gnache-cli 0.0.1-security → 6.12.2

package/node_modules/secp256k1/API.md

@@ -0,0 +1,116 @@
+## API Reference (v4.x)
+
+- Functions work with [Uint8Array](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Uint8Array). While [Buffer](https://nodejs.org/api/buffer.html) is awesome, current version for browsers ([feross/buffer](https://github.com/feross/buffer/)) is out of date (compare to Node.js Buffer) and in future difference probably will be only bigger. But because Buffer extends Uint8Array, you can pass and receive Buffers easily. Also, work with native Uint8Array reduce final build size, if you do not use Buffer in your browser application.
+
+- Custom type for data output. It's possible pass Buffer or Object which inherits Uint8Array to function for data output. Of course length should match, or you can pass function which accept number of bytes and return instance with specified length.
+
+- In place operations (follow [bitcoin-core/secp256k1](https://github.com/bitcoin-core/secp256k1) API):
+
+  - `privateKeyNegate`
+  - `privateKeyTweakAdd`
+  - `privateKeyTweakMul`
+  - `signatureNormalize`
+
+If you need new instance this can be easily done with creating it before pass to functions. For example:
+
+```js
+const newPrivateKey = secp256k1.privateKeyNegate(Buffer.from(privateKey))
+```
+
+<hr>
+
+- [`.contextRandomize(seed: Uint8Array): void`](#contextrandomizeseed-uint8array-void)
+- [`.privateKeyVerify(privateKey: Uint8Array): boolean`](#privatekeyverifyprivatekey-uint8array-boolean)
+- [`.privateKeyNegate(privateKey: Uint8Array): Uint8Array`](#privatekeynegateprivatekey-uint8array-uint8array)
+- [`.privateKeyTweakAdd(privateKey: Uint8Array, tweak: Uint8Array): Uint8Array`](#privatekeytweakaddprivatekey-uint8array-tweak-uint8array-uint8array)
+- [`.privateKeyTweakMul(privateKey: Uint8Array, tweak: Uint8Array): Uint8Array`](#privatekeytweakmulprivatekey-uint8array-tweak-uint8array-uint8array)
+- [`.publicKeyVerify(publicKey: Uint8Array): boolean`](#publickeyverifypublickey-uint8array-boolean)
+- [`.publicKeyCreate(privateKey: Uint8Array, compressed: boolean = true, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array`](#publickeycreateprivatekey-uint8array-compressed-boolean--true-output-uint8array--len-number--uint8array--len--new-uint8arraylen-uint8array)
+- [`.publicKeyConvert(publicKey: Uint8Array, compressed: boolean = true, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array`](#publickeyconvertpublickey-uint8array-compressed-boolean--true-output-uint8array--len-number--uint8array--len--new-uint8arraylen-uint8array)
+- [`.publicKeyNegate(publicKey: Uint8Array, compressed: boolean = true, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array`](#publickeynegatepublickey-uint8array-compressed-boolean--true-output-uint8array--len-number--uint8array--len--new-uint8arraylen-uint8array)
+- [`.publicKeyCombine(publicKeys: Uint8Array[], compressed: boolean = true, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array`](#publickeycombinepublickeys-uint8array-compressed-boolean--true-output-uint8array--len-number--uint8array--len--new-uint8arraylen-uint8array)
+- [`.publicKeyTweakAdd(publicKey: Uint8Array, tweak: Uint8Array, compressed: boolean = true, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array`](#publickeytweakaddpublickey-uint8array-tweak-uint8array-compressed-boolean--true-output-uint8array--len-number--uint8array--len--new-uint8arraylen-uint8array)
+- [`.publicKeyTweakMul(publicKey: Uint8Array, tweak: Uint8Array, compressed: boolean = true, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array`](#publickeytweakmulpublickey-uint8array-tweak-uint8array-compressed-boolean--true-output-uint8array--len-number--uint8array--len--new-uint8arraylen-uint8array)
+- [`.signatureNormalize(signature: Uint8Array): Uint8Array`](#signaturenormalizesignature-uint8array-uint8array)
+- [`.signatureExport(signature, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array`](#signatureexportsignature-output-uint8array--len-number--uint8array--len--new-uint8arraylen-uint8array)
+- [`.signatureImport(signature, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array`](#signatureimportsignature-output-uint8array--len-number--uint8array--len--new-uint8arraylen-uint8array)
+- [`.ecdsaSign(message: Uint8Array, privateKey: Uint8Array, { data, noncefn }: { data?: Uint8Array, noncefn?: ((message: Uint8Array, privateKey: Uint8Array, algo: null, data: Uint8Array, counter: number) => Uint8Array) } = {}, output: Uint8Array | ((len: number) => Uint8Array)): { signature: Uint8Array, recid: number }`](#ecdsasignmessage-uint8array-privatekey-uint8array--data-noncefn---data-uint8array-noncefn-message-uint8array-privatekey-uint8array-algo-null-data-uint8array-counter-number--uint8array----output-uint8array--len-number--uint8array--signature-uint8array-recid-number-)
+- [`.ecdsaVerify(signature: Uint8Array, message: Uint8Array, publicKey: Uint8Array): boolean`](#ecdsaverifysignature-uint8array-message-uint8array-publickey-uint8array-boolean)
+- [`.ecdsaRecover(signature: Uint8Array, recid: number, message: Uint8Array, compressed: boolean = true, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array`](#ecdsarecoversignature-uint8array-recid-number-message-uint8array-compressed-boolean--true-output-uint8array--len-number--uint8array--len--new-uint8arraylen-uint8array)
+- [`.ecdh(publicKey: Uint8Array, privateKey: Uint8Array, { data, xbuf, ybuf, hashfn }: { data?: Uint8Array, xbuf?: Uint8Array, ybuf?: Uint8Array, hashfn?: ((x: Uint8Array, y: Uint8Array, data: Uint8Array) => Uint8Array) } = {}, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array`](#ecdhpublickey-uint8array-privatekey-uint8array--data-xbuf-ybuf-hashfn---data-uint8array-xbuf-uint8array-ybuf-uint8array-hashfn-x-uint8array-y-uint8array-data-uint8array--uint8array----output-uint8array--len-number--uint8array--len--new-uint8arraylen-uint8array)
+
+##### .contextRandomize(seed: Uint8Array): void
+
+Updates the context randomization to protect against side-channel leakage, `seed` should be Uint8Array with length 32.
+
+##### .privateKeyVerify(privateKey: Uint8Array): boolean
+
+Verify a private key.
+
+##### .privateKeyNegate(privateKey: Uint8Array): Uint8Array
+
+Negate a private key in place and return result.
+
+##### .privateKeyTweakAdd(privateKey: Uint8Array, tweak: Uint8Array): Uint8Array
+
+Tweak a private key in place by adding tweak to it.
+
+##### .privateKeyTweakMul(privateKey: Uint8Array, tweak: Uint8Array): Uint8Array
+
+Tweak a private key in place by multiplying it by a tweak.
+
+##### .publicKeyVerify(publicKey: Uint8Array): boolean
+
+Verify a public key.
+
+##### .publicKeyCreate(privateKey: Uint8Array, compressed: boolean = true, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array
+
+Compute the public key for a secret key.
+
+##### .publicKeyConvert(publicKey: Uint8Array, compressed: boolean = true, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array
+
+Reserialize public key to another format.
+
+##### .publicKeyNegate(publicKey: Uint8Array, compressed: boolean = true, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array
+
+Negates a public key in place.
+
+##### .publicKeyCombine(publicKeys: Uint8Array[], compressed: boolean = true, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array
+
+Add a number of public keys together.
+
+##### .publicKeyTweakAdd(publicKey: Uint8Array, tweak: Uint8Array, compressed: boolean = true, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array
+
+Tweak a public key by adding tweak times the generator to it.
+
+##### .publicKeyTweakMul(publicKey: Uint8Array, tweak: Uint8Array, compressed: boolean = true, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array
+
+Tweak a public key by multiplying it by a tweak value.
+
+##### .signatureNormalize(signature: Uint8Array): Uint8Array
+
+Convert a signature to a normalized lower-S form in place.
+
+##### .signatureExport(signature, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array
+
+Export an ECDSA signature to DER format.
+
+##### .signatureImport(signature, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array
+
+Parse a DER ECDSA signature.
+
+##### .ecdsaSign(message: Uint8Array, privateKey: Uint8Array, { data, noncefn }: { data?: Uint8Array, noncefn?: ((message: Uint8Array, privateKey: Uint8Array, algo: null, data: Uint8Array, counter: number) => Uint8Array) } = {}, output: Uint8Array | ((len: number) => Uint8Array)): { signature: Uint8Array, recid: number }
+
+Create an ECDSA signature.
+
+##### .ecdsaVerify(signature: Uint8Array, message: Uint8Array, publicKey: Uint8Array): boolean
+
+Verify an ECDSA signature.
+
+##### .ecdsaRecover(signature: Uint8Array, recid: number, message: Uint8Array, compressed: boolean = true, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array
+
+Recover an ECDSA public key from a signature.
+
+##### .ecdh(publicKey: Uint8Array, privateKey: Uint8Array, { data, xbuf, ybuf, hashfn }: { data?: Uint8Array, xbuf?: Uint8Array, ybuf?: Uint8Array, hashfn?: ((x: Uint8Array, y: Uint8Array, data: Uint8Array) => Uint8Array) } = {}, output: Uint8Array | ((len: number) => Uint8Array) = (len) => new Uint8Array(len)): Uint8Array
+
+Compute an EC Diffie-Hellman secret in constant time.

package/node_modules/secp256k1/LICENSE

@@ -0,0 +1,24 @@
+The MIT License (MIT)
+
+Copyright (c) 2014-2016 secp256k1-node contributors
+
+Parts of this software are based on bn.js, elliptic, hash.js
+Copyright (c) 2014-2016 Fedor Indutny
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

package/node_modules/secp256k1/README.md

@@ -0,0 +1,117 @@
+# secp256k1-node
+
+This module provides native bindings to [bitcoin-core/secp256k1](https://github.com/bitcoin-core/secp256k1). In browser [elliptic](https://github.com/indutny/elliptic) will be used as fallback.
+
+Works on node version 10.0.0 or greater, because use [N-API](https://nodejs.org/api/n-api.html).
+
+## Installation
+
+##### from npm
+
+`npm install secp256k1`
+
+##### from git
+
+```
+git clone git@github.com:cryptocoinjs/secp256k1-node.git
+cd secp256k1-node
+git submodule update --init
+npm install
+```
+
+##### Windows
+
+The easiest way to build the package on windows is to install [windows-build-tools](https://github.com/felixrieseberg/windows-build-tools).
+
+Or install the following software:
+
+  * Git: https://git-scm.com/download/win
+  * nvm: https://github.com/coreybutler/nvm-windows
+  * Python 2.7: https://www.python.org/downloads/release/python-2712/
+  * Visual C++ Build Tools: http://landinghub.visualstudio.com/visual-cpp-build-tools (Custom Install, and select both Windows 8.1 and Windows 10 SDKs)
+
+And run commands:
+
+```
+npm config set msvs_version 2015 --global
+npm install npm@next -g
+```
+
+Based on:
+
+  * https://github.com/nodejs/node-gyp/issues/629#issuecomment-153196245
+  * https://github.com/nodejs/node-gyp/issues/972
+
+## Usage
+
+* [API Reference (v4.x)](API.md) (current version)
+* [API Reference (v3.x)](https://github.com/cryptocoinjs/secp256k1-node/blob/v3.x/API.md)
+* [API Reference (v2.x)](https://github.com/cryptocoinjs/secp256k1-node/blob/v2.x/API.md)
+
+##### Private Key generation, Public Key creation, signature creation, signature verification
+
+```js
+const { randomBytes } = require('crypto')
+const secp256k1 = require('secp256k1')
+// or require('secp256k1/elliptic')
+//   if you want to use pure js implementation in node
+
+// generate message to sign
+// message should have 32-byte length, if you have some other length you can hash message
+// for example `msg = sha256(rawMessage)`
+const msg = randomBytes(32)
+
+// generate privKey
+let privKey
+do {
+  privKey = randomBytes(32)
+} while (!secp256k1.privateKeyVerify(privKey))
+
+// get the public key in a compressed format
+const pubKey = secp256k1.publicKeyCreate(privKey)
+
+// sign the message
+const sigObj = secp256k1.ecdsaSign(msg, privKey)
+
+// verify the signature
+console.log(secp256k1.ecdsaVerify(sigObj.signature, msg, pubKey))
+// => true
+```
+
+\* **.verify return false for high signatures**
+
+##### Get X point of ECDH
+
+```js
+const { randomBytes } = require('crypto')
+// const secp256k1 = require('./elliptic')
+const secp256k1 = require('./')
+
+// generate privKey
+function getPrivateKey () {
+  while (true) {
+    const privKey = randomBytes(32)
+    if (secp256k1.privateKeyVerify(privKey)) return privKey
+  }
+}
+
+// generate private and public keys
+const privKey = getPrivateKey()
+const pubKey = secp256k1.publicKeyCreate(getPrivateKey())
+
+// compressed public key from X and Y
+function hashfn (x, y) {
+  const pubKey = new Uint8Array(33)
+  pubKey[0] = (y[31] & 1) === 0 ? 0x02 : 0x03
+  pubKey.set(x, 1)
+  return pubKey
+}
+
+// get X point of ecdh
+const ecdhPointX = secp256k1.ecdh(pubKey, privKey, { hashfn }, Buffer.alloc(33))
+console.log(ecdhPointX.toString('hex'))
+```
+
+## LICENSE
+
+This library is free and open-source software released under the MIT license.

package/node_modules/secp256k1/binding.gyp

@@ -0,0 +1,100 @@
+{
+  'variables': {
+    'arch': '<!(node -p "process.arch")',
+  },
+  'target_default': {
+    'cflags': [
+      '-Wall',
+      '-Wextra',
+    ],
+  },
+  'targets': [
+    {
+      'target_name': 'secp256k1',
+      'type': 'static_library',
+      'sources': [
+        'src/secp256k1/src/secp256k1.c',
+      ],
+      'include_dirs': [
+        'src/secp256k1',
+        'src/secp256k1/src',
+      ],
+      'cflags': [
+        '-Wno-unused-function',
+        '-Wno-nonnull-compare',
+      ],
+      'defines': [
+        # DETERMINISTIC introduced in https://github.com/bitcoin-core/secp256k1/pull/107
+        # Callbacks introduced in https://github.com/bitcoin-core/secp256k1/pull/278
+        # External callbacks introduced in https://github.com/bitcoin-core/secp256k1/pull/595
+        #
+        # USE_EXTERNAL_DEFAULT_CALLBACKS only for WASM, where we ignore all illegal/error callbacks
+        # CHECK uses `fprintf()`, `abort()` and `stderr`, but only if we use GMP or define VERIFY
+        # Because we do not use GMP, DETERMINISTIC is not used.
+        # 'DETERMINISTIC=1',
+        #
+        # For all available definitions, see src/basic-config.h
+        # Current default values for desktop (544002c at 24.11.2019)
+        'ECMULT_GEN_PREC_BITS=4',
+        'ECMULT_WINDOW_SIZE=15',
+        # Activate modules
+        'ENABLE_MODULE_ECDH=1',
+        'ENABLE_MODULE_RECOVERY=1',
+        #
+        'USE_ENDOMORPHISM=1',
+        # Ignore GMP, dynamic linking, so will be hard to use with prebuilds
+        'USE_NUM_NONE=1',
+        'USE_FIELD_INV_BUILTIN=1',
+        'USE_SCALAR_INV_BUILTIN=1',
+      ],
+      'conditions': [
+        ['target_arch=="x64" and OS!="win"', {
+          'defines': [
+            'HAVE___INT128=1',
+            'USE_ASM_X86_64=1',
+            'USE_FIELD_5X52=1',
+            'USE_SCALAR_4X64=1',
+          ]
+        }, {
+          'defines': [
+            'USE_FIELD_10X26=1',
+            'USE_SCALAR_8X32=1',
+          ]
+        }],
+      ],
+    },
+    {
+      'target_name': 'addon',
+      'dependencies': [
+        'secp256k1',
+      ],
+      'sources': [
+        'src/addon.cc',
+        'src/secp256k1.cc',
+      ],
+      'include_dirs': [
+        '<!@(node -p "require(\'node-addon-api\').include")',
+        'src',
+      ],
+      'cflags!': [
+        '-fno-exceptions',
+      ],
+      'cflags_cc!': [
+        '-fno-exceptions',
+      ],
+      'defines': [
+        'NAPI_VERSION=3',
+      ],
+      'xcode_settings': {
+        'GCC_ENABLE_CPP_EXCEPTIONS': 'YES',
+        'CLANG_CXX_LIBRARY': 'libc++',
+        'MACOSX_DEPLOYMENT_TARGET': '10.7',
+      },
+      'msvs_settings': {
+        'VCCLCompilerTool': {
+          'ExceptionHandling': 1,
+        },
+      },
+    },
+  ],
+}

package/node_modules/secp256k1/bindings.js

@@ -0,0 +1,2 @@
+const addon = require('node-gyp-build')(__dirname)
+module.exports = require('./lib')(new addon.Secp256k1())

package/node_modules/secp256k1/elliptic.js

@@ -0,0 +1 @@
+module.exports = require('./lib')(require('./lib/elliptic'))

package/node_modules/secp256k1/index.js

@@ -0,0 +1,5 @@
+try {
+  module.exports = require('./bindings')
+} catch (err) {
+  module.exports = require('./elliptic')
+}