253 lines
9.1 KiB
Python
253 lines
9.1 KiB
Python
import os
|
|
import hmac
|
|
|
|
from secp256k1 import ffi
|
|
from struct import pack, unpack
|
|
from hashlib import pbkdf2_hmac
|
|
from binascii import hexlify, unhexlify
|
|
from .constants import *
|
|
from .tools import priv2pub, is_valid_pub, encode_base58, decode_base58
|
|
from .hash import hmac_sha512, hash160, double_sha256, sha256, double_sha256
|
|
|
|
|
|
# BIP39
|
|
#
|
|
#
|
|
#
|
|
|
|
def create_passphrase(bits=256, language='english'):
|
|
if bits in [128, 160, 192, 224, 256]:
|
|
entropy = os.urandom(bits // 8)
|
|
mnemonic = create_mnemonic(entropy, language)
|
|
return ' '.join(mnemonic[::-1])
|
|
else:
|
|
raise ValueError('Strength should be one of the following [128, 160, 192, 224, 256], but it is not (%d).' % bits)
|
|
|
|
|
|
def create_mnemonic(entropy, language='english'):
|
|
mnemonic = []
|
|
wordlist = create_wordlist(language)
|
|
entropy_int = int.from_bytes(entropy, byteorder="big")
|
|
entropy_bit_len = len(entropy) * 8
|
|
chk_sum_bit_len = entropy_bit_len // 32
|
|
fbyte_hash = sha256(entropy)[0]
|
|
entropy_int = add_checksum_ent(entropy)
|
|
while entropy_int:
|
|
mnemonic.append(wordlist[entropy_int & 0b11111111111])
|
|
entropy_int = entropy_int >> 11
|
|
return mnemonic[::-1]
|
|
|
|
|
|
def create_wordlist(language, wordlist_dir=BIP0039_DIR):
|
|
f = None
|
|
path = os.path.join(wordlist_dir, '.'.join((language, 'txt')))
|
|
assert os.path.exists(path)
|
|
f = open(path)
|
|
content = f.read().rstrip('\n')
|
|
assert content
|
|
f.close()
|
|
return content.split('\n')
|
|
|
|
|
|
def add_checksum_ent(data):
|
|
mask = 0b10000000
|
|
data_int = int.from_bytes(data, byteorder="big")
|
|
data_bit_len = len(data) * 8 // 32
|
|
fbyte_hash = sha256(data)[0]
|
|
while data_bit_len:
|
|
data_bit_len -= 1
|
|
data_int = (data_int << 1) | 1 if fbyte_hash & mask else data_int << 1
|
|
mask = mask >> 1
|
|
return data_int
|
|
|
|
|
|
def mnemonic2bytes(passphrase, language):
|
|
mnemonic = passphrase.split()
|
|
if len(mnemonic) in [12, 15, 18, 21, 24]:
|
|
wordlist = create_wordlist(language)
|
|
codes = dict()
|
|
for code, word in enumerate(wordlist):
|
|
codes[word] = code
|
|
word_count = len(mnemonic)
|
|
entropy_int = None
|
|
bit_size = word_count * 11
|
|
chk_sum_bit_len = word_count * 11 % 32
|
|
for word in mnemonic:
|
|
entropy_int = (entropy_int << 11) | codes[word] if entropy_int else codes[word]
|
|
chk_sum = entropy_int & (2 ** chk_sum_bit_len - 1)
|
|
entropy_int = entropy_int >> chk_sum_bit_len
|
|
entropy = entropy_int.to_bytes((bit_size - chk_sum_bit_len) // 8, byteorder="big")
|
|
fb = sha256(entropy)[0]
|
|
assert (fb >> (8 - chk_sum_bit_len)) & chk_sum
|
|
return entropy
|
|
else:
|
|
raise ValueError('Number of words must be one of the following: [12, 15, 18, 21, 24], but it is not (%d).' % len(mnemonic))
|
|
|
|
|
|
def create_seed(passphrase, password=''):
|
|
return pbkdf2_hmac('sha512', password.encode(), passphrase.encode(), 2048)
|
|
|
|
|
|
|
|
# BIP32
|
|
#
|
|
#
|
|
#
|
|
|
|
# создание родительского приватного ключа
|
|
def create_master_key_hdwallet(seed):
|
|
key = b'Bitcoin seed'
|
|
intermediary = hmac_sha512(key, seed)
|
|
master_key = intermediary[:32]
|
|
chain_code = intermediary[32:]
|
|
if validate_private_key(master_key) and validate_private_key(chain_code):
|
|
return dict(version=MAINNET_PRIVATE_WALLET_VERSION,
|
|
key=master_key,
|
|
depth=0,
|
|
child=0,
|
|
finger_print=b'\x00\x00\x00\x00',
|
|
chain_code=chain_code,
|
|
is_private=True)
|
|
else:
|
|
return None
|
|
|
|
|
|
## Надо удалить в будущем как дублирование. И добавить в реализации ООП как метод
|
|
def create_parent_pubkey_hdwallet(master_key):
|
|
if master_key['is_private']:
|
|
pubkey = priv2pub(master_key['key'], True)
|
|
return dict(version=MAINNET_PUBLIC_WALLET_VERSION,
|
|
key=pubkey,
|
|
depth=master_key['depth'],
|
|
child=master_key['child'],
|
|
finger_print=master_key['finger_print'],
|
|
chain_code=master_key['chain_code'],
|
|
is_private=False)
|
|
return None
|
|
|
|
|
|
# Создание дочернего приватного ключа
|
|
def create_child_privkey(key, child_idx):
|
|
expanded_privkey = create_expanded_key(key, child_idx)
|
|
if expanded_pubkey:
|
|
child_chain_code = expanded_pubkey[32:]
|
|
child_privkey = add_private_keys(expanded_pubkey[:32], key['key'])
|
|
if validate_private_key(child_privkey):
|
|
finger_print = hash160(priv2pub(key['key']))[:4]
|
|
return dict(version=MAINNET_PRIVATE_WALLET_VERSION,
|
|
key=child_pubkey,
|
|
depth=key['depth'] + 1,
|
|
child=child_idx,
|
|
finger_print=finger_print,
|
|
chain_code=child_chain_code,
|
|
is_private=False)
|
|
return None
|
|
|
|
|
|
# создание дочернего публичного ключа
|
|
def create_child_pubkey(key, child_idx):
|
|
expanded_pubkey = create_expanded_key(key, child_idx)
|
|
if expanded_pubkey:
|
|
child_chain_code = expanded_pubkey[32:]
|
|
ext_value = priv2pub(expanded_pubkey[:32])
|
|
child_pubkey = add_public_keys(ext_value, key['key'])
|
|
if is_valid_pub(child_pubkey):
|
|
finger_print = hash160(key['key'])[:4]
|
|
return dict(version=MAINNET_PUBLIC_WALLET_VERSION,
|
|
key=child_pubkey,
|
|
depth=key['depth'] + 1,
|
|
child=child_idx,
|
|
finger_print=finger_print,
|
|
chain_code=child_chain_code,
|
|
is_private=False)
|
|
return None
|
|
|
|
|
|
# Создание расширенного приватного/публичного ключа
|
|
def create_expanded_key(key, child_idx):
|
|
if isinstance(key, dict):
|
|
if not key.get('is_private') and child_idx < FIRST_HARDENED_CHILD:
|
|
seed = key['key'] + pack('I', child_idx)
|
|
return hmac_sha512(key['chain_code'], seed)
|
|
elif key.get('is_private') and child_idx < FIRST_HARDENED_CHILD:
|
|
public_key = priv2pub(key['key'])
|
|
seed = public_key + pack('I', child_idx)
|
|
return hmac_sha512(key['chain_code'], seed)
|
|
return None
|
|
|
|
|
|
# Создание усиленного расширенного приватного ключа
|
|
def create_expanded_hard_key(key, child_idx):
|
|
if isinstance(key, dict):
|
|
if key.get('is_private') and child_idx >= FIRST_HARDENED_CHILD:
|
|
seed = bytes([0]) + key['key'] + pack('I', child_idx)
|
|
return hmac_sha512(key['chain_code'], seed)
|
|
return None
|
|
|
|
|
|
def add_private_keys(ext_value, key):
|
|
ext_value_int = int.from_bytes(ext_value, byteorder="big")
|
|
key_int = int.from_bytes(key, byteorder="big")
|
|
ext_value_int = (ext_value_int + key_int) % MAX_INT_PRIVATE_KEY
|
|
return ext_value_int.to_bytes((ext_value_int.bit_length() + 7) // 8, byteorder="big")
|
|
|
|
|
|
def add_public_keys(ext_value, key):
|
|
pubkey_ptr = ffi.new('secp256k1_pubkey *')
|
|
if not secp256k1.secp256k1_ec_pubkey_parse(ECDSA_CONTEXT_VERIFY, pubkey_ptr, ext_value, len(ext_value)):
|
|
raise TypeError("public key format error")
|
|
if secp256k1.secp256k1_ec_pubkey_tweak_add(ECDSA_CONTEXT_ALL, pubkey_ptr, key):
|
|
pubkey = ffi.new('char [%d]' % 33)
|
|
outlen = ffi.new('size_t *', 33)
|
|
if secp256k1.secp256k1_ec_pubkey_serialize(ECDSA_CONTEXT_VERIFY, pubkey, outlen, pubkey_ptr, EC_COMPRESSED):
|
|
return bytes(ffi.buffer(pubkey, 33))
|
|
return None
|
|
|
|
|
|
def validate_private_key(key):
|
|
key_int = int.from_bytes(key, byteorder="big")
|
|
if key_int > 0 and key_int < MAX_INT_PRIVATE_KEY and len(key) == 32:
|
|
return True
|
|
return False
|
|
|
|
|
|
def serialize_key_hdwallet(key):
|
|
try:
|
|
key_bytes = key['key']
|
|
if key.get('is_private'):
|
|
key_bytes = bytes(1) + key_bytes
|
|
|
|
result = key['version']
|
|
result += pack('B', key['depth'])
|
|
result += key['finger_print']
|
|
result += pack('I', key['child'])
|
|
result += key['chain_code']
|
|
result += key_bytes
|
|
chk_sum = double_sha256(result)[:4]
|
|
return result + chk_sum
|
|
except:
|
|
raise Exception('Serialization error')
|
|
|
|
|
|
def deserialize_key_hdwallet(encode_key):
|
|
raw_key = decode_base58(encode_key)
|
|
decode_key = dict()
|
|
if raw_key[:4] in [MAINNET_PUBLIC_WALLET_VERSION, MAINNET_PRIVATE_WALLET_VERSION]:
|
|
decode_key['version'] = raw_key[:4]
|
|
decode_key['depth'] = raw_key[4:5]
|
|
decode_key['finger_print'] = raw_key[5:9]
|
|
decode_key['child'] = raw_key[9:13]
|
|
decode_key['chain_code'] = raw_key[13:45]
|
|
if decode_key['version'] in [MAINNET_PRIVATE_WALLET_VERSION]:
|
|
decode_key['is_private'] = True
|
|
decode_key['key'] = raw_key[46:78]
|
|
else:
|
|
decode_key['is_private'] = False
|
|
decode_key['key'] = raw_key[45:78]
|
|
chk_sum = raw_key[78:]
|
|
if chk_sum != double_sha256(raw_key[:-4])[:4]:
|
|
raise TypeError("key checksum does not match")
|
|
if decode_key:
|
|
return decode_key
|
|
return None
|