367 lines
17 KiB
Python
367 lines
17 KiB
Python
import base64
|
|
import unittest
|
|
import sys
|
|
from ecdsa.util import number_to_string
|
|
|
|
from lib.bitcoin import (
|
|
generator_secp256k1, point_to_ser, public_key_to_p2pkh, EC_KEY,
|
|
bip32_root, bip32_public_derivation, bip32_private_derivation, pw_encode,
|
|
pw_decode, Hash, public_key_from_private_key, address_from_private_key,
|
|
is_address, is_private_key, xpub_from_xprv, is_new_seed, is_old_seed,
|
|
var_int, op_push, address_to_script, regenerate_key,
|
|
verify_message, deserialize_privkey, serialize_privkey, is_segwit_address,
|
|
is_b58_address, address_to_scripthash, is_minikey, is_compressed, is_xpub,
|
|
xpub_type, is_xprv, is_bip32_derivation)
|
|
from lib.util import bfh
|
|
|
|
try:
|
|
import ecdsa
|
|
except ImportError:
|
|
sys.exit("Error: python-ecdsa does not seem to be installed. Try 'sudo pip install ecdsa'")
|
|
|
|
|
|
class Test_bitcoin(unittest.TestCase):
|
|
|
|
def test_crypto(self):
|
|
for message in [b"Chancellor on brink of second bailout for banks", b'\xff'*512]:
|
|
self._do_test_crypto(message)
|
|
|
|
def _do_test_crypto(self, message):
|
|
G = generator_secp256k1
|
|
_r = G.order()
|
|
pvk = ecdsa.util.randrange( pow(2,256) ) %_r
|
|
|
|
Pub = pvk*G
|
|
pubkey_c = point_to_ser(Pub,True)
|
|
#pubkey_u = point_to_ser(Pub,False)
|
|
addr_c = public_key_to_p2pkh(pubkey_c)
|
|
|
|
#print "Private key ", '%064x'%pvk
|
|
eck = EC_KEY(number_to_string(pvk,_r))
|
|
|
|
#print "Compressed public key ", pubkey_c.encode('hex')
|
|
enc = EC_KEY.encrypt_message(message, pubkey_c)
|
|
dec = eck.decrypt_message(enc)
|
|
self.assertEqual(message, dec)
|
|
|
|
#print "Uncompressed public key", pubkey_u.encode('hex')
|
|
#enc2 = EC_KEY.encrypt_message(message, pubkey_u)
|
|
dec2 = eck.decrypt_message(enc)
|
|
self.assertEqual(message, dec2)
|
|
|
|
signature = eck.sign_message(message, True)
|
|
#print signature
|
|
EC_KEY.verify_message(eck, signature, message)
|
|
|
|
def test_msg_signing(self):
|
|
msg1 = b'Chancellor on brink of second bailout for banks'
|
|
msg2 = b'Electrum'
|
|
|
|
def sign_message_with_wif_privkey(wif_privkey, msg):
|
|
txin_type, privkey, compressed = deserialize_privkey(wif_privkey)
|
|
key = regenerate_key(privkey)
|
|
return key.sign_message(msg, compressed)
|
|
|
|
sig1 = sign_message_with_wif_privkey(
|
|
'L1TnU2zbNaAqMoVh65Cyvmcjzbrj41Gs9iTLcWbpJCMynXuap6UN', msg1)
|
|
addr1 = '15hETetDmcXm1mM4sEf7U2KXC9hDHFMSzz'
|
|
sig2 = sign_message_with_wif_privkey(
|
|
'5Hxn5C4SQuiV6e62A1MtZmbSeQyrLFhu5uYks62pU5VBUygK2KD', msg2)
|
|
addr2 = '1GPHVTY8UD9my6jyP4tb2TYJwUbDetyNC6'
|
|
|
|
sig1_b64 = base64.b64encode(sig1)
|
|
sig2_b64 = base64.b64encode(sig2)
|
|
|
|
self.assertEqual(sig1_b64, b'H/9jMOnj4MFbH3d7t4yCQ9i7DgZU/VZ278w3+ySv2F4yIsdqjsc5ng3kmN8OZAThgyfCZOQxZCWza9V5XzlVY0Y=')
|
|
self.assertEqual(sig2_b64, b'G84dmJ8TKIDKMT9qBRhpX2sNmR0y5t+POcYnFFJCs66lJmAs3T8A6Sbpx7KA6yTQ9djQMabwQXRrDomOkIKGn18=')
|
|
|
|
self.assertTrue(verify_message(addr1, sig1, msg1))
|
|
self.assertTrue(verify_message(addr2, sig2, msg2))
|
|
|
|
self.assertFalse(verify_message(addr1, b'wrong', msg1))
|
|
self.assertFalse(verify_message(addr1, sig2, msg1))
|
|
|
|
def test_aes_homomorphic(self):
|
|
"""Make sure AES is homomorphic."""
|
|
payload = u'\u66f4\u7a33\u5b9a\u7684\u4ea4\u6613\u5e73\u53f0'
|
|
password = u'secret'
|
|
enc = pw_encode(payload, password)
|
|
dec = pw_decode(enc, password)
|
|
self.assertEqual(dec, payload)
|
|
|
|
def test_aes_encode_without_password(self):
|
|
"""When not passed a password, pw_encode is noop on the payload."""
|
|
payload = u'\u66f4\u7a33\u5b9a\u7684\u4ea4\u6613\u5e73\u53f0'
|
|
enc = pw_encode(payload, None)
|
|
self.assertEqual(payload, enc)
|
|
|
|
def test_aes_deencode_without_password(self):
|
|
"""When not passed a password, pw_decode is noop on the payload."""
|
|
payload = u'\u66f4\u7a33\u5b9a\u7684\u4ea4\u6613\u5e73\u53f0'
|
|
enc = pw_decode(payload, None)
|
|
self.assertEqual(payload, enc)
|
|
|
|
def test_aes_decode_with_invalid_password(self):
|
|
"""pw_decode raises an Exception when supplied an invalid password."""
|
|
payload = u"blah"
|
|
password = u"uber secret"
|
|
wrong_password = u"not the password"
|
|
enc = pw_encode(payload, password)
|
|
self.assertRaises(Exception, pw_decode, enc, wrong_password)
|
|
|
|
def test_hash(self):
|
|
"""Make sure the Hash function does sha256 twice"""
|
|
payload = u"test"
|
|
expected = b'\x95MZI\xfdp\xd9\xb8\xbc\xdb5\xd2R&x)\x95\x7f~\xf7\xfalt\xf8\x84\x19\xbd\xc5\xe8"\t\xf4'
|
|
|
|
result = Hash(payload)
|
|
self.assertEqual(expected, result)
|
|
|
|
def test_var_int(self):
|
|
for i in range(0xfd):
|
|
self.assertEqual(var_int(i), "{:02x}".format(i) )
|
|
|
|
self.assertEqual(var_int(0xfd), "fdfd00")
|
|
self.assertEqual(var_int(0xfe), "fdfe00")
|
|
self.assertEqual(var_int(0xff), "fdff00")
|
|
self.assertEqual(var_int(0x1234), "fd3412")
|
|
self.assertEqual(var_int(0xffff), "fdffff")
|
|
self.assertEqual(var_int(0x10000), "fe00000100")
|
|
self.assertEqual(var_int(0x12345678), "fe78563412")
|
|
self.assertEqual(var_int(0xffffffff), "feffffffff")
|
|
self.assertEqual(var_int(0x100000000), "ff0000000001000000")
|
|
self.assertEqual(var_int(0x0123456789abcdef), "ffefcdab8967452301")
|
|
|
|
def test_op_push(self):
|
|
self.assertEqual(op_push(0x00), '00')
|
|
self.assertEqual(op_push(0x12), '12')
|
|
self.assertEqual(op_push(0x4b), '4b')
|
|
self.assertEqual(op_push(0x4c), '4c4c')
|
|
self.assertEqual(op_push(0xfe), '4cfe')
|
|
self.assertEqual(op_push(0xff), '4dff00')
|
|
self.assertEqual(op_push(0x100), '4d0001')
|
|
self.assertEqual(op_push(0x1234), '4d3412')
|
|
self.assertEqual(op_push(0xfffe), '4dfeff')
|
|
self.assertEqual(op_push(0xffff), '4effff0000')
|
|
self.assertEqual(op_push(0x10000), '4e00000100')
|
|
self.assertEqual(op_push(0x12345678), '4e78563412')
|
|
|
|
# TODO testnet addresses
|
|
def test_address_to_script(self):
|
|
# bech32 native segwit
|
|
# test vectors from BIP-0173
|
|
self.assertEqual(address_to_script('BC1QW508D6QEJXTDG4Y5R3ZARVARY0C5XW7KV8F3T4'), '0014751e76e8199196d454941c45d1b3a323f1433bd6')
|
|
self.assertEqual(address_to_script('bc1pw508d6qejxtdg4y5r3zarvary0c5xw7kw508d6qejxtdg4y5r3zarvary0c5xw7k7grplx'), '5128751e76e8199196d454941c45d1b3a323f1433bd6751e76e8199196d454941c45d1b3a323f1433bd6')
|
|
self.assertEqual(address_to_script('BC1SW50QA3JX3S'), '6002751e')
|
|
self.assertEqual(address_to_script('bc1zw508d6qejxtdg4y5r3zarvaryvg6kdaj'), '5210751e76e8199196d454941c45d1b3a323')
|
|
|
|
# base58 P2PKH
|
|
self.assertEqual(address_to_script('14gcRovpkCoGkCNBivQBvw7eso7eiNAbxG'), '76a91428662c67561b95c79d2257d2a93d9d151c977e9188ac')
|
|
self.assertEqual(address_to_script('1BEqfzh4Y3zzLosfGhw1AsqbEKVW6e1qHv'), '76a914704f4b81cadb7bf7e68c08cd3657220f680f863c88ac')
|
|
|
|
# base58 P2SH
|
|
self.assertEqual(address_to_script('35ZqQJcBQMZ1rsv8aSuJ2wkC7ohUCQMJbT'), 'a9142a84cf00d47f699ee7bbc1dea5ec1bdecb4ac15487')
|
|
self.assertEqual(address_to_script('3PyjzJ3im7f7bcV724GR57edKDqoZvH7Ji'), 'a914f47c8954e421031ad04ecd8e7752c9479206b9d387')
|
|
|
|
|
|
class Test_xprv_xpub(unittest.TestCase):
|
|
|
|
xprv_xpub = (
|
|
# Taken from test vectors in https://en.bitcoin.it/wiki/BIP_0032_TestVectors
|
|
{'xprv': 'xprvA41z7zogVVwxVSgdKUHDy1SKmdb533PjDz7J6N6mV6uS3ze1ai8FHa8kmHScGpWmj4WggLyQjgPie1rFSruoUihUZREPSL39UNdE3BBDu76',
|
|
'xpub': 'xpub6H1LXWLaKsWFhvm6RVpEL9P4KfRZSW7abD2ttkWP3SSQvnyA8FSVqNTEcYFgJS2UaFcxupHiYkro49S8yGasTvXEYBVPamhGW6cFJodrTHy',
|
|
'xtype': 'standard'},
|
|
{'xprv': 'yprvAJEYHeNEPcyBoQYM7sGCxDiNCTX65u4ANgZuSGTrKN5YCC9MP84SBayrgaMyZV7zvkHrr3HVPTK853s2SPk4EttPazBZBmz6QfDkXeE8Zr7',
|
|
'xpub': 'ypub6XDth9u8DzXV1tcpDtoDKMf6kVMaVMn1juVWEesTshcX4zUVvfNgjPJLXrD9N7AdTLnbHFL64KmBn3SNaTe69iZYbYCqLCCNPZKbLz9niQ4',
|
|
'xtype': 'segwit_p2sh'},
|
|
{'xprv': 'zprvAWgYBBk7JR8GkraNZJeEodAp2UR1VRWJTXyV1ywuUVs1awUgTiBS1ZTDtLA5F3MFDn1LZzu8dUpSKdT7ToDpvEG6PQu4bJs7zQY47Sd3sEZ',
|
|
'xpub': 'zpub6jftahH18ngZyLeqfLBFAm7YaWFVttE9pku5pNMX2qPzTjoq1FVgZMmhjecyB2nqFb31gHE9vNvbaggU6vvWpNZbXEWLLUjYjFqG95LNyT8',
|
|
'xtype': 'segwit'},
|
|
)
|
|
|
|
def _do_test_bip32(self, seed, sequence):
|
|
xprv, xpub = bip32_root(bfh(seed), 'standard')
|
|
self.assertEqual("m/", sequence[0:2])
|
|
path = 'm'
|
|
sequence = sequence[2:]
|
|
for n in sequence.split('/'):
|
|
child_path = path + '/' + n
|
|
if n[-1] != "'":
|
|
xpub2 = bip32_public_derivation(xpub, path, child_path)
|
|
xprv, xpub = bip32_private_derivation(xprv, path, child_path)
|
|
if n[-1] != "'":
|
|
self.assertEqual(xpub, xpub2)
|
|
path = child_path
|
|
|
|
return xpub, xprv
|
|
|
|
def test_bip32(self):
|
|
# see https://en.bitcoin.it/wiki/BIP_0032_TestVectors
|
|
xpub, xprv = self._do_test_bip32("000102030405060708090a0b0c0d0e0f", "m/0'/1/2'/2/1000000000")
|
|
self.assertEqual("xpub6H1LXWLaKsWFhvm6RVpEL9P4KfRZSW7abD2ttkWP3SSQvnyA8FSVqNTEcYFgJS2UaFcxupHiYkro49S8yGasTvXEYBVPamhGW6cFJodrTHy", xpub)
|
|
self.assertEqual("xprvA41z7zogVVwxVSgdKUHDy1SKmdb533PjDz7J6N6mV6uS3ze1ai8FHa8kmHScGpWmj4WggLyQjgPie1rFSruoUihUZREPSL39UNdE3BBDu76", xprv)
|
|
|
|
xpub, xprv = self._do_test_bip32("fffcf9f6f3f0edeae7e4e1dedbd8d5d2cfccc9c6c3c0bdbab7b4b1aeaba8a5a29f9c999693908d8a8784817e7b7875726f6c696663605d5a5754514e4b484542","m/0/2147483647'/1/2147483646'/2")
|
|
self.assertEqual("xpub6FnCn6nSzZAw5Tw7cgR9bi15UV96gLZhjDstkXXxvCLsUXBGXPdSnLFbdpq8p9HmGsApME5hQTZ3emM2rnY5agb9rXpVGyy3bdW6EEgAtqt", xpub)
|
|
self.assertEqual("xprvA2nrNbFZABcdryreWet9Ea4LvTJcGsqrMzxHx98MMrotbir7yrKCEXw7nadnHM8Dq38EGfSh6dqA9QWTyefMLEcBYJUuekgW4BYPJcr9E7j", xprv)
|
|
|
|
def test_xpub_from_xprv(self):
|
|
"""We can derive the xpub key from a xprv."""
|
|
for xprv_details in self.xprv_xpub:
|
|
result = xpub_from_xprv(xprv_details['xprv'])
|
|
self.assertEqual(result, xprv_details['xpub'])
|
|
|
|
def test_is_xpub(self):
|
|
for xprv_details in self.xprv_xpub:
|
|
xpub = xprv_details['xpub']
|
|
self.assertTrue(is_xpub(xpub))
|
|
self.assertFalse(is_xpub('xpub1nval1d'))
|
|
self.assertFalse(is_xpub('xpub661MyMwAqRbcFWohJWt7PHsFEJfZAvw9ZxwQoDa4SoMgsDDM1T7WK3u9E4edkC4ugRnZ8E4xDZRpk8Rnts3Nbt97dPwT52WRONGBADWRONG'))
|
|
|
|
def test_xpub_type(self):
|
|
for xprv_details in self.xprv_xpub:
|
|
xpub = xprv_details['xpub']
|
|
self.assertEqual(xprv_details['xtype'], xpub_type(xpub))
|
|
|
|
def test_is_xprv(self):
|
|
for xprv_details in self.xprv_xpub:
|
|
xprv = xprv_details['xprv']
|
|
self.assertTrue(is_xprv(xprv))
|
|
self.assertFalse(is_xprv('xprv1nval1d'))
|
|
self.assertFalse(is_xprv('xprv661MyMwAqRbcFWohJWt7PHsFEJfZAvw9ZxwQoDa4SoMgsDDM1T7WK3u9E4edkC4ugRnZ8E4xDZRpk8Rnts3Nbt97dPwT52WRONGBADWRONG'))
|
|
|
|
def test_is_bip32_derivation(self):
|
|
self.assertTrue(is_bip32_derivation("m/0'/1"))
|
|
self.assertTrue(is_bip32_derivation("m/0'/0'"))
|
|
self.assertTrue(is_bip32_derivation("m/44'/0'/0'/0/0"))
|
|
self.assertTrue(is_bip32_derivation("m/49'/0'/0'/0/0"))
|
|
self.assertFalse(is_bip32_derivation("mmmmmm"))
|
|
self.assertFalse(is_bip32_derivation("n/"))
|
|
self.assertFalse(is_bip32_derivation(""))
|
|
self.assertFalse(is_bip32_derivation("m/q8462"))
|
|
|
|
|
|
class Test_keyImport(unittest.TestCase):
|
|
|
|
priv_pub_addr = (
|
|
{'priv': 'KzMFjMC2MPadjvX5Cd7b8AKKjjpBSoRKUTpoAtN6B3J9ezWYyXS6',
|
|
'pub': '02c6467b7e621144105ed3e4835b0b4ab7e35266a2ae1c4f8baa19e9ca93452997',
|
|
'address': '17azqT8T16coRmWKYFj3UjzJuxiYrYFRBR',
|
|
'minikey' : False,
|
|
'txin_type': 'p2pkh',
|
|
'compressed': True,
|
|
'addr_encoding': 'base58',
|
|
'scripthash': 'c9aecd1fef8d661a42c560bf75c8163e337099800b8face5ca3d1393a30508a7'},
|
|
{'priv': '5Hxn5C4SQuiV6e62A1MtZmbSeQyrLFhu5uYks62pU5VBUygK2KD',
|
|
'pub': '04e5fe91a20fac945845a5518450d23405ff3e3e1ce39827b47ee6d5db020a9075422d56a59195ada0035e4a52a238849f68e7a325ba5b2247013e0481c5c7cb3f',
|
|
'address': '1GPHVTY8UD9my6jyP4tb2TYJwUbDetyNC6',
|
|
'minikey': False,
|
|
'txin_type': 'p2pkh',
|
|
'compressed': False,
|
|
'addr_encoding': 'base58',
|
|
'scripthash': 'f5914651408417e1166f725a5829ff9576d0dbf05237055bf13abd2af7f79473'},
|
|
{'priv': 'LHJnnvRzsdrTX2j5QeWVsaBkabK7gfMNqNNqxnbBVRaJYfk24iJz',
|
|
'pub': '0279ad237ca0d812fb503ab86f25e15ebd5fa5dd95c193639a8a738dcd1acbad81',
|
|
'address': '3GeVJB3oKr7psgKR6BTXSxKtWUkfsHHhk7',
|
|
'minikey': False,
|
|
'txin_type': 'p2wpkh-p2sh',
|
|
'compressed': True,
|
|
'addr_encoding': 'base58',
|
|
'scripthash': 'd7b04e882fa6b13246829ac552a2b21461d9152eb00f0a6adb58457a3e63d7c5'},
|
|
{'priv': 'L8g5V8kFFeg2WbecahRSdobARbHz2w2STH9S8ePHVSY4fmia7Rsj',
|
|
'pub': '03e9f948421aaa89415dc5f281a61b60dde12aae3181b3a76cd2d849b164fc6d0b',
|
|
'address': 'bc1qqmpt7u5e9hfznljta5gnvhyvfd2kdd0r90hwue',
|
|
'minikey': False,
|
|
'txin_type': 'p2wpkh',
|
|
'compressed': True,
|
|
'addr_encoding': 'bech32',
|
|
'scripthash': '1929acaaef3a208c715228e9f1ca0318e3a6b9394ab53c8d026137f847ecf97b'},
|
|
# from http://bitscan.com/articles/security/spotlight-on-mini-private-keys
|
|
{'priv': 'SzavMBLoXU6kDrqtUVmffv',
|
|
'pub': '02588d202afcc1ee4ab5254c7847ec25b9a135bbda0f2bc69ee1a714749fd77dc9',
|
|
'address': '19GuvDvMMUZ8vq84wT79fvnvhMd5MnfTkR',
|
|
'minikey': True,
|
|
'txin_type': 'p2pkh',
|
|
'compressed': True, # this is actually ambiguous... issue #2748
|
|
'addr_encoding': 'base58',
|
|
'scripthash': '60ad5a8b922f758cd7884403e90ee7e6f093f8d21a0ff24c9a865e695ccefdf1'},
|
|
)
|
|
|
|
def test_public_key_from_private_key(self):
|
|
for priv_details in self.priv_pub_addr:
|
|
txin_type, privkey, compressed = deserialize_privkey(priv_details['priv'])
|
|
result = public_key_from_private_key(privkey, compressed)
|
|
self.assertEqual(priv_details['pub'], result)
|
|
self.assertEqual(priv_details['txin_type'], txin_type)
|
|
self.assertEqual(priv_details['compressed'], compressed)
|
|
|
|
def test_address_from_private_key(self):
|
|
for priv_details in self.priv_pub_addr:
|
|
addr2 = address_from_private_key(priv_details['priv'])
|
|
self.assertEqual(priv_details['address'], addr2)
|
|
|
|
def test_is_valid_address(self):
|
|
for priv_details in self.priv_pub_addr:
|
|
addr = priv_details['address']
|
|
self.assertFalse(is_address(priv_details['priv']))
|
|
self.assertFalse(is_address(priv_details['pub']))
|
|
self.assertTrue(is_address(addr))
|
|
|
|
is_enc_b58 = priv_details['addr_encoding'] == 'base58'
|
|
self.assertEqual(is_enc_b58, is_b58_address(addr))
|
|
|
|
is_enc_bech32 = priv_details['addr_encoding'] == 'bech32'
|
|
self.assertEqual(is_enc_bech32, is_segwit_address(addr))
|
|
|
|
self.assertFalse(is_address("not an address"))
|
|
|
|
def test_is_private_key(self):
|
|
for priv_details in self.priv_pub_addr:
|
|
self.assertTrue(is_private_key(priv_details['priv']))
|
|
self.assertFalse(is_private_key(priv_details['pub']))
|
|
self.assertFalse(is_private_key(priv_details['address']))
|
|
self.assertFalse(is_private_key("not a privkey"))
|
|
|
|
def test_serialize_privkey(self):
|
|
for priv_details in self.priv_pub_addr:
|
|
txin_type, privkey, compressed = deserialize_privkey(priv_details['priv'])
|
|
priv2 = serialize_privkey(privkey, compressed, txin_type)
|
|
if not priv_details['minikey']:
|
|
self.assertEqual(priv_details['priv'], priv2)
|
|
|
|
def test_address_to_scripthash(self):
|
|
for priv_details in self.priv_pub_addr:
|
|
sh = address_to_scripthash(priv_details['address'])
|
|
self.assertEqual(priv_details['scripthash'], sh)
|
|
|
|
def test_is_minikey(self):
|
|
for priv_details in self.priv_pub_addr:
|
|
minikey = priv_details['minikey']
|
|
priv = priv_details['priv']
|
|
self.assertEqual(minikey, is_minikey(priv))
|
|
|
|
def test_is_compressed(self):
|
|
for priv_details in self.priv_pub_addr:
|
|
self.assertEqual(priv_details['compressed'],
|
|
is_compressed(priv_details['priv']))
|
|
|
|
|
|
class Test_seeds(unittest.TestCase):
|
|
""" Test old and new seeds. """
|
|
|
|
def test_new_seed(self):
|
|
seed = "cram swing cover prefer miss modify ritual silly deliver chunk behind inform able"
|
|
self.assertTrue(is_new_seed(seed))
|
|
|
|
seed = "cram swing cover prefer miss modify ritual silly deliver chunk behind inform"
|
|
self.assertFalse(is_new_seed(seed))
|
|
|
|
def test_old_seed(self):
|
|
self.assertTrue(is_old_seed(" ".join(["like"] * 12)))
|
|
self.assertFalse(is_old_seed(" ".join(["like"] * 18)))
|
|
self.assertTrue(is_old_seed(" ".join(["like"] * 24)))
|
|
self.assertFalse(is_old_seed("not a seed"))
|
|
|
|
self.assertTrue(is_old_seed("0123456789ABCDEF" * 2))
|
|
self.assertTrue(is_old_seed("0123456789ABCDEF" * 4))
|