aboutsummaryrefslogtreecommitdiffstats
path: root/public/js/bip32.js
diff options
context:
space:
mode:
authorAdam Soltys <[email protected]>2015-11-28 23:57:34 -0800
committerAdam Soltys <[email protected]>2015-11-30 21:10:59 -0800
commit41f8c6831bb91c0b0be1219b1566e59e48673465 (patch)
tree39626cf1a8fe7b8d73f750ccaf433bfa8c425d6b /public/js/bip32.js
parentf2bff842cbe16c18923b905f70ed168096648727 (diff)
downloadcoinos-server-41f8c6831bb91c0b0be1219b1566e59e48673465.tar.gz
coinos-server-41f8c6831bb91c0b0be1219b1566e59e48673465.zip
Use bower, grunt and browserify instead of connect-assets
Diffstat (limited to 'public/js/bip32.js')
-rw-r--r--public/js/bip32.js351
1 files changed, 0 insertions, 351 deletions
diff --git a/public/js/bip32.js b/public/js/bip32.js
deleted file mode 100644
index 4ae54e6c..00000000
--- a/public/js/bip32.js
+++ /dev/null
@@ -1,351 +0,0 @@
-
-var BITCOIN_MAINNET_PUBLIC = 0x0488b21e;
-var BITCOIN_MAINNET_PRIVATE = 0x0488ade4;
-var BITCOIN_TESTNET_PUBLIC = 0x043587cf;
-var BITCOIN_TESTNET_PRIVATE = 0x04358394;
-var DOGECOIN_MAINNET_PUBLIC = 0x02facafd;
-var DOGECOIN_MAINNET_PRIVATE = 0x02fac398;
-var DOGECOIN_TESTNET_PUBLIC = 0x0432a9a8;
-var DOGECOIN_TESTNET_PRIVATE = 0x0432a243;
-var LITECOIN_MAINNET_PUBLIC = 0x019da462;
-var LITECOIN_MAINNET_PRIVATE = 0x019d9cfe;
-var LITECOIN_TESTNET_PUBLIC = 0x0436f6e1;
-var LITECOIN_TESTNET_PRIVATE = 0x0436ef7d;
-
-var BIP32 = function(bytes) {
- // decode base58
- if( typeof bytes === "string" ) {
- var decoded = Bitcoin.Base58.decode(bytes);
- if( decoded.length != 82 ) throw new Error("Not enough data");
- var checksum = decoded.slice(78, 82);
- bytes = decoded.slice(0, 78);
-
- var hash = Crypto.SHA256( Crypto.SHA256( bytes, { asBytes: true } ), { asBytes: true } );
-
- if( hash[0] != checksum[0] || hash[1] != checksum[1] || hash[2] != checksum[2] || hash[3] != checksum[3] ) {
- throw new Error("Invalid checksum");
- }
- }
-
- if( bytes !== undefined )
- this.init_from_bytes(bytes);
-}
-
-BIP32.prototype.init_from_bytes = function(bytes) {
- // Both pub and private extended keys are 78 bytes
- if( bytes.length != 78 ) throw new Error("not enough data");
-
- this.version = u32(bytes.slice(0, 4));
- this.depth = u8 (bytes.slice(4, 5));
- this.parent_fingerprint = bytes.slice(5, 9);
- this.child_index = u32(bytes.slice(9, 13));
- this.chain_code = bytes.slice(13, 45);
-
- var key_bytes = bytes.slice(45, 78);
-
- var is_private =
- (this.version == BITCOIN_MAINNET_PRIVATE ||
- this.version == BITCOIN_TESTNET_PRIVATE ||
- this.version == DOGECOIN_MAINNET_PRIVATE ||
- this.version == DOGECOIN_TESTNET_PRIVATE ||
- this.version == LITECOIN_MAINNET_PRIVATE ||
- this.version == LITECOIN_TESTNET_PRIVATE );
-
- var is_public =
- (this.version == BITCOIN_MAINNET_PUBLIC ||
- this.version == BITCOIN_TESTNET_PUBLIC ||
- this.version == DOGECOIN_MAINNET_PUBLIC ||
- this.version == DOGECOIN_TESTNET_PUBLIC ||
- this.version == LITECOIN_MAINNET_PUBLIC ||
- this.version == LITECOIN_TESTNET_PUBLIC );
-
- if( is_private && key_bytes[0] == 0 ) {
- this.eckey = new Bitcoin.ECKey(key_bytes.slice(1, 33));
- this.eckey.setCompressed(true);
-
- var ecparams = getSECCurveByName("secp256k1");
- var pt = ecparams.getG().multiply(this.eckey.priv);
- this.eckey.pub = pt;
- this.eckey.pubKeyHash = Bitcoin.Util.sha256ripe160(this.eckey.pub.getEncoded(true));
- this.has_private_key = true;
- } else if( is_public && (key_bytes[0] == 0x02 || key_bytes[0] == 0x03) ) {
- this.eckey = new Bitcoin.ECKey();
- this.eckey.pub = decompress_pubkey(key_bytes);
- this.eckey.pubKeyHash = Bitcoin.Util.sha256ripe160(this.eckey.pub.getEncoded(true));
- this.eckey.setCompressed(true);
- this.has_private_key = false;
- } else {
- throw new Error("Invalid key");
- }
-
- this.build_extended_public_key();
- this.build_extended_private_key();
-}
-
-BIP32.prototype.build_extended_public_key = function() {
- this.extended_public_key = [];
-
- var v = null;
- switch(this.version) {
- case BITCOIN_MAINNET_PUBLIC:
- case BITCOIN_MAINNET_PRIVATE:
- v = BITCOIN_MAINNET_PUBLIC;
- break;
- case BITCOIN_TESTNET_PUBLIC:
- case BITCOIN_TESTNET_PRIVATE:
- v = BITCOIN_TESTNET_PUBLIC;
- break;
- case DOGECOIN_MAINNET_PUBLIC:
- case DOGECOIN_MAINNET_PRIVATE:
- v = DOGECOIN_MAINNET_PUBLIC;
- break;
- case DOGECOIN_TESTNET_PUBLIC:
- case DOGECOIN_TESTNET_PRIVATE:
- v = DOGECOIN_TESTNET_PUBLIC;
- break;
- case LITECOIN_MAINNET_PUBLIC:
- case LITECOIN_MAINNET_PRIVATE:
- v = LITECOIN_MAINNET_PUBLIC;
- break;
- case LITECOIN_TESTNET_PUBLIC:
- case LITECOIN_TESTNET_PRIVATE:
- v = LITECOIN_TESTNET_PUBLIC;
- break;
- default:
- throw new Error("Unknown version");
- }
-
- // Version
- this.extended_public_key.push(v >> 24);
- this.extended_public_key.push((v >> 16) & 0xff);
- this.extended_public_key.push((v >> 8) & 0xff);
- this.extended_public_key.push(v & 0xff);
-
- // Depth
- this.extended_public_key.push(this.depth);
-
- // Parent fingerprint
- this.extended_public_key = this.extended_public_key.concat(this.parent_fingerprint);
-
- // Child index
- this.extended_public_key.push(this.child_index >>> 24);
- this.extended_public_key.push((this.child_index >>> 16) & 0xff);
- this.extended_public_key.push((this.child_index >>> 8) & 0xff);
- this.extended_public_key.push(this.child_index & 0xff);
-
- // Chain code
- this.extended_public_key = this.extended_public_key.concat(this.chain_code);
-
- // Public key
- this.extended_public_key = this.extended_public_key.concat(this.eckey.pub.getEncoded(true));
-}
-
-BIP32.prototype.extended_public_key_string = function(format) {
- if( format === undefined || format === "base58" ) {
- var hash = Crypto.SHA256( Crypto.SHA256( this.extended_public_key, { asBytes: true } ), { asBytes: true } );
- var checksum = hash.slice(0, 4);
- var data = this.extended_public_key.concat(checksum);
- return Bitcoin.Base58.encode(data);
- } else if( format === "hex" ) {
- return Crypto.util.bytesToHex(this.extended_public_key);
- } else {
- throw new Error("bad format");
- }
-}
-
-BIP32.prototype.build_extended_private_key = function() {
- if( !this.has_private_key ) return;
- this.extended_private_key = [];
-
- var v = this.version;
-
- // Version
- this.extended_private_key.push(v >> 24);
- this.extended_private_key.push((v >> 16) & 0xff);
- this.extended_private_key.push((v >> 8) & 0xff);
- this.extended_private_key.push(v & 0xff);
-
- // Depth
- this.extended_private_key.push(this.depth);
-
- // Parent fingerprint
- this.extended_private_key = this.extended_private_key.concat(this.parent_fingerprint);
-
- // Child index
- this.extended_private_key.push(this.child_index >>> 24);
- this.extended_private_key.push((this.child_index >>> 16) & 0xff);
- this.extended_private_key.push((this.child_index >>> 8) & 0xff);
- this.extended_private_key.push(this.child_index & 0xff);
-
- // Chain code
- this.extended_private_key = this.extended_private_key.concat(this.chain_code);
-
- // Private key
- this.extended_private_key.push(0);
- this.extended_private_key = this.extended_private_key.concat(this.eckey.priv.toByteArrayUnsigned());
-}
-
-BIP32.prototype.extended_private_key_string = function(format) {
- if( format === undefined || format === "base58" ) {
- var hash = Crypto.SHA256( Crypto.SHA256( this.extended_private_key, { asBytes: true } ), { asBytes: true } );
- var checksum = hash.slice(0, 4);
- var data = this.extended_private_key.concat(checksum);
- return Bitcoin.Base58.encode(data);
- } else if( format === "hex" ) {
- return Crypto.util.bytesToHex(this.extended_private_key);
- } else {
- throw new Error("bad format");
- }
-}
-
-
-BIP32.prototype.derive = function(path) {
- var e = path.split('/');
-
- // Special cases:
- if( path == 'm' || path == 'M' || path == 'm\'' || path == 'M\'' ) return this;
-
- var bip32 = this;
- for( var i in e ) {
- var c = e[i];
-
- if( i == 0 ) {
- if( c != 'm' ) throw new Error("invalid path");
- continue;
- }
-
- var use_private = (c.length > 1) && (c[c.length-1] == '\'');
- var child_index = parseInt(use_private ? c.slice(0, c.length - 1) : c) & 0x7fffffff;
-
- if( use_private )
- child_index += 0x80000000;
-
- bip32 = bip32.derive_child(child_index);
- }
-
- return bip32;
-}
-
-BIP32.prototype.derive_child = function(i) {
- var ib = [];
- ib.push( (i >> 24) & 0xff );
- ib.push( (i >> 16) & 0xff );
- ib.push( (i >> 8) & 0xff );
- ib.push( i & 0xff );
-
- var use_private = (i & 0x80000000) != 0;
- var ecparams = getSECCurveByName("secp256k1");
-
- var is_private =
- (this.version == BITCOIN_MAINNET_PRIVATE ||
- this.version == BITCOIN_TESTNET_PRIVATE ||
- this.version == DOGECOIN_MAINNET_PRIVATE ||
- this.version == DOGECOIN_TESTNET_PRIVATE ||
- this.version == LITECOIN_MAINNET_PRIVATE ||
- this.version == LITECOIN_TESTNET_PRIVATE);
-
- if( use_private && (!this.has_private_key || !is_private) ) throw new Error("Cannot do private key derivation without private key");
-
- var ret = null;
- if( this.has_private_key ) {
- var data = null;
-
- if( use_private ) {
- data = [0].concat(this.eckey.priv.toByteArrayUnsigned()).concat(ib);
- } else {
- data = this.eckey.pub.getEncoded(true).concat(ib);
- }
-
- var j = new jsSHA(Crypto.util.bytesToHex(data), 'HEX');
- var hash = j.getHMAC(Crypto.util.bytesToHex(this.chain_code), "HEX", "SHA-512", "HEX");
- var il = new BigInteger(hash.slice(0, 64), 16);
- var ir = Crypto.util.hexToBytes(hash.slice(64, 128));
-
- // ki = IL + kpar (mod n).
- var curve = ecparams.getCurve();
- var k = il.add(this.eckey.priv).mod(ecparams.getN());
-
- ret = new BIP32();
- ret.chain_code = ir;
-
- ret.eckey = new Bitcoin.ECKey(k.toByteArrayUnsigned());
- ret.eckey.pub = ret.eckey.getPubPoint();
- ret.has_private_key = true;
-
- } else {
- var data = this.eckey.pub.getEncoded(true).concat(ib);
- var j = new jsSHA(Crypto.util.bytesToHex(data), 'HEX');
- var hash = j.getHMAC(Crypto.util.bytesToHex(this.chain_code), "HEX", "SHA-512", "HEX");
- var il = new BigInteger(hash.slice(0, 64), 16);
- var ir = Crypto.util.hexToBytes(hash.slice(64, 128));
-
- // Ki = (IL + kpar)*G = IL*G + Kpar
- var k = ecparams.getG().multiply(il).add(this.eckey.pub);
-
- ret = new BIP32();
- ret.chain_code = ir;
-
- ret.eckey = new Bitcoin.ECKey();
- ret.eckey.pub = k;
- ret.has_private_key = false;
- }
-
- ret.child_index = i;
- ret.parent_fingerprint = this.eckey.pubKeyHash.slice(0,4);
- ret.version = this.version;
- ret.depth = this.depth + 1;
-
- ret.eckey.setCompressed(true);
- ret.eckey.pubKeyHash = Bitcoin.Util.sha256ripe160(ret.eckey.pub.getEncoded(true));
-
- ret.build_extended_public_key();
- ret.build_extended_private_key();
-
- return ret;
-}
-
-
-function uint(f, size) {
- if (f.length < size)
- throw new Error("not enough data");
- var n = 0;
- for (var i = 0; i < size; i++) {
- n *= 256;
- n += f[i];
- }
- return n;
-}
-
-function u8(f) { return uint(f,1); }
-function u16(f) { return uint(f,2); }
-function u32(f) { return uint(f,4); }
-function u64(f) { return uint(f,8); }
-
-function decompress_pubkey(key_bytes) {
- var y_bit = u8(key_bytes.slice(0, 1)) & 0x01;
- var ecparams = getSECCurveByName("secp256k1");
-
- // build X
- var x = BigInteger.ZERO.clone();
- x.fromString(Crypto.util.bytesToHex(key_bytes.slice(1, 33)), 16);
-
- // get curve
- var curve = ecparams.getCurve();
- var a = curve.getA().toBigInteger();
- var b = curve.getB().toBigInteger();
- var p = curve.getQ();
-
- // compute y^2 = x^3 + a*x + b
- var tmp = x.multiply(x).multiply(x).add(a.multiply(x)).add(b).mod(p);
-
- // compute modular square root of y (mod p)
- var y = tmp.modSqrt(p);
-
- // flip sign if we need to
- if( (y[0] & 0x01) != y_bit ) {
- y = y.multiply(new BigInteger("-1")).mod(p);
- }
-
- return new ECPointFp(curve, curve.fromBigInteger(x), curve.fromBigInteger(y));
-}
-