79d79012d4
It should be possible to check to see if a message isForMe with only the scanKeypair, and not the payloadKeypair. There was a bug where only the scanKeypair was being used to produce the receiveKeypair, but this was a mistake. Both the scanPubkey and payloadPubkey should be necessary to produce the receivePubkey, and both the scanPrivkey and payloadPrivkey should be necessary to produce the receivePrivkey. If an online computer has only the public keys of both (and the scanPrivkey), then that is good enough to check for isForMe.
75 lines
2.3 KiB
JavaScript
75 lines
2.3 KiB
JavaScript
var Keypair = require('../keypair');
|
|
var Privkey = require('../privkey');
|
|
var Pubkey = require('../pubkey');
|
|
var Point = require('../point');
|
|
var Hash = require('../hash');
|
|
var KDF = require('../kdf');
|
|
var base58check = require('../base58check');
|
|
|
|
var Stealthkey = function Stealthkey(payloadKeypair, scanKeypair) {
|
|
if (!(this instanceof Stealthkey))
|
|
return new Stealthkey(payloadKeypair, scanKeypair);
|
|
|
|
if (payloadKeypair instanceof Keypair) {
|
|
this.set({
|
|
payloadKeypair: payloadKeypair,
|
|
scanKeypair: scanKeypair
|
|
});
|
|
}
|
|
else if (payloadKeypair) {
|
|
var obj = payloadKeypair;
|
|
this.set(obj);
|
|
}
|
|
};
|
|
|
|
Stealthkey.prototype.set = function(obj) {
|
|
this.payloadKeypair = obj.payloadKeypair || this.payloadKeypair;
|
|
this.scanKeypair = obj.scanKeypair || this.scanKeypair;
|
|
return this;
|
|
};
|
|
|
|
Stealthkey.prototype.fromRandom = function() {
|
|
this.payloadKeypair = Keypair().fromRandom();
|
|
this.scanKeypair = Keypair().fromRandom();
|
|
|
|
return this;
|
|
};
|
|
|
|
Stealthkey.prototype.getSharedKeypair = function(senderPubkey) {
|
|
var sharedSecretPoint = senderPubkey.point.mul(this.scanKeypair.privkey.bn);
|
|
var sharedSecretPubkey = Pubkey({point: sharedSecretPoint});
|
|
var buf = sharedSecretPubkey.toDER(true);
|
|
var sharedKeypair = KDF.sha256hmac2keypair(buf);
|
|
|
|
return sharedKeypair;
|
|
};
|
|
|
|
Stealthkey.prototype.getReceivePubkey = function(senderPubkey) {
|
|
var sharedKeypair = this.getSharedKeypair(senderPubkey);
|
|
var pubkey = Pubkey({point: this.scanKeypair.pubkey.point.add(sharedKeypair.pubkey.point).add(this.payloadKeypair.pubkey.point)});
|
|
|
|
return pubkey;
|
|
};
|
|
|
|
Stealthkey.prototype.getReceiveKeypair = function(senderPubkey) {
|
|
var sharedKeypair = this.getSharedKeypair(senderPubkey);
|
|
var privkey = Privkey({bn: this.scanKeypair.privkey.bn.add(sharedKeypair.privkey.bn).add(this.payloadKeypair.privkey.bn).mod(Point.getN())});
|
|
var key = Keypair({privkey: privkey});
|
|
key.privkey2pubkey();
|
|
|
|
return key;
|
|
};
|
|
|
|
Stealthkey.prototype.isForMe = function(senderPubkey, myPossiblePubkeyhashbuf) {
|
|
var pubkey = this.getReceivePubkey(senderPubkey);
|
|
var pubkeybuf = pubkey.toDER(true);
|
|
var pubkeyhash = Hash.sha256ripemd160(pubkeybuf);
|
|
|
|
if (pubkeyhash.toString('hex') === myPossiblePubkeyhashbuf.toString('hex'))
|
|
return true;
|
|
else
|
|
return false;
|
|
};
|
|
|
|
module.exports = Stealthkey;
|