@okxweb3/coin-bitcoin/dist/message.js

@ok/coin-bitcoin is a Bitcoin SDK for building Web3 wallets and applications. It supports BTC, BSV, DOGE, LTC, and TBTC, enabling private key management, transaction signing, address generation, and inscriptions like BRC-20, Runes, CAT, and Atomicals.

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.verifyWithAddress = exports.getMPCSignedMessage = exports.verify = exports.sign = exports.toCompact = exports.magicHash = void 0;
const crypto_lib_1 = require("@okxweb3/crypto-lib");
const coin_base_1 = require("@okxweb3/coin-base");
const txBuild_1 = require("./txBuild");
const MAGIC_BYTES = Buffer.from('Bitcoin Signed Message:\n');
function varintBufNum(n) {
    let buf;
    if (n < 253) {
        buf = Buffer.alloc(1);
        buf.writeUInt8(n, 0);
    }
    else if (n < 0x10000) {
        buf = Buffer.alloc(1 + 2);
        buf.writeUInt8(253, 0);
        buf.writeUInt16LE(n, 1);
    }
    else if (n < 0x100000000) {
        buf = Buffer.alloc(1 + 4);
        buf.writeUInt8(254, 0);
        buf.writeUInt32LE(n, 1);
    }
    else {
        buf = Buffer.alloc(1 + 8);
        buf.writeUInt8(255, 0);
        buf.writeInt32LE(n & -1, 1);
        buf.writeUInt32LE(Math.floor(n / 0x100000000), 5);
    }
    return buf;
}
function magicHash(message, messagePrefix) {
    const messagePrefixBuffer = messagePrefix
        ? Buffer.from(messagePrefix, 'utf8')
        : MAGIC_BYTES;
    const prefix1 = varintBufNum(messagePrefixBuffer.length);
    const messageBuffer = Buffer.from(message);
    const prefix2 = varintBufNum(messageBuffer.length);
    const buf = Buffer.concat([
        prefix1,
        messagePrefixBuffer,
        prefix2,
        messageBuffer,
    ]);
    return coin_base_1.base.doubleSha256(buf);
}
exports.magicHash = magicHash;
function toCompact(i, signature, compressed) {
    if (!(i === 0 || i === 1 || i === 2 || i === 3)) {
        throw new Error('i must be equal to 0, 1, 2, or 3');
    }
    let val = i + 27 + 4;
    if (!compressed) {
        val = val - 4;
    }
    return Buffer.concat([Uint8Array.of(val), Uint8Array.from(signature)]);
}
exports.toCompact = toCompact;
function sign(wifPrivate, message, network, messagePrefix) {
    const hash = magicHash(message, messagePrefix);
    if (!wifPrivate) {
        return coin_base_1.base.toHex(hash);
    }
    const privateKey = coin_base_1.base.fromHex((0, txBuild_1.privateKeyFromWIF)(wifPrivate, network));
    const { signature, recovery } = crypto_lib_1.signUtil.secp256k1.sign(Buffer.from(hash), privateKey);
    return coin_base_1.base.toBase64(toCompact(recovery, signature, true));
}
exports.sign = sign;
function verify(publicKey, message, sig, messagePrefix) {
    const hash = magicHash(message, messagePrefix);
    const sigBytes = coin_base_1.base.fromBase64(sig);
    const v = sigBytes[0] - 27 - 4;
    const rs = sigBytes.slice(1);
    return crypto_lib_1.signUtil.secp256k1.verify(Buffer.from(hash), rs, v, coin_base_1.base.fromHex(publicKey));
}
exports.verify = verify;
function getMPCSignedMessage(hash, sig, publicKey) {
    const signature = coin_base_1.base.fromHex(sig);
    const r = signature.slice(0, 32);
    const s = signature.slice(32, 64);
    const recovery = crypto_lib_1.signUtil.secp256k1.getV(coin_base_1.base.fromHex(hash), coin_base_1.base.toHex(r), coin_base_1.base.toHex(s), coin_base_1.base.fromHex(publicKey));
    return coin_base_1.base.toBase64(toCompact(recovery, signature, true));
}
exports.getMPCSignedMessage = getMPCSignedMessage;
function verifyWithAddress(address, message, sig, messagePrefix) {
    const hash = magicHash(message, messagePrefix);
    const sigBytes = coin_base_1.base.fromBase64(sig);
    const flagByte = sigBytes[0] - 27;
    const rs = sigBytes.slice(1);
    const r = flagByte & 3;
    const segwitType = !(flagByte & 8)
        ? null
        : !(flagByte & 4)
            ? SEGWIT_TYPES.P2SH_P2WPKH
            : SEGWIT_TYPES.P2WPKH;
    const compressed = !!(flagByte & 12);
    const publicKey = crypto_lib_1.signUtil.secp256k1.recover(rs, r, Buffer.from(hash), compressed);
    if (publicKey == null) {
        return false;
    }
    const publicKeyHash = Buffer.from(coin_base_1.base.hash160(publicKey));
    let actual, expected;
    if (segwitType) {
        if (segwitType === SEGWIT_TYPES.P2SH_P2WPKH) {
            actual = segwitRedeemHash(publicKeyHash);
            expected = coin_base_1.base.fromBase58Check(address).slice(1);
        }
        else {
            actual = publicKeyHash;
            expected = decodeBech32(address);
        }
    }
    else {
        try {
            expected = decodeBech32(address);
            return bufferEquals(publicKeyHash, expected);
        }
        catch (e) {
            const redeemHash = segwitRedeemHash(publicKeyHash);
            const except = coin_base_1.base.fromBase58Check(address).slice(1);
            return (bufferEquals(publicKeyHash, except) ||
                bufferEquals(redeemHash, except));
        }
    }
    return bufferEquals(actual, expected);
}
exports.verifyWithAddress = verifyWithAddress;
const SEGWIT_TYPES = {
    P2WPKH: 'p2wpkh',
    P2SH_P2WPKH: 'p2sh(p2wpkh)',
};
function decodeBech32(address) {
    const result = coin_base_1.base.bech32.decode(address);
    const data = coin_base_1.base.bech32.fromWords(result.words.slice(1));
    return Buffer.from(data);
}
function segwitRedeemHash(publicKeyHash) {
    const redeemScript = Buffer.concat([
        Buffer.from('0014', 'hex'),
        publicKeyHash,
    ]);
    return Buffer.from(coin_base_1.base.hash160(redeemScript));
}
function bufferEquals(a, b) {
    if (!Buffer.isBuffer(a) || !Buffer.isBuffer(b)) {
        throw new TypeError('Arguments must be Buffers');
    }
    if (a === b) {
        return true;
    }
    if (typeof a.equals === 'function') {
        return a.equals(b);
    }
    if (a.length !== b.length) {
        return false;
    }
    for (var i = 0; i < a.length; i++) {
        if (a[i] !== b[i]) {
            return false;
        }
    }
    return true;
}
//# sourceMappingURL=message.js.map