@t2000/sdk 8.0.1 → 8.1.0

package/dist/index.cjs

@@ -13,6 +13,7 @@ var cryptography = require('@mysten/sui/cryptography');
 var promises = require('fs/promises');
 var path = require('path');
 var os = require('os');
+var ed25519$1 = require('@noble/curves/ed25519');
 var secp256k1 = require('@noble/curves/secp256k1');
 var sha256 = require('@noble/hashes/sha256');
 var utils$1 = require('@noble/hashes/utils');
@@ -2080,7 +2081,24 @@ function jcs(value) {
 function verifyReceiptSignature(receipt, signingKeyHex) {
   try {
     const sig = receipt.signature;
-    if (sig?.algo !== "ecdsa-secp256k1" || !sig.value) {
+    if (!sig?.value) {
+      return false;
+    }
+    const endorsed = utils$1.hexToBytes(signingKeyHex.replace(/^0x/, ""));
+    const sigBytes = utils$1.hexToBytes(sig.value);
+    if (sig.algo === "ed25519") {
+      if (sigBytes.length !== 64 || endorsed.length !== 32) {
+        return false;
+      }
+      const { value: _omitted, ...sigRest } = sig;
+      const canonical2 = {
+        ...receipt,
+        signature: sigRest
+      };
+      const msg = new TextEncoder().encode(jcs(canonical2));
+      return ed25519$1.ed25519.verify(sigBytes, msg, endorsed);
+    }
+    if (sig.algo !== "ecdsa-secp256k1") {
       return false;
     }
     const canonical = {
@@ -2096,7 +2114,6 @@ function verifyReceiptSignature(receipt, signingKeyHex) {
       signature: { algo: sig.algo, key_id: sig.key_id ?? "" }
     };
     const prehash = sha256.sha256(new TextEncoder().encode(jcs(canonical)));
-    const sigBytes = utils$1.hexToBytes(sig.value);
     if (sigBytes.length !== 65) {
       return false;
     }
@@ -2108,8 +2125,7 @@ function verifyReceiptSignature(receipt, signingKeyHex) {
       return false;
     }
     const recovered = secp256k1.secp256k1.Signature.fromCompact(sigBytes.slice(0, 64)).addRecoveryBit(v).recoverPublicKey(prehash).toHex(false);
-    const endorsed = utils$1.bytesToHex(utils$1.hexToBytes(signingKeyHex.replace(/^0x/, "")));
-    return recovered.toLowerCase() === endorsed.toLowerCase();
+    return recovered.toLowerCase() === utils$1.bytesToHex(endorsed).toLowerCase();
   } catch {
     return false;
   }