bitcoin-proof/index.js

Merkle proof for a Bitcoin transaction

var createHash = require('crypto').createHash;

/**
 * @param {Buffer} buf1
 * @return {Buffer}
 */
function sha256x2 (buf1, buf2) {
  var buf = createHash('sha256').update(buf1).update(buf2).digest();
  return createHash('sha256').update(buf).digest();
}

/**
 * Reverse CURRENT buffer
 * @param {Buffer} buf
 * @return {Buffer}
 */
function reverse (buf) {
  return Array.prototype.reverse.call(buf);
}

/**
 * @param {Buffer} buf1
 * @param {Buffer} buf2
 * @return {Buffer}
 */
function isEqual (buf1, buf2) {
  if (buf1.length !== buf2.length) {
    return false;
  }

  for (var i = 0; i < buf1.length; ++i) {
    if (buf1[i] !== buf2[i]) {
      return false;
    }
  }

  return true;
}

/**
 * @typedef {Object} ProofObject
 * @param {string} txId
 * @param {number} txIndex
 * @param {string[]} sibling
 */

/**
 * @param {string[]} txIds
 * @param {number} txIndex
 * @return {ProofObject}
 */
exports.getProof = function (txIds, txIndex) {
  var proof = {
    txId: txIds[txIndex],
    txIndex: txIndex,
    sibling: []
  };

  var tree = new Array(txIds.length);
  for (var i = 0; i < tree.length; ++i) {
    tree[i] = reverse(new Buffer(txIds[i], 'hex'));
  }
  var target = tree[txIndex];

  while (tree.length !== 1) {
    var newTree = new Array(~~((tree.length + 1) / 2));
    for (var j = 0; j < tree.length; j += 2) {
      var hash1 = tree[j];
      var hash2 = tree[Math.min(j + 1, tree.length - 1)];

      newTree[j / 2] = sha256x2(hash1, hash2);

      if (isEqual(target, hash1)) {
        proof.sibling.push(reverse(hash2).toString('hex'));
        target = newTree[j / 2];
      } else if (isEqual(target, hash2)) {
        proof.sibling.push(reverse(hash1).toString('hex'));
        target = newTree[j / 2];
      }
    }

    tree = newTree;
  }

  return proof;
};

/**
 * @param {ProofObject} proofObj
 * @return {string}
 */
exports.getTxMerkle = function (proofObj) {
  var target = reverse(new Buffer(proofObj.txId, 'hex'));
  var txIndex = proofObj.txIndex;
  var sibling = proofObj.sibling;

  for (var i = 0; i < proofObj.sibling.length; ++i, txIndex = ~~(txIndex / 2)) {
    if (txIndex % 2 === 1) {
      target = sha256x2(reverse(new Buffer(sibling[i], 'hex')), target);
    } else {
      target = sha256x2(target, reverse(new Buffer(sibling[i], 'hex')));
    }
  }

  return reverse(target).toString('hex');
};

/**
 * @param {string[]} txIds
 * @return {string}
 */
exports.getMerkleRoot = function (txIds) {
  var tree = new Array(txIds.length);
  for (var i = 0; i < tree.length; ++i) {
    tree[i] = reverse(new Buffer(txIds[i], 'hex'));
  }

  while (tree.length !== 1) {
    var newTree = new Array(~~((tree.length + 1) / 2));
    for (var j = 0; j < tree.length; j += 2) {
      var hash1 = tree[j];
      var hash2 = tree[Math.min(j + 1, tree.length - 1)];

      newTree[j / 2] = sha256x2(hash1, hash2);
    }

    tree = newTree;
  }

  return reverse(tree[0]).toString('hex');
};