Initial commit
This commit is contained in:
@@ -0,0 +1,11 @@
|
||||
module wallet_sdk
|
||||
|
||||
go 1.15
|
||||
|
||||
require (
|
||||
github.com/stretchr/testify v1.6.1
|
||||
github.com/tencentyun/cos-go-sdk-v5 v0.7.7
|
||||
github.com/tjfoc/gmsm v1.4.0
|
||||
)
|
||||
|
||||
replace github.com/tencentyun/cos-go-sdk-v5 => github.com/tencentyun/cos-go-sdk-v5 v0.7.7
|
||||
@@ -0,0 +1,94 @@
|
||||
cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
|
||||
github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
|
||||
github.com/QcloudApi/qcloud_sign_golang v0.0.0-20141224014652-e4130a326409/go.mod h1:1pk82RBxDY/JZnPQrtqHlUFfCctgdorsd9M06fMynOM=
|
||||
github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
|
||||
github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
|
||||
github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
|
||||
github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
|
||||
github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
|
||||
github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
|
||||
github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98=
|
||||
github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
|
||||
github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
|
||||
github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
|
||||
github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
|
||||
github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
|
||||
github.com/golang/protobuf v1.3.3/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
|
||||
github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8=
|
||||
github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA=
|
||||
github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs=
|
||||
github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:WU3c8KckQ9AFe+yFwt9sWVRKCVIyN9cPHBJSNnbL67w=
|
||||
github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0=
|
||||
github.com/golang/protobuf v1.4.2/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
|
||||
github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
|
||||
github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
|
||||
github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
|
||||
github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
|
||||
github.com/google/go-querystring v1.0.0 h1:Xkwi/a1rcvNg1PPYe5vI8GbeBY/jrVuDX5ASuANWTrk=
|
||||
github.com/google/go-querystring v1.0.0/go.mod h1:odCYkC5MyYFN7vkCjXpyrEuKhc/BUO6wN/zVPAxq5ck=
|
||||
github.com/google/uuid v1.1.1 h1:Gkbcsh/GbpXz7lPftLA3P6TYMwjCLYm83jiFQZF/3gY=
|
||||
github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
|
||||
github.com/mozillazg/go-httpheader v0.2.1 h1:geV7TrjbL8KXSyvghnFm+NyTux/hxwueTSrwhe88TQQ=
|
||||
github.com/mozillazg/go-httpheader v0.2.1/go.mod h1:jJ8xECTlalr6ValeXYdOF8fFUISeBAdw6E61aqQma60=
|
||||
github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
|
||||
github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
|
||||
github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
|
||||
github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
|
||||
github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
|
||||
github.com/stretchr/testify v1.6.1 h1:hDPOHmpOpP40lSULcqw7IrRb/u7w6RpDC9399XyoNd0=
|
||||
github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
|
||||
github.com/tencentyun/cos-go-sdk-v5 v0.7.7 h1:7YI5nNwLEhseUoWzzz1CDAwQMeJyJfD3Tj0XnQRzqO8=
|
||||
github.com/tencentyun/cos-go-sdk-v5 v0.7.7/go.mod h1:wQBO5HdAkLjj2q6XQiIfDSP8DXDNrppDRw2Kp/1BODA=
|
||||
github.com/tjfoc/gmsm v1.4.0 h1:8nbaiZG+iVdh+fXVw0DZoZZa7a4TGm3Qab+xdrdzj8s=
|
||||
github.com/tjfoc/gmsm v1.4.0/go.mod h1:j4INPkHWMrhJb38G+J6W4Tw0AbuN8Thu3PbdVYhVcTE=
|
||||
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
|
||||
golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
|
||||
golang.org/x/crypto v0.0.0-20201012173705-84dcc777aaee h1:4yd7jl+vXjalO5ztz6Vc1VADv+S/80LGJmyl1ROJ2AI=
|
||||
golang.org/x/crypto v0.0.0-20201012173705-84dcc777aaee/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
|
||||
golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
|
||||
golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
|
||||
golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU=
|
||||
golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
|
||||
golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
|
||||
golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
|
||||
golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
|
||||
golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
|
||||
golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
|
||||
golang.org/x/net v0.0.0-20201010224723-4f7140c49acb/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
|
||||
golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
|
||||
golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
|
||||
golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
|
||||
golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
|
||||
golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
|
||||
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
|
||||
golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
|
||||
golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f h1:+Nyd8tzPX9R7BWHguqsrbFdRx3WQ/1ib8I44HXV5yTA=
|
||||
golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
|
||||
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
|
||||
golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
|
||||
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
|
||||
golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
|
||||
golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY=
|
||||
golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
|
||||
golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
|
||||
golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
|
||||
google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
|
||||
google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
|
||||
google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
|
||||
google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
|
||||
google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
|
||||
google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
|
||||
google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY=
|
||||
google.golang.org/grpc v1.31.0/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak=
|
||||
google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
|
||||
google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
|
||||
google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=
|
||||
google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE=
|
||||
google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo=
|
||||
google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
|
||||
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
|
||||
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
|
||||
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c h1:dUUwHk2QECo/6vqA44rthZ8ie2QXMNeKRTHCNY2nXvo=
|
||||
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
|
||||
honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
|
||||
honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
|
||||
@@ -0,0 +1,433 @@
|
||||
package hdsignature
|
||||
|
||||
import (
|
||||
"crypto/elliptic"
|
||||
"crypto/rand"
|
||||
"encoding/asn1"
|
||||
"encoding/base64"
|
||||
"encoding/hex"
|
||||
"encoding/pem"
|
||||
"fmt"
|
||||
"math/big"
|
||||
|
||||
"github.com/tjfoc/gmsm/sm2"
|
||||
"github.com/tjfoc/gmsm/sm3"
|
||||
sm2x509 "github.com/tjfoc/gmsm/x509"
|
||||
)
|
||||
|
||||
var (
|
||||
curve = sm2.P256Sm2()
|
||||
)
|
||||
|
||||
type PublicKey struct {
|
||||
Key *sm2.PublicKey
|
||||
Code []byte
|
||||
}
|
||||
|
||||
type PrivateKey struct {
|
||||
Key *sm2.PrivateKey
|
||||
Code []byte
|
||||
}
|
||||
|
||||
func CreateMasterKey(mnemonic string) (*PrivateKey, *PublicKey, error) {
|
||||
keyStr, err := deriveKeyString([]byte(mnemonic), []byte(ZXRootSeed))
|
||||
if err != nil {
|
||||
return nil, nil, err
|
||||
}
|
||||
|
||||
skStr := keyStr[:HDWKeyLength]
|
||||
code := keyStr[HDWKeyLength:]
|
||||
d := new(big.Int).SetBytes(skStr)
|
||||
sk, err := composePrivateKey(d, code)
|
||||
if err != nil {
|
||||
return nil, nil, err
|
||||
}
|
||||
|
||||
pk := sk.GetPublicKey()
|
||||
|
||||
return sk, pk, nil
|
||||
}
|
||||
|
||||
// Private key methods
|
||||
|
||||
func (sk *PrivateKey) GetPublicKey() *PublicKey {
|
||||
return &PublicKey{
|
||||
Key: &sk.Key.PublicKey,
|
||||
Code: sk.Code,
|
||||
}
|
||||
}
|
||||
|
||||
func (sk *PrivateKey) GetPEM(password []byte) (string, error) {
|
||||
var skDER []byte
|
||||
var err error
|
||||
if password == nil {
|
||||
skDER, err = sm2x509.MarshalSm2UnecryptedPrivateKey(sk.Key)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
} else {
|
||||
skDER, err = sm2x509.MarshalSm2EcryptedPrivateKey(sk.Key, password)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
}
|
||||
keyASN1 := HDKeyASN1{
|
||||
Key: skDER,
|
||||
Code: sk.Code,
|
||||
}
|
||||
keyBytes, err := asn1.Marshal(keyASN1)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
keyBlock := &pem.Block{
|
||||
Type: ZXPrivateKey,
|
||||
Bytes: keyBytes,
|
||||
}
|
||||
return string(pem.EncodeToMemory(keyBlock)), nil
|
||||
}
|
||||
|
||||
func (sk *PrivateKey) GetPrunedPEM(password []byte) (string, error) {
|
||||
var skDER []byte
|
||||
var err error
|
||||
if password == nil {
|
||||
skDER, err = sm2x509.MarshalSm2UnecryptedPrivateKey(sk.Key)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
} else {
|
||||
skDER, err = sm2x509.MarshalSm2EcryptedPrivateKey(sk.Key, password)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
}
|
||||
keyBlock := &pem.Block{
|
||||
Type: PEMPrivateKey,
|
||||
Bytes: skDER,
|
||||
}
|
||||
return string(pem.EncodeToMemory(keyBlock)), nil
|
||||
}
|
||||
|
||||
func (sk *PrivateKey) GetBase64String(password []byte) (string, error) {
|
||||
var skDER []byte
|
||||
var err error
|
||||
if password == nil {
|
||||
skDER, err = sm2x509.MarshalSm2UnecryptedPrivateKey(sk.Key)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
} else {
|
||||
skDER, err = sm2x509.MarshalSm2EcryptedPrivateKey(sk.Key, password)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
}
|
||||
return base64.StdEncoding.EncodeToString(skDER), nil
|
||||
}
|
||||
|
||||
func (sk *PrivateKey) Sign(data string) ([]byte, error) {
|
||||
r, s, err := sm2.Sm2Sign(sk.Key, []byte(data), []byte(SM2DefaultUID), rand.Reader)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return asn1.Marshal(ECSignature{R: r, S: s,})
|
||||
}
|
||||
|
||||
func (sk *PrivateKey) GetAddress() (string, error) {
|
||||
return sk.GetPublicKey().GetAddress()
|
||||
}
|
||||
|
||||
func (sk *PrivateKey) DeriveChildPrivateKey(index uint32) (*PrivateKey, error) {
|
||||
if sk.Code == nil {
|
||||
return nil, fmt.Errorf("parent key is pruned")
|
||||
}
|
||||
var keySeed []byte
|
||||
indexBytes := uint32Bytes(index)
|
||||
if index >= FirstHardenedKey {
|
||||
skBytes := sk.Key.D.Bytes()
|
||||
if len(skBytes) < HDWKeyLength {
|
||||
skBytes = append([]byte{0}, skBytes...)
|
||||
}
|
||||
keySeed = append(skBytes, indexBytes...)
|
||||
} else {
|
||||
pkBytes := sk.GetPublicKey().Bytes()
|
||||
keySeed = append(pkBytes, indexBytes...)
|
||||
}
|
||||
|
||||
keyString, err := deriveKeyString(keySeed, sk.Code)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
skStr := keyString[:HDWKeyLength]
|
||||
code := keyString[HDWKeyLength:]
|
||||
d := new(big.Int).Mod(new(big.Int).Add(new(big.Int).SetBytes(skStr), sk.Key.D), curve.Params().N)
|
||||
|
||||
skChild, err := composePrivateKey(d, code)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
return skChild, nil
|
||||
}
|
||||
|
||||
func (sk *PrivateKey) DeriveChildPublicKey(index uint32) (*PublicKey, error) {
|
||||
skChild, err := sk.DeriveChildPrivateKey(index)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return skChild.GetPublicKey(), nil
|
||||
}
|
||||
|
||||
func (sk *PrivateKey) DeriveKeyPairObjFromFullPath(indexPath []uint32) (*PrivateKey, error) {
|
||||
var err error
|
||||
|
||||
if indexPath == nil || len(indexPath) == 0 {
|
||||
return nil, fmt.Errorf("empty index path")
|
||||
}
|
||||
|
||||
skChild := sk
|
||||
for _, index := range indexPath {
|
||||
skChild, err = skChild.DeriveChildPrivateKey(index)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
}
|
||||
|
||||
return skChild, nil
|
||||
}
|
||||
|
||||
func (sk *PrivateKey) CreateCSRFromTemplatePEM(templateStr string) ([]byte, error) {
|
||||
templateBlock, _ := pem.Decode([]byte(templateStr))
|
||||
if templateBlock == nil {
|
||||
return nil, fmt.Errorf("invalid CSR template")
|
||||
}
|
||||
template, err := sm2x509.ParseCertificateRequest(templateBlock.Bytes)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
return sk.CreateCSRFromTemplateObj(template)
|
||||
}
|
||||
|
||||
func (sk *PrivateKey) CreateCSRFromTemplateObj(template *sm2x509.CertificateRequest) ([]byte, error) {
|
||||
csrDER, err := sm2x509.CreateCertificateRequest(rand.Reader, template, sk.Key)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
return pem.EncodeToMemory(&pem.Block{
|
||||
Type: PEMCSR,
|
||||
Bytes: csrDER,
|
||||
}), nil
|
||||
}
|
||||
|
||||
// Public key methods
|
||||
|
||||
func (pk *PublicKey) GetPEM() (string, error) {
|
||||
pkDER, err := sm2x509.MarshalSm2PublicKey(pk.Key)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
keyASN1 := HDKeyASN1{
|
||||
Key: pkDER,
|
||||
Code: pk.Code,
|
||||
}
|
||||
keyBytes, err := asn1.Marshal(keyASN1)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
keyBlock := &pem.Block{
|
||||
Type: ZXPublicKey,
|
||||
Bytes: keyBytes,
|
||||
}
|
||||
return string(pem.EncodeToMemory(keyBlock)), nil
|
||||
}
|
||||
|
||||
func (pk *PublicKey) GetPrunedPEM() (string, error) {
|
||||
pkDER, err := sm2x509.MarshalSm2PublicKey(pk.Key)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
keyBlock := &pem.Block{
|
||||
Type: PEMPublicKey,
|
||||
Bytes: pkDER,
|
||||
}
|
||||
return string(pem.EncodeToMemory(keyBlock)), nil
|
||||
}
|
||||
|
||||
func (pk *PublicKey) GetBase64String() (string, error) {
|
||||
pkDER, err := sm2x509.MarshalSm2PublicKey(pk.Key)
|
||||
if err != nil {
|
||||
return "", nil
|
||||
}
|
||||
return base64.StdEncoding.EncodeToString(pkDER), nil
|
||||
}
|
||||
|
||||
func (pk *PublicKey) Verify(data string, sig []byte) (bool, error) {
|
||||
sigEC := &ECSignature{}
|
||||
_, err := asn1.Unmarshal(sig, sigEC)
|
||||
if err != nil {
|
||||
return false, err
|
||||
}
|
||||
return sm2.Sm2Verify(pk.Key, []byte(data), []byte(SM2DefaultUID), sigEC.R, sigEC.S), nil
|
||||
}
|
||||
|
||||
func (pk *PublicKey) Bytes() []byte {
|
||||
return elliptic.Marshal(curve, pk.Key.X, pk.Key.Y)
|
||||
}
|
||||
|
||||
func (pk *PublicKey) GetAddress() (string, error) {
|
||||
pkBytes := pk.Bytes()
|
||||
sm3Hash := sm3.New()
|
||||
_, err := sm3Hash.Write(pkBytes)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
pkDgst := sm3Hash.Sum(nil)
|
||||
if len(pkDgst) <= HDWAddressLength {
|
||||
return "", fmt.Errorf("invalid public key")
|
||||
}
|
||||
addrBytes := pkDgst[:HDWAddressLength]
|
||||
addrHex := hex.EncodeToString(addrBytes)
|
||||
return ZXAddrPrefix + addrHex, nil
|
||||
}
|
||||
|
||||
func (pk *PublicKey) DeriveChildPublicKey(index uint32) (*PublicKey, error) {
|
||||
if pk.Code == nil {
|
||||
return nil, fmt.Errorf("parent key is pruned")
|
||||
}
|
||||
if index >= FirstHardenedKey {
|
||||
return nil, fmt.Errorf("only private key can derive keys for hardened child %v", index)
|
||||
}
|
||||
|
||||
indexBytes := uint32Bytes(index)
|
||||
keySeed := append(pk.Bytes(), indexBytes...)
|
||||
|
||||
keyString, err := deriveKeyString(keySeed, pk.Code)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
skStr := keyString[:HDWKeyLength]
|
||||
code := keyString[HDWKeyLength:]
|
||||
|
||||
x, y := curve.ScalarBaseMult(new(big.Int).SetBytes(skStr).Bytes())
|
||||
xChild, yChild := curve.Add(x, y, pk.Key.X, pk.Key.Y)
|
||||
|
||||
return &PublicKey{
|
||||
Key: &sm2.PublicKey{
|
||||
Curve: curve,
|
||||
X: xChild,
|
||||
Y: yChild,
|
||||
},
|
||||
Code: code,
|
||||
}, nil
|
||||
}
|
||||
|
||||
func ParsePrivateKey(skPEM []byte, password []byte) (*PrivateKey, error) {
|
||||
skBlock, _ := pem.Decode(skPEM)
|
||||
if skBlock == nil {
|
||||
return nil, fmt.Errorf("invalid private key PEM")
|
||||
}
|
||||
keyASN1 := &HDKeyASN1{}
|
||||
_, err := asn1.Unmarshal(skBlock.Bytes, keyASN1)
|
||||
if err == nil {
|
||||
skSM2, err := sm2x509.ParsePKCS8PrivateKey(keyASN1.Key, password)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return &PrivateKey{
|
||||
Key: skSM2,
|
||||
Code: keyASN1.Code,
|
||||
}, nil
|
||||
}
|
||||
|
||||
skSM2, err := sm2x509.ParsePKCS8PrivateKey(skBlock.Bytes, password)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return &PrivateKey{
|
||||
Key: skSM2,
|
||||
Code: nil,
|
||||
}, nil
|
||||
}
|
||||
|
||||
func ParsePublicKey(pkPEM []byte) (*PublicKey, error) {
|
||||
pkBlock, _ := pem.Decode(pkPEM)
|
||||
if pkBlock == nil {
|
||||
return nil, fmt.Errorf("invalid public key PEM")
|
||||
}
|
||||
keyASN1 := &HDKeyASN1{}
|
||||
_, err := asn1.Unmarshal(pkBlock.Bytes, keyASN1)
|
||||
if err == nil {
|
||||
pkSM2, err := sm2x509.ParseSm2PublicKey(keyASN1.Key)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return &PublicKey{
|
||||
Key: pkSM2,
|
||||
Code: keyASN1.Code,
|
||||
}, nil
|
||||
}
|
||||
|
||||
pkSM2, err := sm2x509.ParseSm2PublicKey(pkBlock.Bytes)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return &PublicKey{
|
||||
Key: pkSM2,
|
||||
Code: nil,
|
||||
}, nil
|
||||
}
|
||||
|
||||
func ParseBase64PrivateKey(skBase64 string, password []byte) (*PrivateKey, error) {
|
||||
skDER, err := base64.StdEncoding.DecodeString(skBase64)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
key, err := sm2x509.ParsePKCS8PrivateKey(skDER, password)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
return &PrivateKey{
|
||||
Key: key,
|
||||
Code: nil,
|
||||
}, nil
|
||||
}
|
||||
|
||||
func ParseBase64PublicKey(pkBase64 string) (*PublicKey, error) {
|
||||
pkDER, err := base64.StdEncoding.DecodeString(pkBase64)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
key, err := sm2x509.ParseSm2PublicKey(pkDER)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
return &PublicKey{
|
||||
Key: key,
|
||||
Code: nil,
|
||||
}, nil
|
||||
}
|
||||
|
||||
func (pk *PublicKey) DeriveKeyPairObjFromFullPath(indexPath []uint32) (*PublicKey, error) {
|
||||
var err error
|
||||
|
||||
if indexPath == nil || len(indexPath) == 0 {
|
||||
return nil, fmt.Errorf("empty index path")
|
||||
}
|
||||
|
||||
pkChild := pk
|
||||
for _, index := range indexPath {
|
||||
pkChild, err = pkChild.DeriveChildPublicKey(index)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
}
|
||||
|
||||
return pkChild, nil
|
||||
}
|
||||
@@ -0,0 +1,134 @@
|
||||
package hdsignature
|
||||
|
||||
import (
|
||||
"bytes"
|
||||
"crypto/hmac"
|
||||
"encoding/binary"
|
||||
"fmt"
|
||||
"math/big"
|
||||
|
||||
"github.com/tjfoc/gmsm/sm2"
|
||||
"github.com/tjfoc/gmsm/sm3"
|
||||
)
|
||||
|
||||
const (
|
||||
FirstHardenedKey uint32 = 1 << 31
|
||||
|
||||
HDWKeyLength = 32
|
||||
HDWKeyStringLength = HDWKeyLength * 2
|
||||
HDWAddressLength = 20
|
||||
|
||||
SM2DefaultUID = "1234567812345678"
|
||||
|
||||
ZXAddrPrefix = "ZX"
|
||||
ZXRootSeed = "ZX seed"
|
||||
|
||||
ZXPublicKey = "ZX PUBLIC KEY"
|
||||
ZXPrivateKey = "ZX PRIVATE KEY"
|
||||
|
||||
PEMPublicKey = "PUBLIC KEY"
|
||||
PEMPrivateKey = "PRIVATE KEY"
|
||||
|
||||
PEMCSR = "CERTIFICATE REQUEST"
|
||||
|
||||
SigMaxLength = 73
|
||||
SigMinLength = 70
|
||||
|
||||
PubKeyMaxLength = 150
|
||||
PubKeyMinLength = 80
|
||||
|
||||
ZXAddrPrefixV1 = "zx"
|
||||
ZXAddrPrefixV2 = "Zx"
|
||||
ZXAddrPrefixV3 = "zX"
|
||||
)
|
||||
|
||||
type HDKeyASN1 struct {
|
||||
Key []byte
|
||||
Code []byte
|
||||
}
|
||||
|
||||
type ECSignature struct {
|
||||
R *big.Int `json:"r"`
|
||||
S *big.Int `json:"s"`
|
||||
}
|
||||
|
||||
func SM3HMAC(key []byte, data []byte) ([]byte, error) {
|
||||
hmacSM3 := hmac.New(sm3.New, key)
|
||||
_, err := hmacSM3.Write(data)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return hmacSM3.Sum(nil), nil
|
||||
}
|
||||
|
||||
func SM3Hash(data []byte) ([]byte, error) {
|
||||
hashSM3 := sm3.New()
|
||||
_, err := hashSM3.Write(data)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return hashSM3.Sum(nil), nil
|
||||
}
|
||||
|
||||
func uint32Bytes(i uint32) []byte {
|
||||
bytes := make([]byte, 4)
|
||||
binary.BigEndian.PutUint32(bytes, i)
|
||||
return bytes
|
||||
}
|
||||
|
||||
func validatePrivateKey(key []byte) error {
|
||||
if fmt.Sprintf("%x", key) == "0000000000000000000000000000000000000000000000000000000000000000" || //if the key is zero
|
||||
bytes.Compare(key, curve.Params().N.Bytes()) >= 0 || //or is outside of the curve
|
||||
len(key) != 32 { //or is too short
|
||||
return fmt.Errorf("invalid integer")
|
||||
}
|
||||
|
||||
return nil
|
||||
}
|
||||
|
||||
func deriveKeyString(seed, code []byte) ([]byte, error) {
|
||||
skL, err := SM3HMAC(code, seed)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
err = validatePrivateKey(skL)
|
||||
|
||||
for err != nil {
|
||||
skL, err = SM3HMAC(code, skL)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
err = validatePrivateKey(skL)
|
||||
}
|
||||
|
||||
skR, err := SM3HMAC(code, skL)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
return append(skL, skR...), nil
|
||||
}
|
||||
|
||||
func composePrivateKey(d *big.Int, code []byte) (*PrivateKey, error) {
|
||||
x, y := curve.ScalarBaseMult(d.Bytes())
|
||||
|
||||
pkSM2 := sm2.PublicKey{
|
||||
Curve: curve,
|
||||
X: x,
|
||||
Y: y,
|
||||
}
|
||||
|
||||
skSM2 := sm2.PrivateKey{
|
||||
PublicKey: pkSM2,
|
||||
D: d,
|
||||
}
|
||||
|
||||
sk := &PrivateKey{
|
||||
Key: &skSM2,
|
||||
Code: code,
|
||||
}
|
||||
|
||||
return sk, nil
|
||||
}
|
||||
@@ -0,0 +1,300 @@
|
||||
package wallet_sdk
|
||||
|
||||
import (
|
||||
"crypto/rand"
|
||||
"encoding/hex"
|
||||
"encoding/pem"
|
||||
"fmt"
|
||||
"math/big"
|
||||
"strconv"
|
||||
"time"
|
||||
hds "wallet_sdk/hdsignature"
|
||||
"wallet_sdk/mnemonics"
|
||||
)
|
||||
|
||||
const (
|
||||
defaultEntropy = 128
|
||||
)
|
||||
|
||||
var (
|
||||
defaultIndexPathPrefix = []uint32{66, 0, 0, 0}
|
||||
)
|
||||
|
||||
// Mnemonics
|
||||
|
||||
func CreateMnemonic() (string, error) {
|
||||
entropy, err := mnemonics.NewEntropy(defaultEntropy)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
return mnemonics.NewMnemonic(entropy)
|
||||
}
|
||||
|
||||
// HD Signature
|
||||
|
||||
// DeriveKeyPair derives key pair strings for the node m/66/0/0/0/index
|
||||
func DeriveKeyPair(mnemonic string, index uint32) (string, string, error) {
|
||||
return DeriveKeyPairEncrypted(mnemonic, index, nil)
|
||||
}
|
||||
|
||||
func DeriveKeyPairEncrypted(mnemonic string, index uint32, password []byte) (string, string, error) {
|
||||
msk, _, err := hds.CreateMasterKey(mnemonic)
|
||||
if err != nil {
|
||||
return "", "", err
|
||||
}
|
||||
|
||||
psk, err := msk.DeriveKeyPairObjFromFullPath(defaultIndexPathPrefix)
|
||||
if err != nil {
|
||||
return "", "", err
|
||||
}
|
||||
|
||||
sk, err := psk.DeriveChildPrivateKey(index)
|
||||
if err != nil {
|
||||
return "", "", err
|
||||
}
|
||||
|
||||
skPEM, err := sk.GetPrunedPEM(password)
|
||||
if err != nil {
|
||||
return "", "", err
|
||||
}
|
||||
|
||||
pkPEM, err := sk.GetPublicKey().GetPrunedPEM()
|
||||
if err != nil {
|
||||
return "", "", err
|
||||
}
|
||||
|
||||
return skPEM, pkPEM, nil
|
||||
}
|
||||
|
||||
// DeriveKeyPairFullPath derives key pair strings for the node m/path[0]/...
|
||||
func DeriveKeyPairFullPath(mnemonic string, path []uint32) (string, string, error) {
|
||||
return DeriveKeyPairFullPathEncrypted(mnemonic, path, nil)
|
||||
}
|
||||
func DeriveKeyPairFullPathEncrypted(mnemonic string, path []uint32, password []byte) (string, string, error) {
|
||||
msk, _, err := hds.CreateMasterKey(mnemonic)
|
||||
if err != nil {
|
||||
return "", "", err
|
||||
}
|
||||
|
||||
sk, err := msk.DeriveKeyPairObjFromFullPath(path)
|
||||
if err != nil {
|
||||
return "", "", err
|
||||
}
|
||||
|
||||
skPEM, err := sk.GetPrunedPEM(password)
|
||||
if err != nil {
|
||||
return "", "", err
|
||||
}
|
||||
|
||||
pkPEM, err := sk.GetPublicKey().GetPrunedPEM()
|
||||
if err != nil {
|
||||
return "", "", err
|
||||
}
|
||||
|
||||
return skPEM, pkPEM, nil
|
||||
}
|
||||
|
||||
func PriKey2PubKey(pri string) (string, error) {
|
||||
return EncryptedPriKey2PubKey(pri, nil)
|
||||
}
|
||||
|
||||
func EncryptedPriKey2PubKey(pri string, password []byte) (string, error) {
|
||||
sk, err := hds.ParsePrivateKey([]byte(pri), password)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
|
||||
return sk.GetPublicKey().GetPrunedPEM()
|
||||
}
|
||||
|
||||
func PubKey2Address(pubKey string) (string, error) {
|
||||
pk, err := hds.ParsePublicKey([]byte(pubKey))
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
|
||||
return pk.GetAddress()
|
||||
}
|
||||
|
||||
func PriKey2Address(priKey string) (string, error) {
|
||||
return EncryptedPriKey2Address(priKey, nil)
|
||||
}
|
||||
|
||||
func EncryptedPriKey2Address(priKey string, password []byte) (string, error) {
|
||||
sk, err := hds.ParsePrivateKey([]byte(priKey), password)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
|
||||
return sk.GetAddress()
|
||||
}
|
||||
|
||||
func SignByPriKey(priKey string, data string) (string, error) {
|
||||
return SignByEncryptedPriKey(priKey, data, nil)
|
||||
}
|
||||
|
||||
func SignByEncryptedPriKey(priKey string, data string, password []byte) (string, error) {
|
||||
sk, err := hds.ParsePrivateKey([]byte(priKey), password)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
|
||||
sig, err := sk.Sign(data)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
sigHex := hex.EncodeToString(sig)
|
||||
return sigHex, nil
|
||||
}
|
||||
|
||||
func VerifyByPubKey(pubKey string, signedData string, data string) (bool, error) {
|
||||
pk, err := hds.ParsePublicKey([]byte(pubKey))
|
||||
if err != nil {
|
||||
return false, err
|
||||
}
|
||||
|
||||
sig, err := hex.DecodeString(signedData)
|
||||
if err != nil {
|
||||
return false, err
|
||||
}
|
||||
return pk.Verify(data, sig)
|
||||
}
|
||||
|
||||
func GetBase64PrivateKey(priKey string) (string, error) {
|
||||
return GetBase64EncryptedPrivateKey(priKey, nil)
|
||||
}
|
||||
|
||||
func GetBase64EncryptedPrivateKey(priKey string, password []byte) (string, error) {
|
||||
sk, err := hds.ParsePrivateKey([]byte(priKey), password)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
return sk.GetBase64String(password)
|
||||
}
|
||||
|
||||
func GetBase64PublicKey(pubKey string) (string, error) {
|
||||
pk, err := hds.ParsePublicKey([]byte(pubKey))
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
return pk.GetBase64String()
|
||||
}
|
||||
|
||||
// Certificate with SM2 public key
|
||||
|
||||
// Create certificate request (csr)
|
||||
func CreateCSR(priKey string, templateStr string) (string, error) {
|
||||
return CreateCSRFromEncryptedPrivateKey(priKey, templateStr, nil)
|
||||
}
|
||||
|
||||
func CreateCSRFromEncryptedPrivateKey(priKey string, templateStr string, password []byte) (string, error) {
|
||||
sk, err := hds.ParsePrivateKey([]byte(priKey), password)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
|
||||
csr, err := sk.CreateCSRFromTemplatePEM(templateStr)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
|
||||
return string(csr), nil
|
||||
}
|
||||
|
||||
func CheckSignatureValidity(sig string) (bool, error) {
|
||||
sigBytes, err := hex.DecodeString(sig)
|
||||
if err != nil {
|
||||
return false, err
|
||||
}
|
||||
|
||||
if len(sigBytes) < hds.SigMinLength || len(sigBytes) > hds.SigMaxLength {
|
||||
return false, fmt.Errorf("invalid signature length (%d)", len(sig))
|
||||
}
|
||||
|
||||
return true, nil
|
||||
}
|
||||
|
||||
func CheckPublicKeyValidity(pubKey string) (bool, error) {
|
||||
pubKeyBlock, _ := pem.Decode([]byte(pubKey))
|
||||
if pubKeyBlock == nil {
|
||||
return false, fmt.Errorf("invalid public key encoding")
|
||||
}
|
||||
|
||||
if len(pubKeyBlock.Bytes) < hds.PubKeyMinLength || len(pubKeyBlock.Bytes) > hds.PubKeyMaxLength {
|
||||
return false, fmt.Errorf("invalid public key length (%d)", len(pubKeyBlock.Bytes))
|
||||
}
|
||||
|
||||
return true, nil
|
||||
}
|
||||
|
||||
func CheckAddressValidity(address string) (bool, error) {
|
||||
addressBytes := []byte(address)
|
||||
prefix := string(addressBytes[:2])
|
||||
pkHash := addressBytes[2:]
|
||||
|
||||
if len(pkHash) != hds.HDWAddressLength*2 {
|
||||
return false, fmt.Errorf("hash part should be %d bytes", hds.HDWAddressLength*2)
|
||||
}
|
||||
|
||||
_, err := hex.DecodeString(string(pkHash))
|
||||
if err != nil {
|
||||
return false, err
|
||||
}
|
||||
|
||||
switch prefix {
|
||||
case hds.ZXAddrPrefix, hds.ZXAddrPrefixV1, hds.ZXAddrPrefixV2, hds.ZXAddrPrefixV3:
|
||||
return true, nil
|
||||
default:
|
||||
return false, fmt.Errorf("invalid prefix")
|
||||
}
|
||||
}
|
||||
|
||||
type SignData struct {
|
||||
Signature string
|
||||
SignatureTime string
|
||||
Nonce int
|
||||
}
|
||||
|
||||
const (
|
||||
MaxRandNum = 1000000
|
||||
MinRandNum = 100000
|
||||
)
|
||||
|
||||
func GenerateApiSign(appId, appKey string) (signData *SignData, err error) {
|
||||
now := time.Now()
|
||||
signTime := strconv.FormatInt(now.UnixNano()/1e6, 10)
|
||||
nonce, err := generateNonce()
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
signData = &SignData{}
|
||||
|
||||
signStr := ""
|
||||
if appId != "" && appKey != "" {
|
||||
signStr = appId + "&" + appKey + "&" + signTime + "&" + strconv.Itoa(nonce)
|
||||
} else {
|
||||
signStr = signTime + "&" + strconv.Itoa(nonce)
|
||||
}
|
||||
|
||||
sign, err := hds.SM3HMAC([]byte(appKey), []byte(signStr))
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
signData.Signature = hex.EncodeToString(sign)
|
||||
signData.SignatureTime = signTime
|
||||
signData.Nonce = nonce
|
||||
return signData, nil
|
||||
}
|
||||
|
||||
func generateNonce() (int, error) {
|
||||
b := new(big.Int).SetInt64(MaxRandNum)
|
||||
randNum, err := rand.Int(rand.Reader, b)
|
||||
if err != nil {
|
||||
return -1, err
|
||||
}
|
||||
nonce := int(randNum.Int64())
|
||||
if nonce < MinRandNum {
|
||||
nonce = nonce + MinRandNum
|
||||
}
|
||||
return nonce, nil
|
||||
}
|
||||
@@ -0,0 +1,89 @@
|
||||
package wallet_sdk
|
||||
|
||||
import (
|
||||
"encoding/hex"
|
||||
"math/rand"
|
||||
"strconv"
|
||||
"time"
|
||||
"wallet_sdk/hdsignature"
|
||||
)
|
||||
|
||||
func SM3Hash(data []byte) (string, error) {
|
||||
data, err := hdsignature.SM3Hash(data)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
return hex.EncodeToString(data), nil
|
||||
}
|
||||
|
||||
type KeyPair struct {
|
||||
Sk string
|
||||
Pk string
|
||||
}
|
||||
|
||||
func DeriveKeyPairMobile(mnemonic string, index int) (*KeyPair, error) {
|
||||
keyPair := &KeyPair{}
|
||||
sk, pk, err := DeriveKeyPair(mnemonic, uint32(index))
|
||||
|
||||
if err != nil {
|
||||
return keyPair, err
|
||||
}
|
||||
|
||||
keyPair.Sk = sk
|
||||
keyPair.Pk = pk
|
||||
|
||||
return keyPair, nil
|
||||
}
|
||||
|
||||
func DeriveKeyPairFullPathMobile(mnemonic string, path []int) (*KeyPair, error) {
|
||||
keyPair := &KeyPair{}
|
||||
|
||||
var uintPath []uint32
|
||||
for _, i := range path {
|
||||
uintPath = append(uintPath, uint32(i))
|
||||
}
|
||||
|
||||
sk, pk, err := DeriveKeyPairFullPath(mnemonic, uintPath)
|
||||
if err != nil {
|
||||
return keyPair, err
|
||||
}
|
||||
|
||||
keyPair.Sk = sk
|
||||
keyPair.Pk = pk
|
||||
|
||||
return keyPair, nil
|
||||
}
|
||||
|
||||
type SignDataMobile struct {
|
||||
Signature string
|
||||
SignatureTime string
|
||||
Nonce string
|
||||
OriginSignData string
|
||||
}
|
||||
|
||||
func GenerateApiSignMobile(appId, appKey string) (signData *SignDataMobile, err error) {
|
||||
now := time.Now()
|
||||
signTime := strconv.FormatInt(now.UnixNano()/1e6, 10)
|
||||
nonce := rand.New(rand.NewSource(time.Now().UnixNano())).Intn(1000000)
|
||||
|
||||
signData = &SignDataMobile{}
|
||||
|
||||
nonceStr := strconv.Itoa(nonce)
|
||||
|
||||
signStr := ""
|
||||
if appId != "" && appKey != "" {
|
||||
signStr = appId + "&" + appKey + "&" + signTime + "&" + nonceStr
|
||||
} else {
|
||||
signStr = signTime + "&" + nonceStr
|
||||
}
|
||||
|
||||
sign, err := hdsignature.SM3HMAC([]byte(appKey), []byte(signStr))
|
||||
if err != nil {
|
||||
return signData, err
|
||||
}
|
||||
signData.Signature = hex.EncodeToString(sign)
|
||||
signData.SignatureTime = signTime
|
||||
signData.Nonce = nonceStr
|
||||
signData.OriginSignData = signStr
|
||||
return signData, nil
|
||||
}
|
||||
@@ -0,0 +1,134 @@
|
||||
package mnemonics
|
||||
|
||||
import (
|
||||
"crypto/rand"
|
||||
"encoding/binary"
|
||||
"fmt"
|
||||
"math/big"
|
||||
"strings"
|
||||
"wallet_sdk/mnemonics/wordlists"
|
||||
|
||||
"github.com/tjfoc/gmsm/sm3"
|
||||
)
|
||||
|
||||
var (
|
||||
// Some bitwise operands for working with big.Ints.
|
||||
last11BitsMask = big.NewInt(2047)
|
||||
shift11BitsMask = big.NewInt(2048)
|
||||
bigOne = big.NewInt(1)
|
||||
bigTwo = big.NewInt(2)
|
||||
|
||||
wordList []string
|
||||
)
|
||||
|
||||
func init() {
|
||||
wordList = wordlists.English
|
||||
}
|
||||
|
||||
func validateEntropyBitSize(bitSize int) error {
|
||||
if (bitSize%32) != 0 || bitSize < 128 || bitSize > 256 {
|
||||
return fmt.Errorf("invalid entropy length")
|
||||
}
|
||||
|
||||
return nil
|
||||
}
|
||||
|
||||
func computeChecksum(data []byte) []byte {
|
||||
hasher := sm3.New()
|
||||
_, _ = hasher.Write(data) // This error is guaranteed to be nil
|
||||
|
||||
return hasher.Sum(nil)
|
||||
}
|
||||
|
||||
func addChecksum(data []byte) []byte {
|
||||
// Get first byte of sha256
|
||||
hash := computeChecksum(data)
|
||||
firstChecksumByte := hash[0]
|
||||
|
||||
// len() is in bytes so we divide by 4
|
||||
checksumBitLength := uint(len(data) / 4)
|
||||
|
||||
// For each bit of check sum we want we shift the data one the left
|
||||
// and then set the (new) right most bit equal to checksum bit at that index
|
||||
// staring from the left
|
||||
dataBigInt := new(big.Int).SetBytes(data)
|
||||
|
||||
for i := uint(0); i < checksumBitLength; i++ {
|
||||
// Bitshift 1 left
|
||||
dataBigInt.Mul(dataBigInt, bigTwo)
|
||||
|
||||
// Set rightmost bit if leftmost checksum bit is set
|
||||
if firstChecksumByte&(1<<(7-i)) > 0 {
|
||||
dataBigInt.Or(dataBigInt, bigOne)
|
||||
}
|
||||
}
|
||||
|
||||
return dataBigInt.Bytes()
|
||||
}
|
||||
|
||||
func padByteSlice(slice []byte, length int) []byte {
|
||||
offset := length - len(slice)
|
||||
if offset <= 0 {
|
||||
return slice
|
||||
}
|
||||
|
||||
newSlice := make([]byte, length)
|
||||
copy(newSlice[offset:], slice)
|
||||
|
||||
return newSlice
|
||||
}
|
||||
|
||||
func NewEntropy(bitSize int) ([]byte, error) {
|
||||
if err := validateEntropyBitSize(bitSize); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
entropy := make([]byte, bitSize/8)
|
||||
_, _ = rand.Read(entropy) // err is always nil
|
||||
|
||||
return entropy, nil
|
||||
}
|
||||
|
||||
func NewMnemonic(entropy []byte) (string, error) {
|
||||
// Compute some lengths for convenience.
|
||||
entropyBitLength := len(entropy) * 8
|
||||
checksumBitLength := entropyBitLength / 32
|
||||
sentenceLength := (entropyBitLength + checksumBitLength) / 11
|
||||
|
||||
// Validate that the requested size is supported.
|
||||
err := validateEntropyBitSize(entropyBitLength)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
|
||||
// Add checksum to entropy.
|
||||
entropy = addChecksum(entropy)
|
||||
|
||||
// Break entropy up into sentenceLength chunks of 11 bits.
|
||||
// For each word AND mask the rightmost 11 bits and find the word at that index.
|
||||
// Then bitshift entropy 11 bits right and repeat.
|
||||
// Add to the last empty slot so we can work with LSBs instead of MSB.
|
||||
|
||||
// Entropy as an int so we can bitmask without worrying about bytes slices.
|
||||
entropyInt := new(big.Int).SetBytes(entropy)
|
||||
|
||||
// Slice to hold words in.
|
||||
words := make([]string, sentenceLength)
|
||||
|
||||
// Throw away big.Int for AND masking.
|
||||
word := big.NewInt(0)
|
||||
|
||||
for i := sentenceLength - 1; i >= 0; i-- {
|
||||
// Get 11 right most bits and bitshift 11 to the right for next time.
|
||||
word.And(entropyInt, last11BitsMask)
|
||||
entropyInt.Div(entropyInt, shift11BitsMask)
|
||||
|
||||
// Get the bytes representing the 11 bits as a 2 byte slice.
|
||||
wordBytes := padByteSlice(word.Bytes(), 2)
|
||||
|
||||
// Convert bytes to an index and add that word to the list.
|
||||
words[i] = wordList[binary.BigEndian.Uint16(wordBytes)]
|
||||
}
|
||||
|
||||
return strings.Join(words, " "), nil
|
||||
}
|
||||
+2071
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,75 @@
|
||||
package wallet_sdk
|
||||
|
||||
import (
|
||||
"context"
|
||||
"fmt"
|
||||
"github.com/tencentyun/cos-go-sdk-v5"
|
||||
"net/http"
|
||||
"net/url"
|
||||
"strings"
|
||||
"time"
|
||||
)
|
||||
|
||||
type URLToken struct {
|
||||
SessionToken string `url:"x-cos-security-token,omitempty" header:"-"`
|
||||
}
|
||||
|
||||
func UploadToCos(cosUrl, tempSecretId, tempSecretKey, sessionToken, filePath string) error {
|
||||
if !strings.HasPrefix(cosUrl, "http") {
|
||||
cosUrl = "https://" + cosUrl
|
||||
}
|
||||
u, err := url.Parse(cosUrl)
|
||||
if err != nil {
|
||||
return fmt.Errorf("parse url failed, [err:%s]", err)
|
||||
}
|
||||
|
||||
b := &cos.BaseURL{BucketURL: u}
|
||||
c := cos.NewClient(b, &http.Client{})
|
||||
|
||||
var uploadUrl string
|
||||
if strings.HasPrefix(cosUrl, "https://") {
|
||||
uploadUrl = cosUrl[len(u.Host)+9 : len(cosUrl)]
|
||||
} else {
|
||||
uploadUrl = cosUrl[len(u.Host)+8 : len(cosUrl)]
|
||||
}
|
||||
|
||||
ctx := context.Background()
|
||||
token := &URLToken{
|
||||
SessionToken: sessionToken,
|
||||
}
|
||||
|
||||
presignedURL, err := c.Object.GetPresignedURL(ctx, http.MethodHead, uploadUrl, tempSecretId, tempSecretKey, time.Hour, token)
|
||||
if err != nil {
|
||||
return fmt.Errorf("get presigned url failed, [err:%s]", err)
|
||||
}
|
||||
|
||||
req, err := http.NewRequest(http.MethodHead, presignedURL.String(), nil)
|
||||
if err != nil {
|
||||
return fmt.Errorf("create head file request failed, [err:%s]", err)
|
||||
}
|
||||
|
||||
resp, err := http.DefaultClient.Do(req)
|
||||
if err != nil {
|
||||
return fmt.Errorf("head file failed, [err:%s]", err)
|
||||
} else {
|
||||
if resp.StatusCode != http.StatusNotFound {
|
||||
if resp.StatusCode == http.StatusOK {
|
||||
return fmt.Errorf("key already exists")
|
||||
} else {
|
||||
return fmt.Errorf("head file failed, resp: %+v", resp)
|
||||
}
|
||||
}
|
||||
}
|
||||
client := cos.NewClient(b, &http.Client{
|
||||
Transport: &cos.AuthorizationTransport{
|
||||
SecretID: tempSecretId,
|
||||
SecretKey: tempSecretKey,
|
||||
SessionToken: sessionToken,
|
||||
},
|
||||
})
|
||||
_, _, err = client.Object.Upload(context.Background(), uploadUrl, filePath, nil)
|
||||
if err != nil {
|
||||
return fmt.Errorf("upload file to cos failed, [err:%s]:", err)
|
||||
}
|
||||
return nil
|
||||
}
|
||||
Reference in New Issue
Block a user