forked from bitcoin/bitcoin
-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Squashed 'src/secp256k1/' changes from efe85c70a2..6ddf3e958e
6ddf3e958e [DEMO-ONLY] add bip352 test vectors running suite using python and ctypes 0b5293f4f2 test: add simple BIP-352 test with mixed plain/taproot inputs 26bdb5f195 silentpayments: implement output spending privkey creation (for receiver) d6c9856bde silentpayments: add routine for tx output scanning (for receiver) 8460be58cc silentpayments: implement output pubkey creation (for sender) dbcccbb7cc silentpayments: add routine for creating labelled spend pubkeys (for addresses) 2a00e12e58 silentpayments: add label tweak calculation routine b0e37968b0 silentpayments: add shared secret creation routine (a*B == A*b) 842e5bf427 silentpayments: add tweaked pubkey creation routine (for light clients / sp index) 98f5ba4aa6 silentpayments: add public tweak data creation routine 81d13038d5 silentpayments: add private tweak data creation routine 6e3ed2d5df doc: add module description for secp256k1-silentpayments a9a5fe8e28 build: add skeleton for new silentpayments (BIP352) module 2483627299 Merge bitcoin-core/secp256k1#1483: cmake: Recommend native CMake commands in README 5ad3aa3dcd Merge bitcoin-core/secp256k1#1484: tests: Drop redundant _scalar_check_overflow calls 51df2d9ab3 tests: Drop redundant _scalar_check_overflow calls 3777e3f36a cmake: Recommend native CMake commands in README e4af41c61b Merge bitcoin-core/secp256k1#1249: cmake: Add `SECP256K1_LATE_CFLAGS` configure option 3bf4d68fc0 Merge bitcoin-core/secp256k1#1482: build: Clean up handling of module dependencies e6822678ea build: Error if required module explicitly off 89ec583ccf build: Clean up handling of module dependencies 44378867a0 Merge bitcoin-core/secp256k1#1468: v0.4.1 release aftermath a9db9f2d75 Merge bitcoin-core/secp256k1#1480: Get rid of untested sizeof(secp256k1_ge_storage) == 64 code path 74b7c3b53e Merge bitcoin-core/secp256k1#1476: include: make docs more consistent b37fdb28ce check-abi: Minor UI improvements ad5f589a94 check-abi: Default to HEAD for new version 9fb7e2f156 release process: Style and formatting nits ba5d72d626 assumptions: Use new STATIC_ASSERT macro e53c2d9ffc Require that sizeof(secp256k1_ge_storage) == 64 d0ba2abbff util: Add STATIC_ASSERT macro da7bc1b803 include: in doc, remove article in front of "pointer" aa3dd5280b include: make doc about ctx more consistent e3f690015a include: remove obvious "cannot be NULL" doc d373bf6d08 Merge bitcoin-core/secp256k1#1474: tests: restore scalar_mul test 79e094517c Merge bitcoin-core/secp256k1#1473: Fix typos 3dbfb48946 tests: restore scalar_mul test d77170a88d Fix typos e7053d065b release process: Add email step 429d21dc79 release process: Run sanity checks on release PR 42f8c51402 cmake: Add `SECP256K1_LATE_CFLAGS` configure option git-subtree-dir: src/secp256k1 git-subtree-split: 6ddf3e958e60f01ef1e9c85d9f957d91cf0abba7
- Loading branch information
Showing
30 changed files
with
4,111 additions
and
215 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,135 @@ | ||
| # Copyright (c) 2017, 2020 Pieter Wuille | ||
| # | ||
| # Permission is hereby granted, free of charge, to any person obtaining a copy | ||
| # of this software and associated documentation files (the "Software"), to deal | ||
| # in the Software without restriction, including without limitation the rights | ||
| # to use, copy, modify, merge, publish, distribute, sublicense, and/or sell | ||
| # copies of the Software, and to permit persons to whom the Software is | ||
| # furnished to do so, subject to the following conditions: | ||
| # | ||
| # The above copyright notice and this permission notice shall be included in | ||
| # all copies or substantial portions of the Software. | ||
| # | ||
| # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR | ||
| # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, | ||
| # FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE | ||
| # AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | ||
| # LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, | ||
| # OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN | ||
| # THE SOFTWARE. | ||
|
|
||
| """Reference implementation for Bech32/Bech32m and segwit addresses.""" | ||
|
|
||
|
|
||
| from enum import Enum | ||
|
|
||
| class Encoding(Enum): | ||
| """Enumeration type to list the various supported encodings.""" | ||
| BECH32 = 1 | ||
| BECH32M = 2 | ||
|
|
||
| CHARSET = "qpzry9x8gf2tvdw0s3jn54khce6mua7l" | ||
| BECH32M_CONST = 0x2bc830a3 | ||
|
|
||
| def bech32_polymod(values): | ||
| """Internal function that computes the Bech32 checksum.""" | ||
| generator = [0x3b6a57b2, 0x26508e6d, 0x1ea119fa, 0x3d4233dd, 0x2a1462b3] | ||
| chk = 1 | ||
| for value in values: | ||
| top = chk >> 25 | ||
| chk = (chk & 0x1ffffff) << 5 ^ value | ||
| for i in range(5): | ||
| chk ^= generator[i] if ((top >> i) & 1) else 0 | ||
| return chk | ||
|
|
||
|
|
||
| def bech32_hrp_expand(hrp): | ||
| """Expand the HRP into values for checksum computation.""" | ||
| return [ord(x) >> 5 for x in hrp] + [0] + [ord(x) & 31 for x in hrp] | ||
|
|
||
|
|
||
| def bech32_verify_checksum(hrp, data): | ||
| """Verify a checksum given HRP and converted data characters.""" | ||
| const = bech32_polymod(bech32_hrp_expand(hrp) + data) | ||
| if const == 1: | ||
| return Encoding.BECH32 | ||
| if const == BECH32M_CONST: | ||
| return Encoding.BECH32M | ||
| return None | ||
|
|
||
| def bech32_create_checksum(hrp, data, spec): | ||
| """Compute the checksum values given HRP and data.""" | ||
| values = bech32_hrp_expand(hrp) + data | ||
| const = BECH32M_CONST if spec == Encoding.BECH32M else 1 | ||
| polymod = bech32_polymod(values + [0, 0, 0, 0, 0, 0]) ^ const | ||
| return [(polymod >> 5 * (5 - i)) & 31 for i in range(6)] | ||
|
|
||
|
|
||
| def bech32_encode(hrp, data, spec): | ||
| """Compute a Bech32 string given HRP and data values.""" | ||
| combined = data + bech32_create_checksum(hrp, data, spec) | ||
| return hrp + '1' + ''.join([CHARSET[d] for d in combined]) | ||
|
|
||
| def bech32_decode(bech): | ||
| """Validate a Bech32/Bech32m string, and determine HRP and data.""" | ||
| if ((any(ord(x) < 33 or ord(x) > 126 for x in bech)) or | ||
| (bech.lower() != bech and bech.upper() != bech)): | ||
| return (None, None, None) | ||
| bech = bech.lower() | ||
| pos = bech.rfind('1') | ||
|
|
||
| # remove the requirement that bech32m be less than 90 chars | ||
| if pos < 1 or pos + 7 > len(bech): | ||
| return (None, None, None) | ||
| if not all(x in CHARSET for x in bech[pos+1:]): | ||
| return (None, None, None) | ||
| hrp = bech[:pos] | ||
| data = [CHARSET.find(x) for x in bech[pos+1:]] | ||
| spec = bech32_verify_checksum(hrp, data) | ||
| if spec is None: | ||
| return (None, None, None) | ||
| return (hrp, data[:-6], spec) | ||
|
|
||
| def convertbits(data, frombits, tobits, pad=True): | ||
| """General power-of-2 base conversion.""" | ||
| acc = 0 | ||
| bits = 0 | ||
| ret = [] | ||
| maxv = (1 << tobits) - 1 | ||
| max_acc = (1 << (frombits + tobits - 1)) - 1 | ||
| for value in data: | ||
| if value < 0 or (value >> frombits): | ||
| return None | ||
| acc = ((acc << frombits) | value) & max_acc | ||
| bits += frombits | ||
| while bits >= tobits: | ||
| bits -= tobits | ||
| ret.append((acc >> bits) & maxv) | ||
| if pad: | ||
| if bits: | ||
| ret.append((acc << (tobits - bits)) & maxv) | ||
| elif bits >= frombits or ((acc << (tobits - bits)) & maxv): | ||
| return None | ||
| return ret | ||
|
|
||
|
|
||
| def decode(hrp, addr): | ||
| """Decode a segwit address.""" | ||
| hrpgot, data, spec = bech32_decode(addr) | ||
| if hrpgot != hrp: | ||
| return (None, None) | ||
| decoded = convertbits(data[1:], 5, 8, False) | ||
| if decoded is None or len(decoded) < 2: | ||
| return (None, None) | ||
| if data[0] > 16: | ||
| return (None, None) | ||
| return (data[0], decoded) | ||
|
|
||
|
|
||
| def encode(hrp, witver, witprog): | ||
| """Encode a segwit address.""" | ||
| spec = Encoding.BECH32 if witver == 0 else Encoding.BECH32M | ||
| ret = bech32_encode(hrp, [witver] + convertbits(witprog, 8, 5), spec) | ||
| if decode(hrp, ret) == (None, None): | ||
| return None | ||
| return ret |
Oops, something went wrong.