bring formatting in line with bitcore standards
This commit is contained in:
parent
fa47ee9984
commit
31a024a20b
520
BIP32.js
520
BIP32.js
|
@ -1,3 +1,6 @@
|
|||
var EncodedData = require('./util/EncodedData');
|
||||
var base58 = imports.base58 || require('base58-native').base58Check;
|
||||
|
||||
var BITCOIN_MAINNET_PUBLIC = 0x0488b21e;
|
||||
var BITCOIN_MAINNET_PRIVATE = 0x0488ade4;
|
||||
var BITCOIN_TESTNET_PUBLIC = 0x043587cf;
|
||||
|
@ -12,338 +15,341 @@ var LITECOIN_TESTNET_PUBLIC = 0x0436f6e1;
|
|||
var LITECOIN_TESTNET_PRIVATE = 0x0436ef7d;
|
||||
|
||||
var BIP32 = function(bytes) {
|
||||
// decode base58
|
||||
if( typeof bytes === "string" ) {
|
||||
var decoded = Bitcoin.Base58.decode(bytes);
|
||||
if( decoded.length != 82 ) throw new Error("Not enough data");
|
||||
var checksum = decoded.slice(78, 82);
|
||||
bytes = decoded.slice(0, 78);
|
||||
// decode base58
|
||||
if (typeof bytes === "string") {
|
||||
var decoded = base58.decode(bytes);
|
||||
if (decoded.length != 82)
|
||||
throw new Error("Not enough data");
|
||||
var checksum = decoded.slice(78, 82);
|
||||
bytes = decoded.slice(0, 78);
|
||||
|
||||
var hash = Crypto.SHA256( Crypto.SHA256( bytes, { asBytes: true } ), { asBytes: true } );
|
||||
var hash = Crypto.SHA256(Crypto.SHA256(bytes, {asBytes: true}), {asBytes: true});
|
||||
|
||||
if( hash[0] != checksum[0] || hash[1] != checksum[1] || hash[2] != checksum[2] || hash[3] != checksum[3] ) {
|
||||
throw new Error("Invalid checksum");
|
||||
}
|
||||
if (hash[0] != checksum[0] || hash[1] != checksum[1] || hash[2] != checksum[2] || hash[3] != checksum[3]) {
|
||||
throw new Error("Invalid checksum");
|
||||
}
|
||||
}
|
||||
|
||||
if( bytes !== undefined )
|
||||
this.init_from_bytes(bytes);
|
||||
if (bytes !== undefined)
|
||||
this.init_from_bytes(bytes);
|
||||
}
|
||||
|
||||
BIP32.prototype.init_from_bytes = function(bytes) {
|
||||
// Both pub and private extended keys are 78 bytes
|
||||
if( bytes.length != 78 ) throw new Error("not enough data");
|
||||
// Both pub and private extended keys are 78 bytes
|
||||
if(bytes.length != 78) throw new Error("not enough data");
|
||||
|
||||
this.version = u32(bytes.slice(0, 4));
|
||||
this.depth = u8 (bytes.slice(4, 5));
|
||||
this.parent_fingerprint = bytes.slice(5, 9);
|
||||
this.child_index = u32(bytes.slice(9, 13));
|
||||
this.chain_code = bytes.slice(13, 45);
|
||||
this.version = u32(bytes.slice(0, 4));
|
||||
this.depth = u8(bytes.slice(4, 5));
|
||||
this.parent_fingerprint = bytes.slice(5, 9);
|
||||
this.child_index = u32(bytes.slice(9, 13));
|
||||
this.chain_code = bytes.slice(13, 45);
|
||||
|
||||
var key_bytes = bytes.slice(45, 78);
|
||||
var key_bytes = bytes.slice(45, 78);
|
||||
|
||||
var is_private =
|
||||
(this.version == BITCOIN_MAINNET_PRIVATE ||
|
||||
this.version == BITCOIN_TESTNET_PRIVATE ||
|
||||
this.version == DOGECOIN_MAINNET_PRIVATE ||
|
||||
this.version == DOGECOIN_TESTNET_PRIVATE ||
|
||||
this.version == LITECOIN_MAINNET_PRIVATE ||
|
||||
this.version == LITECOIN_TESTNET_PRIVATE );
|
||||
var is_private =
|
||||
(this.version == BITCOIN_MAINNET_PRIVATE ||
|
||||
this.version == BITCOIN_TESTNET_PRIVATE ||
|
||||
this.version == DOGECOIN_MAINNET_PRIVATE ||
|
||||
this.version == DOGECOIN_TESTNET_PRIVATE ||
|
||||
this.version == LITECOIN_MAINNET_PRIVATE ||
|
||||
this.version == LITECOIN_TESTNET_PRIVATE );
|
||||
|
||||
var is_public =
|
||||
(this.version == BITCOIN_MAINNET_PUBLIC ||
|
||||
this.version == BITCOIN_TESTNET_PUBLIC ||
|
||||
this.version == DOGECOIN_MAINNET_PUBLIC ||
|
||||
this.version == DOGECOIN_TESTNET_PUBLIC ||
|
||||
this.version == LITECOIN_MAINNET_PUBLIC ||
|
||||
this.version == LITECOIN_TESTNET_PUBLIC );
|
||||
var is_public =
|
||||
(this.version == BITCOIN_MAINNET_PUBLIC ||
|
||||
this.version == BITCOIN_TESTNET_PUBLIC ||
|
||||
this.version == DOGECOIN_MAINNET_PUBLIC ||
|
||||
this.version == DOGECOIN_TESTNET_PUBLIC ||
|
||||
this.version == LITECOIN_MAINNET_PUBLIC ||
|
||||
this.version == LITECOIN_TESTNET_PUBLIC );
|
||||
|
||||
if( is_private && key_bytes[0] == 0 ) {
|
||||
this.eckey = new Bitcoin.ECKey(key_bytes.slice(1, 33));
|
||||
this.eckey.setCompressed(true);
|
||||
if (is_private && key_bytes[0] == 0) {
|
||||
this.eckey = new Bitcoin.ECKey(key_bytes.slice(1, 33));
|
||||
this.eckey.setCompressed(true);
|
||||
|
||||
var ecparams = getSECCurveByName("secp256k1");
|
||||
var pt = ecparams.getG().multiply(this.eckey.priv);
|
||||
this.eckey.pub = pt;
|
||||
this.eckey.pubKeyHash = Bitcoin.Util.sha256ripe160(this.eckey.pub.getEncoded(true));
|
||||
this.has_private_key = true;
|
||||
} else if( is_public && (key_bytes[0] == 0x02 || key_bytes[0] == 0x03) ) {
|
||||
this.eckey = new Bitcoin.ECKey();
|
||||
this.eckey.pub = decompress_pubkey(key_bytes);
|
||||
this.eckey.pubKeyHash = Bitcoin.Util.sha256ripe160(this.eckey.pub.getEncoded(true));
|
||||
this.eckey.setCompressed(true);
|
||||
this.has_private_key = false;
|
||||
} else {
|
||||
throw new Error("Invalid key");
|
||||
}
|
||||
var ecparams = getSECCurveByName("secp256k1");
|
||||
var pt = ecparams.getG().multiply(this.eckey.priv);
|
||||
this.eckey.pub = pt;
|
||||
this.eckey.pubKeyHash = Bitcoin.Util.sha256ripe160(this.eckey.pub.getEncoded(true));
|
||||
this.has_private_key = true;
|
||||
} else if (is_public && (key_bytes[0] == 0x02 || key_bytes[0] == 0x03)) {
|
||||
this.eckey = new Bitcoin.ECKey();
|
||||
this.eckey.pub = decompress_pubkey(key_bytes);
|
||||
this.eckey.pubKeyHash = Bitcoin.Util.sha256ripe160(this.eckey.pub.getEncoded(true));
|
||||
this.eckey.setCompressed(true);
|
||||
this.has_private_key = false;
|
||||
} else {
|
||||
throw new Error("Invalid key");
|
||||
}
|
||||
|
||||
this.build_extended_public_key();
|
||||
this.build_extended_private_key();
|
||||
this.build_extended_public_key();
|
||||
this.build_extended_private_key();
|
||||
}
|
||||
|
||||
BIP32.prototype.build_extended_public_key = function() {
|
||||
this.extended_public_key = [];
|
||||
this.extended_public_key = [];
|
||||
|
||||
var v = null;
|
||||
switch(this.version) {
|
||||
case BITCOIN_MAINNET_PUBLIC:
|
||||
case BITCOIN_MAINNET_PRIVATE:
|
||||
v = BITCOIN_MAINNET_PUBLIC;
|
||||
break;
|
||||
case BITCOIN_TESTNET_PUBLIC:
|
||||
case BITCOIN_TESTNET_PRIVATE:
|
||||
v = BITCOIN_TESTNET_PUBLIC;
|
||||
break;
|
||||
case DOGECOIN_MAINNET_PUBLIC:
|
||||
case DOGECOIN_MAINNET_PRIVATE:
|
||||
v = DOGECOIN_MAINNET_PUBLIC;
|
||||
break;
|
||||
case DOGECOIN_TESTNET_PUBLIC:
|
||||
case DOGECOIN_TESTNET_PRIVATE:
|
||||
v = DOGECOIN_TESTNET_PUBLIC;
|
||||
break;
|
||||
case LITECOIN_MAINNET_PUBLIC:
|
||||
case LITECOIN_MAINNET_PRIVATE:
|
||||
v = LITECOIN_MAINNET_PUBLIC;
|
||||
break;
|
||||
case LITECOIN_TESTNET_PUBLIC:
|
||||
case LITECOIN_TESTNET_PRIVATE:
|
||||
v = LITECOIN_TESTNET_PUBLIC;
|
||||
break;
|
||||
default:
|
||||
throw new Error("Unknown version");
|
||||
}
|
||||
var v = null;
|
||||
switch(this.version) {
|
||||
case BITCOIN_MAINNET_PUBLIC:
|
||||
case BITCOIN_MAINNET_PRIVATE:
|
||||
v = BITCOIN_MAINNET_PUBLIC;
|
||||
break;
|
||||
case BITCOIN_TESTNET_PUBLIC:
|
||||
case BITCOIN_TESTNET_PRIVATE:
|
||||
v = BITCOIN_TESTNET_PUBLIC;
|
||||
break;
|
||||
case DOGECOIN_MAINNET_PUBLIC:
|
||||
case DOGECOIN_MAINNET_PRIVATE:
|
||||
v = DOGECOIN_MAINNET_PUBLIC;
|
||||
break;
|
||||
case DOGECOIN_TESTNET_PUBLIC:
|
||||
case DOGECOIN_TESTNET_PRIVATE:
|
||||
v = DOGECOIN_TESTNET_PUBLIC;
|
||||
break;
|
||||
case LITECOIN_MAINNET_PUBLIC:
|
||||
case LITECOIN_MAINNET_PRIVATE:
|
||||
v = LITECOIN_MAINNET_PUBLIC;
|
||||
break;
|
||||
case LITECOIN_TESTNET_PUBLIC:
|
||||
case LITECOIN_TESTNET_PRIVATE:
|
||||
v = LITECOIN_TESTNET_PUBLIC;
|
||||
break;
|
||||
default:
|
||||
throw new Error("Unknown version");
|
||||
}
|
||||
|
||||
// Version
|
||||
this.extended_public_key.push(v >> 24);
|
||||
this.extended_public_key.push((v >> 16) & 0xff);
|
||||
this.extended_public_key.push((v >> 8) & 0xff);
|
||||
this.extended_public_key.push(v & 0xff);
|
||||
// Version
|
||||
this.extended_public_key.push(v >> 24);
|
||||
this.extended_public_key.push((v >> 16) & 0xff);
|
||||
this.extended_public_key.push((v >> 8) & 0xff);
|
||||
this.extended_public_key.push(v & 0xff);
|
||||
|
||||
// Depth
|
||||
this.extended_public_key.push(this.depth);
|
||||
// Depth
|
||||
this.extended_public_key.push(this.depth);
|
||||
|
||||
// Parent fingerprint
|
||||
this.extended_public_key = this.extended_public_key.concat(this.parent_fingerprint);
|
||||
// Parent fingerprint
|
||||
this.extended_public_key = this.extended_public_key.concat(this.parent_fingerprint);
|
||||
|
||||
// Child index
|
||||
this.extended_public_key.push(this.child_index >>> 24);
|
||||
this.extended_public_key.push((this.child_index >>> 16) & 0xff);
|
||||
this.extended_public_key.push((this.child_index >>> 8) & 0xff);
|
||||
this.extended_public_key.push(this.child_index & 0xff);
|
||||
// Child index
|
||||
this.extended_public_key.push(this.child_index >>> 24);
|
||||
this.extended_public_key.push((this.child_index >>> 16) & 0xff);
|
||||
this.extended_public_key.push((this.child_index >>> 8) & 0xff);
|
||||
this.extended_public_key.push(this.child_index & 0xff);
|
||||
|
||||
// Chain code
|
||||
this.extended_public_key = this.extended_public_key.concat(this.chain_code);
|
||||
// Chain code
|
||||
this.extended_public_key = this.extended_public_key.concat(this.chain_code);
|
||||
|
||||
// Public key
|
||||
this.extended_public_key = this.extended_public_key.concat(this.eckey.pub.getEncoded(true));
|
||||
// Public key
|
||||
this.extended_public_key = this.extended_public_key.concat(this.eckey.pub.getEncoded(true));
|
||||
}
|
||||
|
||||
BIP32.prototype.extended_public_key_string = function(format) {
|
||||
if( format === undefined || format === "base58" ) {
|
||||
var hash = Crypto.SHA256( Crypto.SHA256( this.extended_public_key, { asBytes: true } ), { asBytes: true } );
|
||||
var checksum = hash.slice(0, 4);
|
||||
var data = this.extended_public_key.concat(checksum);
|
||||
return Bitcoin.Base58.encode(data);
|
||||
} else if( format === "hex" ) {
|
||||
return Crypto.util.bytesToHex(this.extended_public_key);
|
||||
} else {
|
||||
throw new Error("bad format");
|
||||
}
|
||||
if (format === undefined || format === "base58") {
|
||||
var hash = Crypto.SHA256(Crypto.SHA256(this.extended_public_key, {asBytes: true} ), {asBytes: true});
|
||||
var checksum = hash.slice(0, 4);
|
||||
var data = this.extended_public_key.concat(checksum);
|
||||
return Bitcoin.Base58.encode(data);
|
||||
} else if (format === "hex") {
|
||||
return Crypto.util.bytesToHex(this.extended_public_key);
|
||||
} else {
|
||||
throw new Error("bad format");
|
||||
}
|
||||
}
|
||||
|
||||
BIP32.prototype.build_extended_private_key = function() {
|
||||
if( !this.has_private_key ) return;
|
||||
this.extended_private_key = [];
|
||||
if (!this.has_private_key) return;
|
||||
this.extended_private_key = [];
|
||||
|
||||
var v = this.version;
|
||||
var v = this.version;
|
||||
|
||||
// Version
|
||||
this.extended_private_key.push(v >> 24);
|
||||
this.extended_private_key.push((v >> 16) & 0xff);
|
||||
this.extended_private_key.push((v >> 8) & 0xff);
|
||||
this.extended_private_key.push(v & 0xff);
|
||||
// Version
|
||||
this.extended_private_key.push(v >> 24);
|
||||
this.extended_private_key.push((v >> 16) & 0xff);
|
||||
this.extended_private_key.push((v >> 8) & 0xff);
|
||||
this.extended_private_key.push(v & 0xff);
|
||||
|
||||
// Depth
|
||||
this.extended_private_key.push(this.depth);
|
||||
// Depth
|
||||
this.extended_private_key.push(this.depth);
|
||||
|
||||
// Parent fingerprint
|
||||
this.extended_private_key = this.extended_private_key.concat(this.parent_fingerprint);
|
||||
// Parent fingerprint
|
||||
this.extended_private_key = this.extended_private_key.concat(this.parent_fingerprint);
|
||||
|
||||
// Child index
|
||||
this.extended_private_key.push(this.child_index >>> 24);
|
||||
this.extended_private_key.push((this.child_index >>> 16) & 0xff);
|
||||
this.extended_private_key.push((this.child_index >>> 8) & 0xff);
|
||||
this.extended_private_key.push(this.child_index & 0xff);
|
||||
// Child index
|
||||
this.extended_private_key.push(this.child_index >>> 24);
|
||||
this.extended_private_key.push((this.child_index >>> 16) & 0xff);
|
||||
this.extended_private_key.push((this.child_index >>> 8) & 0xff);
|
||||
this.extended_private_key.push(this.child_index & 0xff);
|
||||
|
||||
// Chain code
|
||||
this.extended_private_key = this.extended_private_key.concat(this.chain_code);
|
||||
// Chain code
|
||||
this.extended_private_key = this.extended_private_key.concat(this.chain_code);
|
||||
|
||||
// Private key
|
||||
this.extended_private_key.push(0);
|
||||
this.extended_private_key = this.extended_private_key.concat(this.eckey.priv.toByteArrayUnsigned());
|
||||
// Private key
|
||||
this.extended_private_key.push(0);
|
||||
this.extended_private_key = this.extended_private_key.concat(this.eckey.priv.toByteArrayUnsigned());
|
||||
}
|
||||
|
||||
BIP32.prototype.extended_private_key_string = function(format) {
|
||||
if( format === undefined || format === "base58" ) {
|
||||
var hash = Crypto.SHA256( Crypto.SHA256( this.extended_private_key, { asBytes: true } ), { asBytes: true } );
|
||||
var checksum = hash.slice(0, 4);
|
||||
var data = this.extended_private_key.concat(checksum);
|
||||
return Bitcoin.Base58.encode(data);
|
||||
} else if( format === "hex" ) {
|
||||
return Crypto.util.bytesToHex(this.extended_private_key);
|
||||
} else {
|
||||
throw new Error("bad format");
|
||||
}
|
||||
if (format === undefined || format === "base58") {
|
||||
var hash = Crypto.SHA256(Crypto.SHA256(this.extended_private_key, {asBytes: true}), {asBytes: true});
|
||||
var checksum = hash.slice(0, 4);
|
||||
var data = this.extended_private_key.concat(checksum);
|
||||
return Bitcoin.Base58.encode(data);
|
||||
} else if( format === "hex" ) {
|
||||
return Crypto.util.bytesToHex(this.extended_private_key);
|
||||
} else {
|
||||
throw new Error("bad format");
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
BIP32.prototype.derive = function(path) {
|
||||
var e = path.split('/');
|
||||
var e = path.split('/');
|
||||
|
||||
// Special cases:
|
||||
if( path == 'm' || path == 'M' || path == 'm\'' || path == 'M\'' ) return this;
|
||||
// Special cases:
|
||||
if (path == 'm' || path == 'M' || path == 'm\'' || path == 'M\'')
|
||||
return this;
|
||||
|
||||
var bip32 = this;
|
||||
for( var i in e ) {
|
||||
var c = e[i];
|
||||
var bip32 = this;
|
||||
for (var i in e) {
|
||||
var c = e[i];
|
||||
|
||||
if( i == 0 ) {
|
||||
if( c != 'm' ) throw new Error("invalid path");
|
||||
continue;
|
||||
}
|
||||
|
||||
var use_private = (c.length > 1) && (c[c.length-1] == '\'');
|
||||
var child_index = parseInt(use_private ? c.slice(0, c.length - 1) : c) & 0x7fffffff;
|
||||
|
||||
if( use_private )
|
||||
child_index += 0x80000000;
|
||||
|
||||
bip32 = bip32.derive_child(child_index);
|
||||
if (i == 0 ) {
|
||||
if (c != 'm') throw new Error("invalid path");
|
||||
continue;
|
||||
}
|
||||
|
||||
return bip32;
|
||||
var use_private = (c.length > 1) && (c[c.length-1] == '\'');
|
||||
var child_index = parseInt(use_private ? c.slice(0, c.length - 1) : c) & 0x7fffffff;
|
||||
|
||||
if( use_private )
|
||||
child_index += 0x80000000;
|
||||
|
||||
bip32 = bip32.derive_child(child_index);
|
||||
}
|
||||
|
||||
return bip32;
|
||||
}
|
||||
|
||||
BIP32.prototype.derive_child = function(i) {
|
||||
var ib = [];
|
||||
ib.push( (i >> 24) & 0xff );
|
||||
ib.push( (i >> 16) & 0xff );
|
||||
ib.push( (i >> 8) & 0xff );
|
||||
ib.push( i & 0xff );
|
||||
var ib = [];
|
||||
ib.push((i >> 24) & 0xff);
|
||||
ib.push((i >> 16) & 0xff);
|
||||
ib.push((i >> 8) & 0xff);
|
||||
ib.push(i & 0xff );
|
||||
|
||||
var use_private = (i & 0x80000000) != 0;
|
||||
var ecparams = getSECCurveByName("secp256k1");
|
||||
var use_private = (i & 0x80000000) != 0;
|
||||
var ecparams = getSECCurveByName("secp256k1");
|
||||
|
||||
var is_private =
|
||||
(this.version == BITCOIN_MAINNET_PRIVATE ||
|
||||
this.version == BITCOIN_TESTNET_PRIVATE ||
|
||||
this.version == DOGECOIN_MAINNET_PRIVATE ||
|
||||
this.version == DOGECOIN_TESTNET_PRIVATE ||
|
||||
this.version == LITECOIN_MAINNET_PRIVATE ||
|
||||
this.version == LITECOIN_TESTNET_PRIVATE);
|
||||
var is_private =
|
||||
(this.version == BITCOIN_MAINNET_PRIVATE ||
|
||||
this.version == BITCOIN_TESTNET_PRIVATE ||
|
||||
this.version == DOGECOIN_MAINNET_PRIVATE ||
|
||||
this.version == DOGECOIN_TESTNET_PRIVATE ||
|
||||
this.version == LITECOIN_MAINNET_PRIVATE ||
|
||||
this.version == LITECOIN_TESTNET_PRIVATE);
|
||||
|
||||
if( use_private && (!this.has_private_key || !is_private) ) throw new Error("Cannot do private key derivation without private key");
|
||||
if (use_private && (!this.has_private_key || !is_private))
|
||||
throw new Error("Cannot do private key derivation without private key");
|
||||
|
||||
var ret = null;
|
||||
if( this.has_private_key ) {
|
||||
var data = null;
|
||||
|
||||
if( use_private ) {
|
||||
data = [0].concat(this.eckey.priv.toByteArrayUnsigned()).concat(ib);
|
||||
} else {
|
||||
data = this.eckey.pub.getEncoded(true).concat(ib);
|
||||
}
|
||||
|
||||
var j = new jsSHA(Crypto.util.bytesToHex(data), 'HEX');
|
||||
var hash = j.getHMAC(Crypto.util.bytesToHex(this.chain_code), "HEX", "SHA-512", "HEX");
|
||||
var il = new BigInteger(hash.slice(0, 64), 16);
|
||||
var ir = Crypto.util.hexToBytes(hash.slice(64, 128));
|
||||
|
||||
// ki = IL + kpar (mod n).
|
||||
var curve = ecparams.getCurve();
|
||||
var k = il.add(this.eckey.priv).mod(ecparams.getN());
|
||||
|
||||
ret = new BIP32();
|
||||
ret.chain_code = ir;
|
||||
|
||||
ret.eckey = new Bitcoin.ECKey(k.toByteArrayUnsigned());
|
||||
ret.eckey.pub = ret.eckey.getPubPoint();
|
||||
ret.has_private_key = true;
|
||||
var ret = null;
|
||||
if (this.has_private_key) {
|
||||
var data = null;
|
||||
|
||||
if (use_private) {
|
||||
data = [0].concat(this.eckey.priv.toByteArrayUnsigned()).concat(ib);
|
||||
} else {
|
||||
var data = this.eckey.pub.getEncoded(true).concat(ib);
|
||||
var j = new jsSHA(Crypto.util.bytesToHex(data), 'HEX');
|
||||
var hash = j.getHMAC(Crypto.util.bytesToHex(this.chain_code), "HEX", "SHA-512", "HEX");
|
||||
var il = new BigInteger(hash.slice(0, 64), 16);
|
||||
var ir = Crypto.util.hexToBytes(hash.slice(64, 128));
|
||||
|
||||
// Ki = (IL + kpar)*G = IL*G + Kpar
|
||||
var k = ecparams.getG().multiply(il).add(this.eckey.pub);
|
||||
|
||||
ret = new BIP32();
|
||||
ret.chain_code = ir;
|
||||
|
||||
ret.eckey = new Bitcoin.ECKey();
|
||||
ret.eckey.pub = k;
|
||||
ret.has_private_key = false;
|
||||
data = this.eckey.pub.getEncoded(true).concat(ib);
|
||||
}
|
||||
|
||||
ret.child_index = i;
|
||||
ret.parent_fingerprint = this.eckey.pubKeyHash.slice(0,4);
|
||||
ret.version = this.version;
|
||||
ret.depth = this.depth + 1;
|
||||
var j = new jsSHA(Crypto.util.bytesToHex(data), 'HEX');
|
||||
var hash = j.getHMAC(Crypto.util.bytesToHex(this.chain_code), "HEX", "SHA-512", "HEX");
|
||||
var il = new BigInteger(hash.slice(0, 64), 16);
|
||||
var ir = Crypto.util.hexToBytes(hash.slice(64, 128));
|
||||
|
||||
ret.eckey.setCompressed(true);
|
||||
ret.eckey.pubKeyHash = Bitcoin.Util.sha256ripe160(ret.eckey.pub.getEncoded(true));
|
||||
// ki = IL + kpar (mod n).
|
||||
var curve = ecparams.getCurve();
|
||||
var k = il.add(this.eckey.priv).mod(ecparams.getN());
|
||||
|
||||
ret.build_extended_public_key();
|
||||
ret.build_extended_private_key();
|
||||
ret = new BIP32();
|
||||
ret.chain_code = ir;
|
||||
|
||||
return ret;
|
||||
ret.eckey = new Bitcoin.ECKey(k.toByteArrayUnsigned());
|
||||
ret.eckey.pub = ret.eckey.getPubPoint();
|
||||
ret.has_private_key = true;
|
||||
|
||||
} else {
|
||||
var data = this.eckey.pub.getEncoded(true).concat(ib);
|
||||
var j = new jsSHA(Crypto.util.bytesToHex(data), 'HEX');
|
||||
var hash = j.getHMAC(Crypto.util.bytesToHex(this.chain_code), "HEX", "SHA-512", "HEX");
|
||||
var il = new BigInteger(hash.slice(0, 64), 16);
|
||||
var ir = Crypto.util.hexToBytes(hash.slice(64, 128));
|
||||
|
||||
// Ki = (IL + kpar)*G = IL*G + Kpar
|
||||
var k = ecparams.getG().multiply(il).add(this.eckey.pub);
|
||||
|
||||
ret = new BIP32();
|
||||
ret.chain_code = ir;
|
||||
|
||||
ret.eckey = new Bitcoin.ECKey();
|
||||
ret.eckey.pub = k;
|
||||
ret.has_private_key = false;
|
||||
}
|
||||
|
||||
ret.child_index = i;
|
||||
ret.parent_fingerprint = this.eckey.pubKeyHash.slice(0,4);
|
||||
ret.version = this.version;
|
||||
ret.depth = this.depth + 1;
|
||||
|
||||
ret.eckey.setCompressed(true);
|
||||
ret.eckey.pubKeyHash = Bitcoin.Util.sha256ripe160(ret.eckey.pub.getEncoded(true));
|
||||
|
||||
ret.build_extended_public_key();
|
||||
ret.build_extended_private_key();
|
||||
|
||||
return ret;
|
||||
}
|
||||
|
||||
|
||||
function uint(f, size) {
|
||||
if (f.length < size)
|
||||
throw new Error("not enough data");
|
||||
var n = 0;
|
||||
for (var i = 0; i < size; i++) {
|
||||
n *= 256;
|
||||
n += f[i];
|
||||
}
|
||||
return n;
|
||||
if (f.length < size)
|
||||
throw new Error("not enough data");
|
||||
var n = 0;
|
||||
for (var i = 0; i < size; i++) {
|
||||
n *= 256;
|
||||
n += f[i];
|
||||
}
|
||||
return n;
|
||||
}
|
||||
|
||||
function u8(f) { return uint(f,1); }
|
||||
function u16(f) { return uint(f,2); }
|
||||
function u32(f) { return uint(f,4); }
|
||||
function u64(f) { return uint(f,8); }
|
||||
function u8(f) {return uint(f,1);}
|
||||
function u16(f) {return uint(f,2);}
|
||||
function u32(f) {return uint(f,4);}
|
||||
function u64(f) {return uint(f,8);}
|
||||
|
||||
function decompress_pubkey(key_bytes) {
|
||||
var y_bit = u8(key_bytes.slice(0, 1)) & 0x01;
|
||||
var ecparams = getSECCurveByName("secp256k1");
|
||||
var y_bit = u8(key_bytes.slice(0, 1)) & 0x01;
|
||||
var ecparams = getSECCurveByName("secp256k1");
|
||||
|
||||
// build X
|
||||
var x = BigInteger.ZERO.clone();
|
||||
x.fromString(Crypto.util.bytesToHex(key_bytes.slice(1, 33)), 16);
|
||||
// build X
|
||||
var x = BigInteger.ZERO.clone();
|
||||
x.fromString(Crypto.util.bytesToHex(key_bytes.slice(1, 33)), 16);
|
||||
|
||||
// get curve
|
||||
var curve = ecparams.getCurve();
|
||||
var a = curve.getA().toBigInteger();
|
||||
var b = curve.getB().toBigInteger();
|
||||
var p = curve.getQ();
|
||||
// get curve
|
||||
var curve = ecparams.getCurve();
|
||||
var a = curve.getA().toBigInteger();
|
||||
var b = curve.getB().toBigInteger();
|
||||
var p = curve.getQ();
|
||||
|
||||
// compute y^2 = x^3 + a*x + b
|
||||
var tmp = x.multiply(x).multiply(x).add(a.multiply(x)).add(b).mod(p);
|
||||
// compute y^2 = x^3 + a*x + b
|
||||
var tmp = x.multiply(x).multiply(x).add(a.multiply(x)).add(b).mod(p);
|
||||
|
||||
// compute modular square root of y (mod p)
|
||||
var y = tmp.modSqrt(p);
|
||||
// compute modular square root of y (mod p)
|
||||
var y = tmp.modSqrt(p);
|
||||
|
||||
// flip sign if we need to
|
||||
if( (y[0] & 0x01) != y_bit ) {
|
||||
y = y.multiply(new BigInteger("-1")).mod(p);
|
||||
}
|
||||
// flip sign if we need to
|
||||
if ((y[0] & 0x01) != y_bit) {
|
||||
y = y.multiply(new BigInteger("-1")).mod(p);
|
||||
}
|
||||
|
||||
return new ECPointFp(curve, curve.fromBigInteger(x), curve.fromBigInteger(y));
|
||||
return new ECPointFp(curve, curve.fromBigInteger(x), curve.fromBigInteger(y));
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue