  }
+  for (var i = 0; i < tag2.length; i++) equal |= (tag[i] ^ tag2[i])
   if (equal !== 0) {
     throw new errors.DecryptionError('Invalid checksum')
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smartledger/bsv",
-  "version": "5.0.1",
+  "version": "5.2.0",
   "description": "🚀 Complete Bitcoin SV development framework with legally-recognizable DID:web + W3C VC-JWT toolkit, Legal Token Protocol (LTP), Global Digital Attestation Framework (GDAF), StatusList2021 revocation, and 16 flexible loading options. Standards-based credentials with ES256/ES256K support, on-chain BSV anchoring, and comprehensive Bitcoin SV API. Perfect for legal tokens, verifiable credentials, DeFi, smart contracts, and secure Bitcoin applications.",
   "author": "SmartLedger Technology <hello@smartledger.technology> (https://smartledger.technology)",
   "homepage": "https://github.com/codenlighten/smartledger-bsv#readme",
@@ -40,22 +40,22 @@
     "smart-contracts": "node examples/smart_contract_templates.js",
     "smart-contracts:working": "node examples/final_working_contracts.js",
     "workflow": "node examples/complete_workflow_demo.js",
-    "build-bsv": "NODE_OPTIONS=\"--openssl-legacy-provider\" webpack index.js --config build/webpack.config.js",
-    "build-ecies": "NODE_OPTIONS=\"--openssl-legacy-provider\" webpack ecies/index.js --config build/webpack.subproject.config.js --output-library bsvEcies -o bsv-ecies.min.js",
-    "build-message": "NODE_OPTIONS=\"--openssl-legacy-provider\" webpack message/index.js --config build/webpack.subproject.config.js --output-library bsvMessage -o bsv-message.min.js",
-    "build-mnemonic": "NODE_OPTIONS=\"--openssl-legacy-provider\" webpack mnemonic/index.js --config build/webpack.subproject.config.js --output-library bsvMnemonic -o bsv-mnemonic.min.js",
-    "build-shamir": "NODE_OPTIONS=\"--openssl-legacy-provider\" webpack shamir-entry.js --config build/webpack.subproject.config.js --output-library bsvShamir -o bsv-shamir.min.js",
-    "build-ltp": "NODE_OPTIONS=\"--openssl-legacy-provider\" webpack ltp-entry.js --config build/webpack.ltp.config.js",
-    "build-gdaf": "NODE_OPTIONS=\"--openssl-legacy-provider\" webpack gdaf-entry.js --config build/webpack.gdaf.config.js",
-    "build-smartcontract": "NODE_OPTIONS=\"--openssl-legacy-provider\" webpack smartcontract-entry.js --config build/webpack.smartcontract.config.js",
-    "build-covenant": "NODE_OPTIONS=\"--openssl-legacy-provider\" webpack covenant-entry.js --config build/webpack.covenant.config.js",
-    "build-script-helper": "NODE_OPTIONS=\"--openssl-legacy-provider\" webpack script-helper-entry.js --config build/webpack.script-helper.config.js",
-    "build-security": "NODE_OPTIONS=\"--openssl-legacy-provider\" webpack security-entry.js --config build/webpack.security.config.js",
-    "build-didweb": "NODE_OPTIONS=\"--openssl-legacy-provider\" webpack didweb-entry.js --config build/webpack.didweb.config.js",
-    "build-vcjwt": "NODE_OPTIONS=\"--openssl-legacy-provider\" webpack vcjwt-entry.js --config build/webpack.vcjwt.config.js",
-    "build-statuslist": "NODE_OPTIONS=\"--openssl-legacy-provider\" webpack statuslist-entry.js --config build/webpack.statuslist.config.js",
-    "build-anchor": "NODE_OPTIONS=\"--openssl-legacy-provider\" webpack anchor-entry.js --config build/webpack.anchor.config.js",
-    "build-bundle": "NODE_OPTIONS=\"--openssl-legacy-provider\" webpack bundle-entry.js --config build/webpack.bundle.config.js",
+    "build-bsv": "webpack --config build/webpack.config.js",
+    "build-ecies": "webpack --config build/webpack.ecies.config.js",
+    "build-message": "webpack --config build/webpack.message.config.js",
+    "build-mnemonic": "webpack --config build/webpack.mnemonic.config.js",
+    "build-shamir": "webpack --config build/webpack.shamir.config.js",
+    "build-ltp": "webpack --config build/webpack.ltp.config.js",
+    "build-gdaf": "webpack --config build/webpack.gdaf.config.js",
+    "build-smartcontract": "webpack --config build/webpack.smartcontract.config.js",
+    "build-covenant": "webpack --config build/webpack.covenant.config.js",
+    "build-script-helper": "webpack --config build/webpack.script-helper.config.js",
+    "build-security": "webpack --config build/webpack.security.config.js",
+    "build-didweb": "webpack --config build/webpack.didweb.config.js",
+    "build-vcjwt": "webpack --config build/webpack.vcjwt.config.js",
+    "build-statuslist": "webpack --config build/webpack.statuslist.config.js",
+    "build-anchor": "webpack --config build/webpack.anchor.config.js",
+    "build-bundle": "webpack --config build/webpack.bundle.config.js",
     "build": "npm run build-bsv && npm run build-ecies && npm run build-message && npm run build-mnemonic && npm run build-shamir && npm run build-smartcontract",
     "build-specialized": "npm run build-covenant && npm run build-script-helper && npm run build-security",
     "build-credentials": "npm run build-didweb && npm run build-vcjwt && npm run build-statuslist && npm run build-anchor",
@@ -191,6 +191,9 @@
     "request": "browser-request"
   },
   "dependencies": {
+    "@noble/ciphers": "2.2.0",
+    "@noble/curves": "2.2.0",
+    "@noble/hashes": "2.2.0",
     "aes-js": "^3.1.2",
     "bn.js": "=4.11.9",
     "bs58": "=4.0.1",
@@ -202,15 +205,25 @@
     "unorm": "1.4.1"
   },
   "devDependencies": {
+    "assert": "^2.1.0",
     "brfs": "2.0.1",
+    "browserify-zlib": "^0.2.0",
+    "buffer": "^6.0.3",
     "chai": "4.2.0",
+    "crypto-browserify": "^3.12.1",
     "jose": "^5.10.0",
     "mocha": "^8.4.0",
     "nyc": "^14.1.1",
+    "path-browserify": "^1.0.1",
+    "process": "^0.11.10",
     "sinon": "7.2.3",
     "standard": "12.0.1",
-    "webpack": "4.29.3",
-    "webpack-cli": "^3.3.12"
+    "stream-browserify": "^3.0.0",
+    "terser-webpack-plugin": "^5.6.1",
+    "util": "^0.12.5",
+    "vm-browserify": "^1.1.2",
+    "webpack": "^5.107.2",
+    "webpack-cli": "^5.1.4"
   },
   "license": "MIT",
   "standard": {