@t2000/sdk 8.0.1 → 8.1.0

package/dist/index.js

@@ -11,6 +11,7 @@ import { decodeSuiPrivateKey } from '@mysten/sui/cryptography';
 import { access, mkdir, writeFile, readFile } from 'fs/promises';
 import { join, dirname, resolve } from 'path';
 import { homedir } from 'os';
+import { ed25519 } from '@noble/curves/ed25519';
 import { secp256k1 } from '@noble/curves/secp256k1';
 import { sha256 } from '@noble/hashes/sha256';
 import { hexToBytes, bytesToHex } from '@noble/hashes/utils';
@@ -2074,7 +2075,24 @@ function jcs(value) {
 function verifyReceiptSignature(receipt, signingKeyHex) {
   try {
     const sig = receipt.signature;
-    if (sig?.algo !== "ecdsa-secp256k1" || !sig.value) {
+    if (!sig?.value) {
+      return false;
+    }
+    const endorsed = hexToBytes(signingKeyHex.replace(/^0x/, ""));
+    const sigBytes = hexToBytes(sig.value);
+    if (sig.algo === "ed25519") {
+      if (sigBytes.length !== 64 || endorsed.length !== 32) {
+        return false;
+      }
+      const { value: _omitted, ...sigRest } = sig;
+      const canonical2 = {
+        ...receipt,
+        signature: sigRest
+      };
+      const msg = new TextEncoder().encode(jcs(canonical2));
+      return ed25519.verify(sigBytes, msg, endorsed);
+    }
+    if (sig.algo !== "ecdsa-secp256k1") {
       return false;
     }
     const canonical = {
@@ -2090,7 +2108,6 @@ function verifyReceiptSignature(receipt, signingKeyHex) {
       signature: { algo: sig.algo, key_id: sig.key_id ?? "" }
     };
     const prehash = sha256(new TextEncoder().encode(jcs(canonical)));
-    const sigBytes = hexToBytes(sig.value);
     if (sigBytes.length !== 65) {
       return false;
     }
@@ -2102,8 +2119,7 @@ function verifyReceiptSignature(receipt, signingKeyHex) {
       return false;
     }
     const recovered = secp256k1.Signature.fromCompact(sigBytes.slice(0, 64)).addRecoveryBit(v).recoverPublicKey(prehash).toHex(false);
-    const endorsed = bytesToHex(hexToBytes(signingKeyHex.replace(/^0x/, "")));
-    return recovered.toLowerCase() === endorsed.toLowerCase();
+    return recovered.toLowerCase() === bytesToHex(endorsed).toLowerCase();
   } catch {
     return false;
   }