bitcoinjs-lib/src/script_signature.js

var bip66 = require('bip66')
var BigInteger = require('bigi')
var Buffer = require('safe-buffer').Buffer
var typeforce = require('typeforce')
var types = require('./types')

// BIP62: 1 byte hashType flag (only 0x01, 0x02, 0x03, 0x81, 0x82 and 0x83 are allowed)
function decode (buffer) {
  var hashType = buffer.readUInt8(buffer.length - 1)
  var hashTypeMod = hashType & ~0x80
  if (hashTypeMod <= 0 || hashTypeMod >= 4) throw new Error('Invalid hashType ' + hashType)

  var decode = bip66.decode(buffer.slice(0, -1))

  return {
    signature: {
      r: BigInteger.fromDERInteger(decode.r),
      s: BigInteger.fromDERInteger(decode.s)
    },
    hashType: hashType
  }
}

function toRSBuffer (signature, buffer, offset) {
  buffer = buffer || Buffer.alloc(64)
  signature.r.toBuffer(32).copy(buffer, offset)
  signature.s.toBuffer(32).copy(buffer, offset + 32)
  return buffer
}

function fromRSBuffer (buffer) {
  typeforce(types.BufferN(64), buffer)

  var r = BigInteger.fromBuffer(buffer.slice(0, 32))
  var s = BigInteger.fromBuffer(buffer.slice(32, 64))
  return { r: r, s: s }
}

function encode (signature, hashType) {
  var hashTypeMod = hashType & ~0x80
  if (hashTypeMod <= 0 || hashTypeMod >= 4) throw new Error('Invalid hashType ' + hashType)

  var hashTypeBuffer = Buffer.allocUnsafe(1)
  hashTypeBuffer.writeUInt8(hashType, 0)

  var r = Buffer.from(signature.r.toDERInteger())
  var s = Buffer.from(signature.s.toDERInteger())

  return Buffer.concat([
    bip66.encode(r, s),
    hashTypeBuffer
  ])
}

module.exports = {
  fromRSBuffer: fromRSBuffer,
  toRSBuffer: toRSBuffer,
  decode: decode,
  encode: encode
}