api-console-assets

<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"> <style> .KEYW {color: #933;} .COMM {color: #bbb; font-style: italic;} .NUMB {color: #393;} .STRN {color: #393;} .REGX {color: #339;} .line {border-right: 1px dotted #666; color: #666; font-style: normal;} </style></head><body><pre> 1 /* ecdsa-modified-1.1.1.js (c) Stephan Thomas, Kenji Urushima | github.com/bitcoinjs/bitcoinjs-lib/blob/master/LICENSE 2 */ 3 /* 4 * ecdsa-modified.js - modified Bitcoin.ECDSA class 5 * 6 * Copyright (c) 2013-2017 Stefan Thomas (github.com/justmoon) 7 * Kenji Urushima (kenji.urushima@gmail.com) 8 * LICENSE 9 * https://github.com/bitcoinjs/bitcoinjs-lib/blob/master/LICENSE 10 */ 11 12 /** 13 * @fileOverview 14 * @name ecdsa-modified-1.0.js 15 * @author Stefan Thomas (github.com/justmoon) and Kenji Urushima (kenji.urushima@gmail.com) 16 * @version jsrsasign 7.2.0 ecdsa-modified 1.1.1 (2017-May-12) 17 * @since jsrsasign 4.0 18 * @license <a href="https://github.com/bitcoinjs/bitcoinjs-lib/blob/master/LICENSE">MIT License</a> 19 */ 20 21 if (typeof KJUR == "undefined" || !KJUR) KJUR = {}; 22 if (typeof KJUR.crypto == "undefined" || !KJUR.crypto) KJUR.crypto = {}; 23 24 /** 25 * class for EC key generation, ECDSA signing and verifcation 26 * @name KJUR.crypto.ECDSA 27 * @class class for EC key generation, ECDSA signing and verifcation 28 * @description 29 * 30 * CAUTION: Most of the case, you don't need to use this class except 31 * for generating an EC key pair. Please use {@link KJUR.crypto.Signature} class instead. 32 * 33 * 34 * This class was originally developped by Stefan Thomas for Bitcoin JavaScript library. 35 * (See {@link https://github.com/bitcoinjs/bitcoinjs-lib/blob/master/src/ecdsa.js}) 36 * Currently this class supports following named curves and their aliases. 37 * <ul> 38 * <li>secp256r1, NIST P-256, P-256, prime256v1 (*)</li> 39 * <li>secp256k1 (*)</li> 40 * <li>secp384r1, NIST P-384, P-384 (*)</li> 41 * </ul> 42 * 43 */ 44 KJUR.crypto.ECDSA = function(params) { 45 var curveName = "secp256r1"; // curve name default 46 var ecparams = null; 47 var prvKeyHex = null; 48 var pubKeyHex = null; 49 50 var rng = new SecureRandom(); 51 52 var P_OVER_FOUR = null; 53 54 this.type = "EC"; 55 this.isPrivate = false; 56 this.isPublic = false; 57 58 function implShamirsTrick(P, k, Q, l) { 59 var m = Math.max(k.bitLength(), l.bitLength()); 60 var Z = P.add2D(Q); 61 var R = P.curve.getInfinity(); 62 63 for (var i = m - 1; i >= 0; --i) { 64 R = R.twice2D(); 65 66 R.z = BigInteger.ONE; 67 68 if (k.testBit(i)) { 69 if (l.testBit(i)) { 70 R = R.add2D(Z); 71 } else { 72 R = R.add2D(P); 73 } 74 } else { 75 if (l.testBit(i)) { 76 R = R.add2D(Q); 77 } 78 } 79 } 80 81 return R; 82 }; 83 84 //=========================== 85 // PUBLIC METHODS 86 //=========================== 87 this.getBigRandom = function (limit) { 88 return new BigInteger(limit.bitLength(), rng) 89 .mod(limit.subtract(BigInteger.ONE)) 90 .add(BigInteger.ONE) 91 ; 92 }; 93 94 this.setNamedCurve = function(curveName) { 95 this.ecparams = KJUR.crypto.ECParameterDB.getByName(curveName); 96 this.prvKeyHex = null; 97 this.pubKeyHex = null; 98 this.curveName = curveName; 99 }; 100 101 this.setPrivateKeyHex = function(prvKeyHex) { 102 this.isPrivate = true; 103 this.prvKeyHex = prvKeyHex; 104 }; 105 106 this.setPublicKeyHex = function(pubKeyHex) { 107 this.isPublic = true; 108 this.pubKeyHex = pubKeyHex; 109 }; 110 111 /** 112 * get X and Y hexadecimal string value of public key 113 * @name getPublicKeyXYHex 114 * @memberOf KJUR.crypto.ECDSA# 115 * @function 116 * @return {Array} associative array of x and y value of public key 117 * @since ecdsa-modified 1.0.5 jsrsasign 5.0.14 118 * @example 119 * ec = new KJUR.crypto.ECDSA({'curve': 'secp256r1', 'pub': pubHex}); 120 * ec.getPublicKeyXYHex() → { x: '01bacf...', y: 'c3bc22...' } 121 */ 122 this.getPublicKeyXYHex = function() { 123 var h = this.pubKeyHex; 124 if (h.substr(0, 2) !== "04") 125 throw "this method supports uncompressed format(04) only"; 126 127 var charlen = this.ecparams.keylen / 4; 128 if (h.length !== 2 + charlen * 2) 129 throw "malformed public key hex length"; 130 131 var result = {}; 132 result.x = h.substr(2, charlen); 133 result.y = h.substr(2 + charlen); 134 return result; 135 }; 136 137 /** 138 * get NIST curve short name such as "P-256" or "P-384" 139 * @name getShortNISTPCurveName 140 * @memberOf KJUR.crypto.ECDSA# 141 * @function 142 * @return {String} short NIST P curve name such as "P-256" or "P-384" if it's NIST P curve otherwise null; 143 * @since ecdsa-modified 1.0.5 jsrsasign 5.0.14 144 * @example 145 * ec = new KJUR.crypto.ECDSA({'curve': 'secp256r1', 'pub': pubHex}); 146 * ec.getShortPCurveName() → "P-256"; 147 */ 148 this.getShortNISTPCurveName = function() { 149 var s = this.curveName; 150 if (s === "secp256r1" || s === "NIST P-256" || 151 s === "P-256" || s === "prime256v1") 152 return "P-256"; 153 if (s === "secp384r1" || s === "NIST P-384" || s === "P-384") 154 return "P-384"; 155 return null; 156 }; 157 158 /** 159 * generate a EC key pair 160 * @name generateKeyPairHex 161 * @memberOf KJUR.crypto.ECDSA# 162 * @function 163 * @return {Array} associative array of hexadecimal string of private and public key 164 * @since ecdsa-modified 1.0.1 165 * @example 166 * var ec = new KJUR.crypto.ECDSA({'curve': 'secp256r1'}); 167 * var keypair = ec.generateKeyPairHex(); 168 * var pubhex = keypair.ecpubhex; // hexadecimal string of EC public key 169 * var prvhex = keypair.ecprvhex; // hexadecimal string of EC private key (=d) 170 */ 171 this.generateKeyPairHex = function() { 172 var biN = this.ecparams['n']; 173 var biPrv = this.getBigRandom(biN); 174 var epPub = this.ecparams['G'].multiply(biPrv); 175 var biX = epPub.getX().toBigInteger(); 176 var biY = epPub.getY().toBigInteger(); 177 178 var charlen = this.ecparams['keylen'] / 4; 179 var hPrv = ("0000000000" + biPrv.toString(16)).slice(- charlen); 180 var hX = ("0000000000" + biX.toString(16)).slice(- charlen); 181 var hY = ("0000000000" + biY.toString(16)).slice(- charlen); 182 var hPub = "04" + hX + hY; 183 184 this.setPrivateKeyHex(hPrv); 185 this.setPublicKeyHex(hPub); 186 return {'ecprvhex': hPrv, 'ecpubhex': hPub}; 187 }; 188 189 this.signWithMessageHash = function(hashHex) { 190 return this.signHex(hashHex, this.prvKeyHex); 191 }; 192 193 /** 194 * signing to message hash 195 * @name signHex 196 * @memberOf KJUR.crypto.ECDSA# 197 * @function 198 * @param {String} hashHex hexadecimal string of hash value of signing message 199 * @param {String} privHex hexadecimal string of EC private key 200 * @return {String} hexadecimal string of ECDSA signature 201 * @since ecdsa-modified 1.0.1 202 * @example 203 * var ec = new KJUR.crypto.ECDSA({'curve': 'secp256r1'}); 204 * var sigValue = ec.signHex(hash, prvKey); 205 */ 206 this.signHex = function (hashHex, privHex) { 207 var d = new BigInteger(privHex, 16); 208 var n = this.ecparams['n']; 209 var e = new BigInteger(hashHex, 16); 210 211 do { 212 var k = this.getBigRandom(n); 213 var G = this.ecparams['G']; 214 var Q = G.multiply(k); 215 var r = Q.getX().toBigInteger().mod(n); 216 } while (r.compareTo(BigInteger.ZERO) <= 0); 217 218 var s = k.modInverse(n).multiply(e.add(d.multiply(r))).mod(n); 219 220 return KJUR.crypto.ECDSA.biRSSigToASN1Sig(r, s); 221 }; 222 223 this.sign = function (hash, priv) { 224 var d = priv; 225 var n = this.ecparams['n']; 226 var e = BigInteger.fromByteArrayUnsigned(hash); 227 228 do { 229 var k = this.getBigRandom(n); 230 var G = this.ecparams['G']; 231 var Q = G.multiply(k); 232 var r = Q.getX().toBigInteger<s