Initial commit

This commit is contained in:
ywlmac
2026-05-13 10:30:19 +08:00
commit a2a693885b
38 changed files with 5757 additions and 0 deletions
+11
View File
@@ -0,0 +1,11 @@
module wallet_sdk
go 1.15
require (
github.com/stretchr/testify v1.6.1
github.com/tencentyun/cos-go-sdk-v5 v0.7.7
github.com/tjfoc/gmsm v1.4.0
)
replace github.com/tencentyun/cos-go-sdk-v5 => github.com/tencentyun/cos-go-sdk-v5 v0.7.7
+94
View File
@@ -0,0 +1,94 @@
cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
github.com/QcloudApi/qcloud_sign_golang v0.0.0-20141224014652-e4130a326409/go.mod h1:1pk82RBxDY/JZnPQrtqHlUFfCctgdorsd9M06fMynOM=
github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98=
github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
github.com/golang/protobuf v1.3.3/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8=
github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA=
github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs=
github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:WU3c8KckQ9AFe+yFwt9sWVRKCVIyN9cPHBJSNnbL67w=
github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0=
github.com/golang/protobuf v1.4.2/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
github.com/google/go-querystring v1.0.0 h1:Xkwi/a1rcvNg1PPYe5vI8GbeBY/jrVuDX5ASuANWTrk=
github.com/google/go-querystring v1.0.0/go.mod h1:odCYkC5MyYFN7vkCjXpyrEuKhc/BUO6wN/zVPAxq5ck=
github.com/google/uuid v1.1.1 h1:Gkbcsh/GbpXz7lPftLA3P6TYMwjCLYm83jiFQZF/3gY=
github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
github.com/mozillazg/go-httpheader v0.2.1 h1:geV7TrjbL8KXSyvghnFm+NyTux/hxwueTSrwhe88TQQ=
github.com/mozillazg/go-httpheader v0.2.1/go.mod h1:jJ8xECTlalr6ValeXYdOF8fFUISeBAdw6E61aqQma60=
github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
github.com/stretchr/testify v1.6.1 h1:hDPOHmpOpP40lSULcqw7IrRb/u7w6RpDC9399XyoNd0=
github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
github.com/tencentyun/cos-go-sdk-v5 v0.7.7 h1:7YI5nNwLEhseUoWzzz1CDAwQMeJyJfD3Tj0XnQRzqO8=
github.com/tencentyun/cos-go-sdk-v5 v0.7.7/go.mod h1:wQBO5HdAkLjj2q6XQiIfDSP8DXDNrppDRw2Kp/1BODA=
github.com/tjfoc/gmsm v1.4.0 h1:8nbaiZG+iVdh+fXVw0DZoZZa7a4TGm3Qab+xdrdzj8s=
github.com/tjfoc/gmsm v1.4.0/go.mod h1:j4INPkHWMrhJb38G+J6W4Tw0AbuN8Thu3PbdVYhVcTE=
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
golang.org/x/crypto v0.0.0-20201012173705-84dcc777aaee h1:4yd7jl+vXjalO5ztz6Vc1VADv+S/80LGJmyl1ROJ2AI=
golang.org/x/crypto v0.0.0-20201012173705-84dcc777aaee/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU=
golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
golang.org/x/net v0.0.0-20201010224723-4f7140c49acb/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f h1:+Nyd8tzPX9R7BWHguqsrbFdRx3WQ/1ib8I44HXV5yTA=
golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY=
golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY=
google.golang.org/grpc v1.31.0/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak=
google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=
google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE=
google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo=
google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c h1:dUUwHk2QECo/6vqA44rthZ8ie2QXMNeKRTHCNY2nXvo=
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
@@ -0,0 +1,433 @@
package hdsignature
import (
"crypto/elliptic"
"crypto/rand"
"encoding/asn1"
"encoding/base64"
"encoding/hex"
"encoding/pem"
"fmt"
"math/big"
"github.com/tjfoc/gmsm/sm2"
"github.com/tjfoc/gmsm/sm3"
sm2x509 "github.com/tjfoc/gmsm/x509"
)
var (
curve = sm2.P256Sm2()
)
type PublicKey struct {
Key *sm2.PublicKey
Code []byte
}
type PrivateKey struct {
Key *sm2.PrivateKey
Code []byte
}
func CreateMasterKey(mnemonic string) (*PrivateKey, *PublicKey, error) {
keyStr, err := deriveKeyString([]byte(mnemonic), []byte(ZXRootSeed))
if err != nil {
return nil, nil, err
}
skStr := keyStr[:HDWKeyLength]
code := keyStr[HDWKeyLength:]
d := new(big.Int).SetBytes(skStr)
sk, err := composePrivateKey(d, code)
if err != nil {
return nil, nil, err
}
pk := sk.GetPublicKey()
return sk, pk, nil
}
// Private key methods
func (sk *PrivateKey) GetPublicKey() *PublicKey {
return &PublicKey{
Key: &sk.Key.PublicKey,
Code: sk.Code,
}
}
func (sk *PrivateKey) GetPEM(password []byte) (string, error) {
var skDER []byte
var err error
if password == nil {
skDER, err = sm2x509.MarshalSm2UnecryptedPrivateKey(sk.Key)
if err != nil {
return "", err
}
} else {
skDER, err = sm2x509.MarshalSm2EcryptedPrivateKey(sk.Key, password)
if err != nil {
return "", err
}
}
keyASN1 := HDKeyASN1{
Key: skDER,
Code: sk.Code,
}
keyBytes, err := asn1.Marshal(keyASN1)
if err != nil {
return "", err
}
keyBlock := &pem.Block{
Type: ZXPrivateKey,
Bytes: keyBytes,
}
return string(pem.EncodeToMemory(keyBlock)), nil
}
func (sk *PrivateKey) GetPrunedPEM(password []byte) (string, error) {
var skDER []byte
var err error
if password == nil {
skDER, err = sm2x509.MarshalSm2UnecryptedPrivateKey(sk.Key)
if err != nil {
return "", err
}
} else {
skDER, err = sm2x509.MarshalSm2EcryptedPrivateKey(sk.Key, password)
if err != nil {
return "", err
}
}
keyBlock := &pem.Block{
Type: PEMPrivateKey,
Bytes: skDER,
}
return string(pem.EncodeToMemory(keyBlock)), nil
}
func (sk *PrivateKey) GetBase64String(password []byte) (string, error) {
var skDER []byte
var err error
if password == nil {
skDER, err = sm2x509.MarshalSm2UnecryptedPrivateKey(sk.Key)
if err != nil {
return "", err
}
} else {
skDER, err = sm2x509.MarshalSm2EcryptedPrivateKey(sk.Key, password)
if err != nil {
return "", err
}
}
return base64.StdEncoding.EncodeToString(skDER), nil
}
func (sk *PrivateKey) Sign(data string) ([]byte, error) {
r, s, err := sm2.Sm2Sign(sk.Key, []byte(data), []byte(SM2DefaultUID), rand.Reader)
if err != nil {
return nil, err
}
return asn1.Marshal(ECSignature{R: r, S: s,})
}
func (sk *PrivateKey) GetAddress() (string, error) {
return sk.GetPublicKey().GetAddress()
}
func (sk *PrivateKey) DeriveChildPrivateKey(index uint32) (*PrivateKey, error) {
if sk.Code == nil {
return nil, fmt.Errorf("parent key is pruned")
}
var keySeed []byte
indexBytes := uint32Bytes(index)
if index >= FirstHardenedKey {
skBytes := sk.Key.D.Bytes()
if len(skBytes) < HDWKeyLength {
skBytes = append([]byte{0}, skBytes...)
}
keySeed = append(skBytes, indexBytes...)
} else {
pkBytes := sk.GetPublicKey().Bytes()
keySeed = append(pkBytes, indexBytes...)
}
keyString, err := deriveKeyString(keySeed, sk.Code)
if err != nil {
return nil, err
}
skStr := keyString[:HDWKeyLength]
code := keyString[HDWKeyLength:]
d := new(big.Int).Mod(new(big.Int).Add(new(big.Int).SetBytes(skStr), sk.Key.D), curve.Params().N)
skChild, err := composePrivateKey(d, code)
if err != nil {
return nil, err
}
return skChild, nil
}
func (sk *PrivateKey) DeriveChildPublicKey(index uint32) (*PublicKey, error) {
skChild, err := sk.DeriveChildPrivateKey(index)
if err != nil {
return nil, err
}
return skChild.GetPublicKey(), nil
}
func (sk *PrivateKey) DeriveKeyPairObjFromFullPath(indexPath []uint32) (*PrivateKey, error) {
var err error
if indexPath == nil || len(indexPath) == 0 {
return nil, fmt.Errorf("empty index path")
}
skChild := sk
for _, index := range indexPath {
skChild, err = skChild.DeriveChildPrivateKey(index)
if err != nil {
return nil, err
}
}
return skChild, nil
}
func (sk *PrivateKey) CreateCSRFromTemplatePEM(templateStr string) ([]byte, error) {
templateBlock, _ := pem.Decode([]byte(templateStr))
if templateBlock == nil {
return nil, fmt.Errorf("invalid CSR template")
}
template, err := sm2x509.ParseCertificateRequest(templateBlock.Bytes)
if err != nil {
return nil, err
}
return sk.CreateCSRFromTemplateObj(template)
}
func (sk *PrivateKey) CreateCSRFromTemplateObj(template *sm2x509.CertificateRequest) ([]byte, error) {
csrDER, err := sm2x509.CreateCertificateRequest(rand.Reader, template, sk.Key)
if err != nil {
return nil, err
}
return pem.EncodeToMemory(&pem.Block{
Type: PEMCSR,
Bytes: csrDER,
}), nil
}
// Public key methods
func (pk *PublicKey) GetPEM() (string, error) {
pkDER, err := sm2x509.MarshalSm2PublicKey(pk.Key)
if err != nil {
return "", err
}
keyASN1 := HDKeyASN1{
Key: pkDER,
Code: pk.Code,
}
keyBytes, err := asn1.Marshal(keyASN1)
if err != nil {
return "", err
}
keyBlock := &pem.Block{
Type: ZXPublicKey,
Bytes: keyBytes,
}
return string(pem.EncodeToMemory(keyBlock)), nil
}
func (pk *PublicKey) GetPrunedPEM() (string, error) {
pkDER, err := sm2x509.MarshalSm2PublicKey(pk.Key)
if err != nil {
return "", err
}
keyBlock := &pem.Block{
Type: PEMPublicKey,
Bytes: pkDER,
}
return string(pem.EncodeToMemory(keyBlock)), nil
}
func (pk *PublicKey) GetBase64String() (string, error) {
pkDER, err := sm2x509.MarshalSm2PublicKey(pk.Key)
if err != nil {
return "", nil
}
return base64.StdEncoding.EncodeToString(pkDER), nil
}
func (pk *PublicKey) Verify(data string, sig []byte) (bool, error) {
sigEC := &ECSignature{}
_, err := asn1.Unmarshal(sig, sigEC)
if err != nil {
return false, err
}
return sm2.Sm2Verify(pk.Key, []byte(data), []byte(SM2DefaultUID), sigEC.R, sigEC.S), nil
}
func (pk *PublicKey) Bytes() []byte {
return elliptic.Marshal(curve, pk.Key.X, pk.Key.Y)
}
func (pk *PublicKey) GetAddress() (string, error) {
pkBytes := pk.Bytes()
sm3Hash := sm3.New()
_, err := sm3Hash.Write(pkBytes)
if err != nil {
return "", err
}
pkDgst := sm3Hash.Sum(nil)
if len(pkDgst) <= HDWAddressLength {
return "", fmt.Errorf("invalid public key")
}
addrBytes := pkDgst[:HDWAddressLength]
addrHex := hex.EncodeToString(addrBytes)
return ZXAddrPrefix + addrHex, nil
}
func (pk *PublicKey) DeriveChildPublicKey(index uint32) (*PublicKey, error) {
if pk.Code == nil {
return nil, fmt.Errorf("parent key is pruned")
}
if index >= FirstHardenedKey {
return nil, fmt.Errorf("only private key can derive keys for hardened child %v", index)
}
indexBytes := uint32Bytes(index)
keySeed := append(pk.Bytes(), indexBytes...)
keyString, err := deriveKeyString(keySeed, pk.Code)
if err != nil {
return nil, err
}
skStr := keyString[:HDWKeyLength]
code := keyString[HDWKeyLength:]
x, y := curve.ScalarBaseMult(new(big.Int).SetBytes(skStr).Bytes())
xChild, yChild := curve.Add(x, y, pk.Key.X, pk.Key.Y)
return &PublicKey{
Key: &sm2.PublicKey{
Curve: curve,
X: xChild,
Y: yChild,
},
Code: code,
}, nil
}
func ParsePrivateKey(skPEM []byte, password []byte) (*PrivateKey, error) {
skBlock, _ := pem.Decode(skPEM)
if skBlock == nil {
return nil, fmt.Errorf("invalid private key PEM")
}
keyASN1 := &HDKeyASN1{}
_, err := asn1.Unmarshal(skBlock.Bytes, keyASN1)
if err == nil {
skSM2, err := sm2x509.ParsePKCS8PrivateKey(keyASN1.Key, password)
if err != nil {
return nil, err
}
return &PrivateKey{
Key: skSM2,
Code: keyASN1.Code,
}, nil
}
skSM2, err := sm2x509.ParsePKCS8PrivateKey(skBlock.Bytes, password)
if err != nil {
return nil, err
}
return &PrivateKey{
Key: skSM2,
Code: nil,
}, nil
}
func ParsePublicKey(pkPEM []byte) (*PublicKey, error) {
pkBlock, _ := pem.Decode(pkPEM)
if pkBlock == nil {
return nil, fmt.Errorf("invalid public key PEM")
}
keyASN1 := &HDKeyASN1{}
_, err := asn1.Unmarshal(pkBlock.Bytes, keyASN1)
if err == nil {
pkSM2, err := sm2x509.ParseSm2PublicKey(keyASN1.Key)
if err != nil {
return nil, err
}
return &PublicKey{
Key: pkSM2,
Code: keyASN1.Code,
}, nil
}
pkSM2, err := sm2x509.ParseSm2PublicKey(pkBlock.Bytes)
if err != nil {
return nil, err
}
return &PublicKey{
Key: pkSM2,
Code: nil,
}, nil
}
func ParseBase64PrivateKey(skBase64 string, password []byte) (*PrivateKey, error) {
skDER, err := base64.StdEncoding.DecodeString(skBase64)
if err != nil {
return nil, err
}
key, err := sm2x509.ParsePKCS8PrivateKey(skDER, password)
if err != nil {
return nil, err
}
return &PrivateKey{
Key: key,
Code: nil,
}, nil
}
func ParseBase64PublicKey(pkBase64 string) (*PublicKey, error) {
pkDER, err := base64.StdEncoding.DecodeString(pkBase64)
if err != nil {
return nil, err
}
key, err := sm2x509.ParseSm2PublicKey(pkDER)
if err != nil {
return nil, err
}
return &PublicKey{
Key: key,
Code: nil,
}, nil
}
func (pk *PublicKey) DeriveKeyPairObjFromFullPath(indexPath []uint32) (*PublicKey, error) {
var err error
if indexPath == nil || len(indexPath) == 0 {
return nil, fmt.Errorf("empty index path")
}
pkChild := pk
for _, index := range indexPath {
pkChild, err = pkChild.DeriveChildPublicKey(index)
if err != nil {
return nil, err
}
}
return pkChild, nil
}
@@ -0,0 +1,134 @@
package hdsignature
import (
"bytes"
"crypto/hmac"
"encoding/binary"
"fmt"
"math/big"
"github.com/tjfoc/gmsm/sm2"
"github.com/tjfoc/gmsm/sm3"
)
const (
FirstHardenedKey uint32 = 1 << 31
HDWKeyLength = 32
HDWKeyStringLength = HDWKeyLength * 2
HDWAddressLength = 20
SM2DefaultUID = "1234567812345678"
ZXAddrPrefix = "ZX"
ZXRootSeed = "ZX seed"
ZXPublicKey = "ZX PUBLIC KEY"
ZXPrivateKey = "ZX PRIVATE KEY"
PEMPublicKey = "PUBLIC KEY"
PEMPrivateKey = "PRIVATE KEY"
PEMCSR = "CERTIFICATE REQUEST"
SigMaxLength = 73
SigMinLength = 70
PubKeyMaxLength = 150
PubKeyMinLength = 80
ZXAddrPrefixV1 = "zx"
ZXAddrPrefixV2 = "Zx"
ZXAddrPrefixV3 = "zX"
)
type HDKeyASN1 struct {
Key []byte
Code []byte
}
type ECSignature struct {
R *big.Int `json:"r"`
S *big.Int `json:"s"`
}
func SM3HMAC(key []byte, data []byte) ([]byte, error) {
hmacSM3 := hmac.New(sm3.New, key)
_, err := hmacSM3.Write(data)
if err != nil {
return nil, err
}
return hmacSM3.Sum(nil), nil
}
func SM3Hash(data []byte) ([]byte, error) {
hashSM3 := sm3.New()
_, err := hashSM3.Write(data)
if err != nil {
return nil, err
}
return hashSM3.Sum(nil), nil
}
func uint32Bytes(i uint32) []byte {
bytes := make([]byte, 4)
binary.BigEndian.PutUint32(bytes, i)
return bytes
}
func validatePrivateKey(key []byte) error {
if fmt.Sprintf("%x", key) == "0000000000000000000000000000000000000000000000000000000000000000" || //if the key is zero
bytes.Compare(key, curve.Params().N.Bytes()) >= 0 || //or is outside of the curve
len(key) != 32 { //or is too short
return fmt.Errorf("invalid integer")
}
return nil
}
func deriveKeyString(seed, code []byte) ([]byte, error) {
skL, err := SM3HMAC(code, seed)
if err != nil {
return nil, err
}
err = validatePrivateKey(skL)
for err != nil {
skL, err = SM3HMAC(code, skL)
if err != nil {
return nil, err
}
err = validatePrivateKey(skL)
}
skR, err := SM3HMAC(code, skL)
if err != nil {
return nil, err
}
return append(skL, skR...), nil
}
func composePrivateKey(d *big.Int, code []byte) (*PrivateKey, error) {
x, y := curve.ScalarBaseMult(d.Bytes())
pkSM2 := sm2.PublicKey{
Curve: curve,
X: x,
Y: y,
}
skSM2 := sm2.PrivateKey{
PublicKey: pkSM2,
D: d,
}
sk := &PrivateKey{
Key: &skSM2,
Code: code,
}
return sk, nil
}
+300
View File
@@ -0,0 +1,300 @@
package wallet_sdk
import (
"crypto/rand"
"encoding/hex"
"encoding/pem"
"fmt"
"math/big"
"strconv"
"time"
hds "wallet_sdk/hdsignature"
"wallet_sdk/mnemonics"
)
const (
defaultEntropy = 128
)
var (
defaultIndexPathPrefix = []uint32{66, 0, 0, 0}
)
// Mnemonics
func CreateMnemonic() (string, error) {
entropy, err := mnemonics.NewEntropy(defaultEntropy)
if err != nil {
return "", err
}
return mnemonics.NewMnemonic(entropy)
}
// HD Signature
// DeriveKeyPair derives key pair strings for the node m/66/0/0/0/index
func DeriveKeyPair(mnemonic string, index uint32) (string, string, error) {
return DeriveKeyPairEncrypted(mnemonic, index, nil)
}
func DeriveKeyPairEncrypted(mnemonic string, index uint32, password []byte) (string, string, error) {
msk, _, err := hds.CreateMasterKey(mnemonic)
if err != nil {
return "", "", err
}
psk, err := msk.DeriveKeyPairObjFromFullPath(defaultIndexPathPrefix)
if err != nil {
return "", "", err
}
sk, err := psk.DeriveChildPrivateKey(index)
if err != nil {
return "", "", err
}
skPEM, err := sk.GetPrunedPEM(password)
if err != nil {
return "", "", err
}
pkPEM, err := sk.GetPublicKey().GetPrunedPEM()
if err != nil {
return "", "", err
}
return skPEM, pkPEM, nil
}
// DeriveKeyPairFullPath derives key pair strings for the node m/path[0]/...
func DeriveKeyPairFullPath(mnemonic string, path []uint32) (string, string, error) {
return DeriveKeyPairFullPathEncrypted(mnemonic, path, nil)
}
func DeriveKeyPairFullPathEncrypted(mnemonic string, path []uint32, password []byte) (string, string, error) {
msk, _, err := hds.CreateMasterKey(mnemonic)
if err != nil {
return "", "", err
}
sk, err := msk.DeriveKeyPairObjFromFullPath(path)
if err != nil {
return "", "", err
}
skPEM, err := sk.GetPrunedPEM(password)
if err != nil {
return "", "", err
}
pkPEM, err := sk.GetPublicKey().GetPrunedPEM()
if err != nil {
return "", "", err
}
return skPEM, pkPEM, nil
}
func PriKey2PubKey(pri string) (string, error) {
return EncryptedPriKey2PubKey(pri, nil)
}
func EncryptedPriKey2PubKey(pri string, password []byte) (string, error) {
sk, err := hds.ParsePrivateKey([]byte(pri), password)
if err != nil {
return "", err
}
return sk.GetPublicKey().GetPrunedPEM()
}
func PubKey2Address(pubKey string) (string, error) {
pk, err := hds.ParsePublicKey([]byte(pubKey))
if err != nil {
return "", err
}
return pk.GetAddress()
}
func PriKey2Address(priKey string) (string, error) {
return EncryptedPriKey2Address(priKey, nil)
}
func EncryptedPriKey2Address(priKey string, password []byte) (string, error) {
sk, err := hds.ParsePrivateKey([]byte(priKey), password)
if err != nil {
return "", err
}
return sk.GetAddress()
}
func SignByPriKey(priKey string, data string) (string, error) {
return SignByEncryptedPriKey(priKey, data, nil)
}
func SignByEncryptedPriKey(priKey string, data string, password []byte) (string, error) {
sk, err := hds.ParsePrivateKey([]byte(priKey), password)
if err != nil {
return "", err
}
sig, err := sk.Sign(data)
if err != nil {
return "", err
}
sigHex := hex.EncodeToString(sig)
return sigHex, nil
}
func VerifyByPubKey(pubKey string, signedData string, data string) (bool, error) {
pk, err := hds.ParsePublicKey([]byte(pubKey))
if err != nil {
return false, err
}
sig, err := hex.DecodeString(signedData)
if err != nil {
return false, err
}
return pk.Verify(data, sig)
}
func GetBase64PrivateKey(priKey string) (string, error) {
return GetBase64EncryptedPrivateKey(priKey, nil)
}
func GetBase64EncryptedPrivateKey(priKey string, password []byte) (string, error) {
sk, err := hds.ParsePrivateKey([]byte(priKey), password)
if err != nil {
return "", err
}
return sk.GetBase64String(password)
}
func GetBase64PublicKey(pubKey string) (string, error) {
pk, err := hds.ParsePublicKey([]byte(pubKey))
if err != nil {
return "", err
}
return pk.GetBase64String()
}
// Certificate with SM2 public key
// Create certificate request (csr)
func CreateCSR(priKey string, templateStr string) (string, error) {
return CreateCSRFromEncryptedPrivateKey(priKey, templateStr, nil)
}
func CreateCSRFromEncryptedPrivateKey(priKey string, templateStr string, password []byte) (string, error) {
sk, err := hds.ParsePrivateKey([]byte(priKey), password)
if err != nil {
return "", err
}
csr, err := sk.CreateCSRFromTemplatePEM(templateStr)
if err != nil {
return "", err
}
return string(csr), nil
}
func CheckSignatureValidity(sig string) (bool, error) {
sigBytes, err := hex.DecodeString(sig)
if err != nil {
return false, err
}
if len(sigBytes) < hds.SigMinLength || len(sigBytes) > hds.SigMaxLength {
return false, fmt.Errorf("invalid signature length (%d)", len(sig))
}
return true, nil
}
func CheckPublicKeyValidity(pubKey string) (bool, error) {
pubKeyBlock, _ := pem.Decode([]byte(pubKey))
if pubKeyBlock == nil {
return false, fmt.Errorf("invalid public key encoding")
}
if len(pubKeyBlock.Bytes) < hds.PubKeyMinLength || len(pubKeyBlock.Bytes) > hds.PubKeyMaxLength {
return false, fmt.Errorf("invalid public key length (%d)", len(pubKeyBlock.Bytes))
}
return true, nil
}
func CheckAddressValidity(address string) (bool, error) {
addressBytes := []byte(address)
prefix := string(addressBytes[:2])
pkHash := addressBytes[2:]
if len(pkHash) != hds.HDWAddressLength*2 {
return false, fmt.Errorf("hash part should be %d bytes", hds.HDWAddressLength*2)
}
_, err := hex.DecodeString(string(pkHash))
if err != nil {
return false, err
}
switch prefix {
case hds.ZXAddrPrefix, hds.ZXAddrPrefixV1, hds.ZXAddrPrefixV2, hds.ZXAddrPrefixV3:
return true, nil
default:
return false, fmt.Errorf("invalid prefix")
}
}
type SignData struct {
Signature string
SignatureTime string
Nonce int
}
const (
MaxRandNum = 1000000
MinRandNum = 100000
)
func GenerateApiSign(appId, appKey string) (signData *SignData, err error) {
now := time.Now()
signTime := strconv.FormatInt(now.UnixNano()/1e6, 10)
nonce, err := generateNonce()
if err != nil {
return nil, err
}
signData = &SignData{}
signStr := ""
if appId != "" && appKey != "" {
signStr = appId + "&" + appKey + "&" + signTime + "&" + strconv.Itoa(nonce)
} else {
signStr = signTime + "&" + strconv.Itoa(nonce)
}
sign, err := hds.SM3HMAC([]byte(appKey), []byte(signStr))
if err != nil {
return nil, err
}
signData.Signature = hex.EncodeToString(sign)
signData.SignatureTime = signTime
signData.Nonce = nonce
return signData, nil
}
func generateNonce() (int, error) {
b := new(big.Int).SetInt64(MaxRandNum)
randNum, err := rand.Int(rand.Reader, b)
if err != nil {
return -1, err
}
nonce := int(randNum.Int64())
if nonce < MinRandNum {
nonce = nonce + MinRandNum
}
return nonce, nil
}
@@ -0,0 +1,89 @@
package wallet_sdk
import (
"encoding/hex"
"math/rand"
"strconv"
"time"
"wallet_sdk/hdsignature"
)
func SM3Hash(data []byte) (string, error) {
data, err := hdsignature.SM3Hash(data)
if err != nil {
return "", err
}
return hex.EncodeToString(data), nil
}
type KeyPair struct {
Sk string
Pk string
}
func DeriveKeyPairMobile(mnemonic string, index int) (*KeyPair, error) {
keyPair := &KeyPair{}
sk, pk, err := DeriveKeyPair(mnemonic, uint32(index))
if err != nil {
return keyPair, err
}
keyPair.Sk = sk
keyPair.Pk = pk
return keyPair, nil
}
func DeriveKeyPairFullPathMobile(mnemonic string, path []int) (*KeyPair, error) {
keyPair := &KeyPair{}
var uintPath []uint32
for _, i := range path {
uintPath = append(uintPath, uint32(i))
}
sk, pk, err := DeriveKeyPairFullPath(mnemonic, uintPath)
if err != nil {
return keyPair, err
}
keyPair.Sk = sk
keyPair.Pk = pk
return keyPair, nil
}
type SignDataMobile struct {
Signature string
SignatureTime string
Nonce string
OriginSignData string
}
func GenerateApiSignMobile(appId, appKey string) (signData *SignDataMobile, err error) {
now := time.Now()
signTime := strconv.FormatInt(now.UnixNano()/1e6, 10)
nonce := rand.New(rand.NewSource(time.Now().UnixNano())).Intn(1000000)
signData = &SignDataMobile{}
nonceStr := strconv.Itoa(nonce)
signStr := ""
if appId != "" && appKey != "" {
signStr = appId + "&" + appKey + "&" + signTime + "&" + nonceStr
} else {
signStr = signTime + "&" + nonceStr
}
sign, err := hdsignature.SM3HMAC([]byte(appKey), []byte(signStr))
if err != nil {
return signData, err
}
signData.Signature = hex.EncodeToString(sign)
signData.SignatureTime = signTime
signData.Nonce = nonceStr
signData.OriginSignData = signStr
return signData, nil
}
@@ -0,0 +1,134 @@
package mnemonics
import (
"crypto/rand"
"encoding/binary"
"fmt"
"math/big"
"strings"
"wallet_sdk/mnemonics/wordlists"
"github.com/tjfoc/gmsm/sm3"
)
var (
// Some bitwise operands for working with big.Ints.
last11BitsMask = big.NewInt(2047)
shift11BitsMask = big.NewInt(2048)
bigOne = big.NewInt(1)
bigTwo = big.NewInt(2)
wordList []string
)
func init() {
wordList = wordlists.English
}
func validateEntropyBitSize(bitSize int) error {
if (bitSize%32) != 0 || bitSize < 128 || bitSize > 256 {
return fmt.Errorf("invalid entropy length")
}
return nil
}
func computeChecksum(data []byte) []byte {
hasher := sm3.New()
_, _ = hasher.Write(data) // This error is guaranteed to be nil
return hasher.Sum(nil)
}
func addChecksum(data []byte) []byte {
// Get first byte of sha256
hash := computeChecksum(data)
firstChecksumByte := hash[0]
// len() is in bytes so we divide by 4
checksumBitLength := uint(len(data) / 4)
// For each bit of check sum we want we shift the data one the left
// and then set the (new) right most bit equal to checksum bit at that index
// staring from the left
dataBigInt := new(big.Int).SetBytes(data)
for i := uint(0); i < checksumBitLength; i++ {
// Bitshift 1 left
dataBigInt.Mul(dataBigInt, bigTwo)
// Set rightmost bit if leftmost checksum bit is set
if firstChecksumByte&(1<<(7-i)) > 0 {
dataBigInt.Or(dataBigInt, bigOne)
}
}
return dataBigInt.Bytes()
}
func padByteSlice(slice []byte, length int) []byte {
offset := length - len(slice)
if offset <= 0 {
return slice
}
newSlice := make([]byte, length)
copy(newSlice[offset:], slice)
return newSlice
}
func NewEntropy(bitSize int) ([]byte, error) {
if err := validateEntropyBitSize(bitSize); err != nil {
return nil, err
}
entropy := make([]byte, bitSize/8)
_, _ = rand.Read(entropy) // err is always nil
return entropy, nil
}
func NewMnemonic(entropy []byte) (string, error) {
// Compute some lengths for convenience.
entropyBitLength := len(entropy) * 8
checksumBitLength := entropyBitLength / 32
sentenceLength := (entropyBitLength + checksumBitLength) / 11
// Validate that the requested size is supported.
err := validateEntropyBitSize(entropyBitLength)
if err != nil {
return "", err
}
// Add checksum to entropy.
entropy = addChecksum(entropy)
// Break entropy up into sentenceLength chunks of 11 bits.
// For each word AND mask the rightmost 11 bits and find the word at that index.
// Then bitshift entropy 11 bits right and repeat.
// Add to the last empty slot so we can work with LSBs instead of MSB.
// Entropy as an int so we can bitmask without worrying about bytes slices.
entropyInt := new(big.Int).SetBytes(entropy)
// Slice to hold words in.
words := make([]string, sentenceLength)
// Throw away big.Int for AND masking.
word := big.NewInt(0)
for i := sentenceLength - 1; i >= 0; i-- {
// Get 11 right most bits and bitshift 11 to the right for next time.
word.And(entropyInt, last11BitsMask)
entropyInt.Div(entropyInt, shift11BitsMask)
// Get the bytes representing the 11 bits as a 2 byte slice.
wordBytes := padByteSlice(word.Bytes(), 2)
// Convert bytes to an index and add that word to the list.
words[i] = wordList[binary.BigEndian.Uint16(wordBytes)]
}
return strings.Join(words, " "), nil
}
File diff suppressed because it is too large Load Diff
@@ -0,0 +1,75 @@
package wallet_sdk
import (
"context"
"fmt"
"github.com/tencentyun/cos-go-sdk-v5"
"net/http"
"net/url"
"strings"
"time"
)
type URLToken struct {
SessionToken string `url:"x-cos-security-token,omitempty" header:"-"`
}
func UploadToCos(cosUrl, tempSecretId, tempSecretKey, sessionToken, filePath string) error {
if !strings.HasPrefix(cosUrl, "http") {
cosUrl = "https://" + cosUrl
}
u, err := url.Parse(cosUrl)
if err != nil {
return fmt.Errorf("parse url failed, [err:%s]", err)
}
b := &cos.BaseURL{BucketURL: u}
c := cos.NewClient(b, &http.Client{})
var uploadUrl string
if strings.HasPrefix(cosUrl, "https://") {
uploadUrl = cosUrl[len(u.Host)+9 : len(cosUrl)]
} else {
uploadUrl = cosUrl[len(u.Host)+8 : len(cosUrl)]
}
ctx := context.Background()
token := &URLToken{
SessionToken: sessionToken,
}
presignedURL, err := c.Object.GetPresignedURL(ctx, http.MethodHead, uploadUrl, tempSecretId, tempSecretKey, time.Hour, token)
if err != nil {
return fmt.Errorf("get presigned url failed, [err:%s]", err)
}
req, err := http.NewRequest(http.MethodHead, presignedURL.String(), nil)
if err != nil {
return fmt.Errorf("create head file request failed, [err:%s]", err)
}
resp, err := http.DefaultClient.Do(req)
if err != nil {
return fmt.Errorf("head file failed, [err:%s]", err)
} else {
if resp.StatusCode != http.StatusNotFound {
if resp.StatusCode == http.StatusOK {
return fmt.Errorf("key already exists")
} else {
return fmt.Errorf("head file failed, resp: %+v", resp)
}
}
}
client := cos.NewClient(b, &http.Client{
Transport: &cos.AuthorizationTransport{
SecretID: tempSecretId,
SecretKey: tempSecretKey,
SessionToken: sessionToken,
},
})
_, _, err = client.Object.Upload(context.Background(), uploadUrl, filePath, nil)
if err != nil {
return fmt.Errorf("upload file to cos failed, [err:%s]:", err)
}
return nil
}