smartledger-bsv 3.0.1 → 3.0.2

package/CHANGELOG.md

@@ -0,0 +1,111 @@
+# Changelog
+
+All notable changes to SmartLedger-BSV will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [3.0.2] - 2025-10-19
+
+### 🔧 Fixed
+- **CRITICAL**: Fixed signature verification bug that caused all ECDSA.verify() calls to return false
+- **CRITICAL**: Fixed SmartVerify.smartVerify() failure when processing DER-encoded signatures
+- Fixed ECDSA.set() method to automatically parse DER buffers to Signature objects for compatibility
+- Fixed double canonicalization issue in ECDSA.sigError() that corrupted signature verification
+- Fixed SmartVerify.isCanonical() to properly handle DER buffer inputs
+- Enhanced backward compatibility for both canonical and non-canonical signature inputs
+
+### ✨ Added
+- **NEW**: SmartUTXO - Comprehensive UTXO management system for BSV development and testing
+- **NEW**: SmartMiner - BSV blockchain miner simulator with full transaction validation
+- **NEW**: Signature verification validation test suite (`npm run test:signatures`)
+- **NEW**: Blockchain state management with persistent JSON storage
+- **NEW**: Mock UTXO generation for testing and development
+- **NEW**: Transaction mempool simulation and block mining
+- **NEW**: Enhanced development tools for BSV application testing
+
+### 🚀 Enhanced
+- Improved signature verification pipeline for external developer compatibility
+- Enhanced DER buffer parsing throughout the crypto modules
+- Added comprehensive logging and debugging capabilities for development tools
+- Improved error handling and validation in signature processing
+- Added compatibility layer for mixed signature formats (DER buffers + Signature objects)
+
+### 📦 Developer Experience
+- Added `validation_test.js` for signature verification testing
+- Exposed `bsv.SmartUTXO` and `bsv.SmartMiner` modules in main API
+- Enhanced npm scripts with signature testing capabilities
+- Added comprehensive documentation for new UTXO management features
+- Included utilities/ directory in npm package for developer access
+
+### 🐛 Bug Impact
+- **Before**: External developers importing smartledger-bsv experienced 100% signature verification failure
+- **After**: All signature verification methods now work correctly with 100% success rate
+- **Affected Methods**: ECDSA.verify(), SmartVerify.smartVerify(), SmartVerify.isCanonical()
+- **Root Cause**: Double canonicalization and improper DER buffer handling in verification pipeline
+- **Solution**: Enhanced signature object parsing and canonical verification logic
+
+### 📊 Validation Results
+```
+Test Results: 14/14 tests passed (100% success rate)
+✅ ECDSA.verify(hash, derSig, publicKey): true
+✅ ECDSA.verify(hash, canonicalDer, publicKey): true  
+✅ ECDSA.verify(hash, signature, publicKey): true
+✅ SmartVerify.smartVerify(hash, derSig, publicKey): true
+✅ SmartVerify.smartVerify(hash, canonicalDer, publicKey): true
+✅ SmartVerify.isCanonical(derSig): true
+✅ SmartVerify.isCanonical(canonicalDer): true
+```
+
+## [3.0.1] - 2025-10-19
+
+### 🔒 Security
+- Security-hardened Bitcoin SV library with zero known vulnerabilities
+- Enhanced signature canonicalization and malleability protection  
+- Fixed elliptic curve vulnerabilities from upstream dependencies
+- Implemented SmartVerify hardened verification module
+
+### 🏗️ Infrastructure  
+- Complete drop-in replacement for bsv@1.5.6
+- Maintained full API compatibility while enhancing security
+- Added comprehensive security feature documentation
+- Enhanced error handling and input validation
+
+---
+
+## Migration Guide
+
+### From v3.0.1 to v3.0.2
+
+**No Breaking Changes** - This is a bug fix release that maintains full backward compatibility.
+
+**New Features Available:**
+```javascript
+const bsv = require('smartledger-bsv');
+
+// New UTXO Management System
+const utxoManager = new bsv.SmartUTXO();
+const balance = utxoManager.getBalance('1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa');
+
+// New Miner Simulator
+const miner = new bsv.SmartMiner(bsv);
+const accepted = miner.acceptTransaction(transaction);
+const block = miner.mineBlock();
+
+// Signature verification now works correctly
+const verified = bsv.crypto.ECDSA.verify(hash, derSig, publicKey); // Now returns true
+const smartVerified = bsv.SmartVerify.smartVerify(hash, derSig, publicKey); // Now returns true
+```
+
+**Testing Your Integration:**
+```bash
+npm run test:signatures  # Validates signature verification works correctly
+```
+
+---
+
+## Support
+
+- **GitHub**: https://github.com/codenlighten/smartledger-bsv
+- **Issues**: https://github.com/codenlighten/smartledger-bsv/issues
+- **Email**: hello@smartledger.technology