Daniel Cousens
9 years ago
committed by
GitHub
GitHub
5 changed files with 199 additions and 139 deletions
@ -0,0 +1,140 @@ |
|||||
|
/* global describe, it */ |
||||
|
|
||||
|
var assert = require('assert') |
||||
|
var bitcoin = require('../../') |
||||
|
var blockchain = require('./_blockchain') |
||||
|
|
||||
|
var network = bitcoin.networks.testnet |
||||
|
var alice = bitcoin.ECPair.fromWIF('cScfkGjbzzoeewVWmU2hYPUHeVGJRDdFt7WhmrVVGkxpmPP8BHWe', network) |
||||
|
var bob = bitcoin.ECPair.fromWIF('cMkopUXKWsEzAjfa1zApksGRwjVpJRB3831qM9W4gKZsLwjHXA9x', network) |
||||
|
|
||||
|
describe('bitcoinjs-lib (CLTV)', function () { |
||||
|
var hashType = bitcoin.Transaction.SIGHASH_ALL |
||||
|
|
||||
|
function cltvCheckSigInput (aQ, bQ, utcSeconds) { |
||||
|
return bitcoin.script.compile([ |
||||
|
bitcoin.opcodes.OP_IF, |
||||
|
bitcoin.script.number.encode(utcSeconds), |
||||
|
bitcoin.opcodes.OP_CHECKLOCKTIMEVERIFY, |
||||
|
bitcoin.opcodes.OP_DROP, |
||||
|
|
||||
|
bitcoin.opcodes.OP_ELSE, |
||||
|
bQ.getPublicKeyBuffer(), |
||||
|
bitcoin.opcodes.OP_CHECKSIGVERIFY, |
||||
|
bitcoin.opcodes.OP_ENDIF, |
||||
|
|
||||
|
aQ.getPublicKeyBuffer(), |
||||
|
bitcoin.opcodes.OP_CHECKSIG |
||||
|
]) |
||||
|
} |
||||
|
|
||||
|
function utcNow () { |
||||
|
return Math.floor(Date.now() / 1000) |
||||
|
} |
||||
|
|
||||
|
// expiry past, {Alice's signature} OP_TRUE
|
||||
|
it('where Alice can redeem after the expiry is past', function (done) { |
||||
|
this.timeout(30000) |
||||
|
|
||||
|
// three hours ago
|
||||
|
var timeUtc = utcNow() - (3600 * 3) |
||||
|
var redeemScript = cltvCheckSigInput(alice, bob, timeUtc) |
||||
|
var scriptPubKey = bitcoin.script.scriptHashOutput(bitcoin.crypto.hash160(redeemScript)) |
||||
|
var address = bitcoin.address.fromOutputScript(scriptPubKey, network) |
||||
|
|
||||
|
// fund the P2SH(CLTV) address
|
||||
|
blockchain.t.faucet(address, 2e4, function (err, unspent) { |
||||
|
if (err) return done(err) |
||||
|
|
||||
|
var tx = new bitcoin.TransactionBuilder(network) |
||||
|
tx.setLockTime(timeUtc) |
||||
|
tx.addInput(unspent.txId, 0, 0xfffffffe) |
||||
|
tx.addOutput(alice.getAddress(), 1000) |
||||
|
|
||||
|
var txRaw = tx.buildIncomplete() |
||||
|
var signatureHash = txRaw.hashForSignature(0, redeemScript, hashType) |
||||
|
|
||||
|
// {Alice's signature} OP_TRUE
|
||||
|
var redeemScriptSig = bitcoin.script.scriptHashInput([ |
||||
|
alice.sign(signatureHash).toScriptSignature(hashType), |
||||
|
bitcoin.opcodes.OP_TRUE |
||||
|
], redeemScript) |
||||
|
|
||||
|
txRaw.setInputScript(0, redeemScriptSig) |
||||
|
|
||||
|
blockchain.t.transactions.propagate(txRaw.toHex(), done) |
||||
|
}) |
||||
|
}) |
||||
|
|
||||
|
// expiry ignored, {Bob's signature} {Alice's signature} OP_FALSE
|
||||
|
it('where Alice and Bob can redeem at any time', function (done) { |
||||
|
this.timeout(30000) |
||||
|
|
||||
|
// two hours ago
|
||||
|
var timeUtc = utcNow() - (3600 * 2) |
||||
|
var redeemScript = cltvCheckSigInput(alice, bob, timeUtc) |
||||
|
var scriptPubKey = bitcoin.script.scriptHashOutput(bitcoin.crypto.hash160(redeemScript)) |
||||
|
var address = bitcoin.address.fromOutputScript(scriptPubKey, network) |
||||
|
|
||||
|
// fund the P2SH(CLTV) address
|
||||
|
blockchain.t.faucet(address, 2e4, function (err, unspent) { |
||||
|
if (err) return done(err) |
||||
|
|
||||
|
var tx = new bitcoin.TransactionBuilder(network) |
||||
|
tx.addInput(unspent.txId, 0, 0xfffffffe) |
||||
|
tx.addOutput(alice.getAddress(), 1000) |
||||
|
|
||||
|
var txRaw = tx.buildIncomplete() |
||||
|
var signatureHash = txRaw.hashForSignature(0, redeemScript, hashType) |
||||
|
var redeemScriptSig = bitcoin.script.scriptHashInput([ |
||||
|
alice.sign(signatureHash).toScriptSignature(hashType), |
||||
|
bob.sign(signatureHash).toScriptSignature(hashType), |
||||
|
bitcoin.opcodes.OP_FALSE |
||||
|
], redeemScript) |
||||
|
|
||||
|
txRaw.setInputScript(0, redeemScriptSig) |
||||
|
|
||||
|
blockchain.t.transactions.propagate(txRaw.toHex(), done) |
||||
|
}) |
||||
|
}) |
||||
|
|
||||
|
// expiry in the future, {Alice's signature} OP_TRUE
|
||||
|
it('fails when still time-locked', function (done) { |
||||
|
this.timeout(30000) |
||||
|
|
||||
|
// two hours from now
|
||||
|
var timeUtc = utcNow() + (3600 * 2) |
||||
|
var redeemScript = cltvCheckSigInput(alice, bob, timeUtc) |
||||
|
var scriptPubKey = bitcoin.script.scriptHashOutput(bitcoin.crypto.hash160(redeemScript)) |
||||
|
var address = bitcoin.address.fromOutputScript(scriptPubKey, network) |
||||
|
|
||||
|
// fund the P2SH(CLTV) address
|
||||
|
blockchain.t.faucet(address, 2e4, function (err, unspent) { |
||||
|
if (err) return done(err) |
||||
|
|
||||
|
var tx = new bitcoin.TransactionBuilder(network) |
||||
|
tx.setLockTime(timeUtc) |
||||
|
tx.addInput(unspent.txId, 0, 0xfffffffe) |
||||
|
tx.addOutput(alice.getAddress(), 1000) |
||||
|
|
||||
|
var txRaw = tx.buildIncomplete() |
||||
|
var signatureHash = txRaw.hashForSignature(0, redeemScript, hashType) |
||||
|
|
||||
|
// {Alice's signature} OP_TRUE
|
||||
|
var redeemScriptSig = bitcoin.script.scriptHashInput([ |
||||
|
alice.sign(signatureHash).toScriptSignature(hashType), |
||||
|
bitcoin.opcodes.OP_TRUE |
||||
|
], redeemScript) |
||||
|
|
||||
|
txRaw.setInputScript(0, redeemScriptSig) |
||||
|
|
||||
|
blockchain.t.transactions.propagate(txRaw.toHex(), function (err) { |
||||
|
assert.throws(function () { |
||||
|
if (err) throw err |
||||
|
}, /Error: 64: non-final/) |
||||
|
|
||||
|
done() |
||||
|
}) |
||||
|
}) |
||||
|
}) |
||||
|
}) |
||||
@ -0,0 +1,49 @@ |
|||||
|
/* global describe, it */ |
||||
|
|
||||
|
var assert = require('assert') |
||||
|
var bigi = require('bigi') |
||||
|
var bitcoin = require('../../') |
||||
|
|
||||
|
var ecurve = require('ecurve') |
||||
|
var secp256k1 = ecurve.getCurveByName('secp256k1') |
||||
|
|
||||
|
describe('bitcoinjs-lib (crypto)', function () { |
||||
|
it('can generate a single-key stealth address', function () { |
||||
|
var G = secp256k1.G |
||||
|
var n = secp256k1.n |
||||
|
|
||||
|
function stealthSend (Q) { |
||||
|
var noncePair = bitcoin.ECPair.makeRandom() |
||||
|
var e = noncePair.d |
||||
|
var eQ = Q.multiply(e) // shared secret
|
||||
|
var c = bigi.fromBuffer(bitcoin.crypto.sha256(eQ.getEncoded())) |
||||
|
var cG = G.multiply(c) |
||||
|
var Qprime = Q.add(cG) |
||||
|
|
||||
|
return { |
||||
|
shared: new bitcoin.ECPair(null, Qprime), |
||||
|
nonce: noncePair.Q |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
function stealthReceive (d, P) { |
||||
|
var dP = P.multiply(d) // shared secret
|
||||
|
var c = bigi.fromBuffer(bitcoin.crypto.sha256(dP.getEncoded())) |
||||
|
return new bitcoin.ECPair(d.add(c).mod(n)) |
||||
|
} |
||||
|
|
||||
|
// receiver private key
|
||||
|
var receiver = bitcoin.ECPair.fromWIF('5KYZdUEo39z3FPrtuX2QbbwGnNP5zTd7yyr2SC1j299sBCnWjss') |
||||
|
|
||||
|
var stealthS = stealthSend(receiver.Q) // public, done by sender
|
||||
|
// ... sender now reveals nonce to receiver
|
||||
|
|
||||
|
var stealthR = stealthReceive(receiver.d, stealthS.nonce) // private, done by receiver
|
||||
|
|
||||
|
// and check that we derived both sides correctly
|
||||
|
assert.equal(stealthS.shared.getAddress(), stealthR.getAddress()) |
||||
|
}) |
||||
|
|
||||
|
// TODO
|
||||
|
it.skip('can generate a dual-key stealth address', function () {}) |
||||
|
}) |
||||
Loading…
Reference in new issue