You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
376 lines
18 KiB
376 lines
18 KiB
from __future__ import absolute_import |
|
from __future__ import division |
|
from __future__ import print_function |
|
from __future__ import unicode_literals |
|
|
|
import base64 |
|
import six |
|
import unittest |
|
import sys |
|
from ecdsa.util import number_to_string |
|
|
|
from lib.bitcoin import ( |
|
generator_secp256k1, point_to_ser, public_key_to_p2pkh, EC_KEY, |
|
bip32_root, bip32_public_derivation, bip32_private_derivation, pw_encode, |
|
pw_decode, Hash, public_key_from_private_key, address_from_private_key, |
|
is_address, is_private_key, xpub_from_xprv, is_new_seed, is_old_seed, |
|
var_int, op_push, address_to_script, regenerate_key, |
|
verify_message, deserialize_privkey, serialize_privkey, is_segwit_address, |
|
is_b58_address, address_to_scripthash, is_minikey, is_compressed, is_xpub, |
|
xpub_type, is_xprv, is_bip32_derivation) |
|
from lib.util import bfh |
|
|
|
try: |
|
import ecdsa |
|
except ImportError: |
|
sys.exit("Error: python-ecdsa does not seem to be installed. Try 'sudo pip install ecdsa'") |
|
|
|
|
|
class Test_bitcoin(unittest.TestCase): |
|
|
|
def test_crypto(self): |
|
for message in [b"Chancellor on brink of second bailout for banks", b'\xff'*512]: |
|
self._do_test_crypto(message) |
|
|
|
def _do_test_crypto(self, message): |
|
G = generator_secp256k1 |
|
_r = G.order() |
|
pvk = ecdsa.util.randrange( pow(2,256) ) %_r |
|
|
|
Pub = pvk*G |
|
pubkey_c = point_to_ser(Pub,True) |
|
#pubkey_u = point_to_ser(Pub,False) |
|
addr_c = public_key_to_p2pkh(pubkey_c) |
|
|
|
#print "Private key ", '%064x'%pvk |
|
eck = EC_KEY(number_to_string(pvk,_r)) |
|
|
|
#print "Compressed public key ", pubkey_c.encode('hex') |
|
enc = EC_KEY.encrypt_message(message, pubkey_c) |
|
dec = eck.decrypt_message(enc) |
|
self.assertEqual(message, dec) |
|
|
|
#print "Uncompressed public key", pubkey_u.encode('hex') |
|
#enc2 = EC_KEY.encrypt_message(message, pubkey_u) |
|
dec2 = eck.decrypt_message(enc) |
|
self.assertEqual(message, dec2) |
|
|
|
signature = eck.sign_message(message, True) |
|
#print signature |
|
EC_KEY.verify_message(eck, signature, message) |
|
|
|
def test_msg_signing(self): |
|
msg1 = b'Chancellor on brink of second bailout for banks' |
|
msg2 = b'Electrum' |
|
|
|
def sign_message_with_wif_privkey(wif_privkey, msg): |
|
txin_type, privkey, compressed = deserialize_privkey(wif_privkey) |
|
key = regenerate_key(privkey) |
|
return key.sign_message(msg, compressed) |
|
|
|
sig1 = sign_message_with_wif_privkey( |
|
'L1TnU2zbNaAqMoVh65Cyvmcjzbrj41Gs9iTLcWbpJCMynXuap6UN', msg1) |
|
addr1 = '15hETetDmcXm1mM4sEf7U2KXC9hDHFMSzz' |
|
sig2 = sign_message_with_wif_privkey( |
|
'5Hxn5C4SQuiV6e62A1MtZmbSeQyrLFhu5uYks62pU5VBUygK2KD', msg2) |
|
addr2 = '1GPHVTY8UD9my6jyP4tb2TYJwUbDetyNC6' |
|
|
|
sig1_b64 = base64.b64encode(sig1) |
|
sig2_b64 = base64.b64encode(sig2) |
|
|
|
self.assertEqual(sig1_b64, b'H/9jMOnj4MFbH3d7t4yCQ9i7DgZU/VZ278w3+ySv2F4yIsdqjsc5ng3kmN8OZAThgyfCZOQxZCWza9V5XzlVY0Y=') |
|
self.assertEqual(sig2_b64, b'G84dmJ8TKIDKMT9qBRhpX2sNmR0y5t+POcYnFFJCs66lJmAs3T8A6Sbpx7KA6yTQ9djQMabwQXRrDomOkIKGn18=') |
|
|
|
self.assertTrue(verify_message(addr1, sig1, msg1)) |
|
self.assertTrue(verify_message(addr2, sig2, msg2)) |
|
|
|
self.assertFalse(verify_message(addr1, b'wrong', msg1)) |
|
self.assertFalse(verify_message(addr1, sig2, msg1)) |
|
|
|
def test_aes_homomorphic(self): |
|
"""Make sure AES is homomorphic.""" |
|
payload = u'\u66f4\u7a33\u5b9a\u7684\u4ea4\u6613\u5e73\u53f0' |
|
password = u'secret' |
|
enc = pw_encode(payload, password) |
|
dec = pw_decode(enc, password) |
|
self.assertEqual(dec, payload) |
|
|
|
def test_aes_encode_without_password(self): |
|
"""When not passed a password, pw_encode is noop on the payload.""" |
|
payload = u'\u66f4\u7a33\u5b9a\u7684\u4ea4\u6613\u5e73\u53f0' |
|
enc = pw_encode(payload, None) |
|
self.assertEqual(payload, enc) |
|
|
|
def test_aes_deencode_without_password(self): |
|
"""When not passed a password, pw_decode is noop on the payload.""" |
|
payload = u'\u66f4\u7a33\u5b9a\u7684\u4ea4\u6613\u5e73\u53f0' |
|
enc = pw_decode(payload, None) |
|
self.assertEqual(payload, enc) |
|
|
|
def test_aes_decode_with_invalid_password(self): |
|
"""pw_decode raises an Exception when supplied an invalid password.""" |
|
payload = u"blah" |
|
password = u"uber secret" |
|
wrong_password = u"not the password" |
|
enc = pw_encode(payload, password) |
|
# FIXME: pyaes does not check that padding is consistent |
|
# before removing it, wich causes this test to randomly fail. |
|
# Wallets are unaffected by this, because check_password |
|
# includes a test of the decoded public key. |
|
self.assertRaises(Exception, pw_decode, enc, wrong_password) |
|
|
|
def test_hash(self): |
|
"""Make sure the Hash function does sha256 twice""" |
|
payload = u"test" |
|
expected = b'\x95MZI\xfdp\xd9\xb8\xbc\xdb5\xd2R&x)\x95\x7f~\xf7\xfalt\xf8\x84\x19\xbd\xc5\xe8"\t\xf4' |
|
|
|
result = Hash(payload) |
|
self.assertEqual(expected, result) |
|
|
|
def test_var_int(self): |
|
for i in range(0xfd): |
|
self.assertEqual(var_int(i), "{:02x}".format(i) ) |
|
|
|
self.assertEqual(var_int(0xfd), "fdfd00") |
|
self.assertEqual(var_int(0xfe), "fdfe00") |
|
self.assertEqual(var_int(0xff), "fdff00") |
|
self.assertEqual(var_int(0x1234), "fd3412") |
|
self.assertEqual(var_int(0xffff), "fdffff") |
|
self.assertEqual(var_int(0x10000), "fe00000100") |
|
self.assertEqual(var_int(0x12345678), "fe78563412") |
|
self.assertEqual(var_int(0xffffffff), "feffffffff") |
|
self.assertEqual(var_int(0x100000000), "ff0000000001000000") |
|
self.assertEqual(var_int(0x0123456789abcdef), "ffefcdab8967452301") |
|
|
|
def test_op_push(self): |
|
self.assertEqual(op_push(0x00), '00') |
|
self.assertEqual(op_push(0x12), '12') |
|
self.assertEqual(op_push(0x4b), '4b') |
|
self.assertEqual(op_push(0x4c), '4c4c') |
|
self.assertEqual(op_push(0xfe), '4cfe') |
|
self.assertEqual(op_push(0xff), '4dff00') |
|
self.assertEqual(op_push(0x100), '4d0001') |
|
self.assertEqual(op_push(0x1234), '4d3412') |
|
self.assertEqual(op_push(0xfffe), '4dfeff') |
|
self.assertEqual(op_push(0xffff), '4effff0000') |
|
self.assertEqual(op_push(0x10000), '4e00000100') |
|
self.assertEqual(op_push(0x12345678), '4e78563412') |
|
|
|
# TODO testnet addresses |
|
def test_address_to_script(self): |
|
# bech32 native segwit |
|
# test vectors from BIP-0173 |
|
self.assertEqual(address_to_script('BC1QW508D6QEJXTDG4Y5R3ZARVARY0C5XW7KV8F3T4'), '0014751e76e8199196d454941c45d1b3a323f1433bd6') |
|
self.assertEqual(address_to_script('bc1pw508d6qejxtdg4y5r3zarvary0c5xw7kw508d6qejxtdg4y5r3zarvary0c5xw7k7grplx'), '5128751e76e8199196d454941c45d1b3a323f1433bd6751e76e8199196d454941c45d1b3a323f1433bd6') |
|
self.assertEqual(address_to_script('BC1SW50QA3JX3S'), '6002751e') |
|
self.assertEqual(address_to_script('bc1zw508d6qejxtdg4y5r3zarvaryvg6kdaj'), '5210751e76e8199196d454941c45d1b3a323') |
|
|
|
# base58 P2PKH |
|
self.assertEqual(address_to_script('14gcRovpkCoGkCNBivQBvw7eso7eiNAbxG'), '76a91428662c67561b95c79d2257d2a93d9d151c977e9188ac') |
|
self.assertEqual(address_to_script('1BEqfzh4Y3zzLosfGhw1AsqbEKVW6e1qHv'), '76a914704f4b81cadb7bf7e68c08cd3657220f680f863c88ac') |
|
|
|
# base58 P2SH |
|
self.assertEqual(address_to_script('35ZqQJcBQMZ1rsv8aSuJ2wkC7ohUCQMJbT'), 'a9142a84cf00d47f699ee7bbc1dea5ec1bdecb4ac15487') |
|
self.assertEqual(address_to_script('3PyjzJ3im7f7bcV724GR57edKDqoZvH7Ji'), 'a914f47c8954e421031ad04ecd8e7752c9479206b9d387') |
|
|
|
|
|
class Test_xprv_xpub(unittest.TestCase): |
|
|
|
xprv_xpub = ( |
|
# Taken from test vectors in https://en.bitcoin.it/wiki/BIP_0032_TestVectors |
|
{'xprv': 'xprvA41z7zogVVwxVSgdKUHDy1SKmdb533PjDz7J6N6mV6uS3ze1ai8FHa8kmHScGpWmj4WggLyQjgPie1rFSruoUihUZREPSL39UNdE3BBDu76', |
|
'xpub': 'xpub6H1LXWLaKsWFhvm6RVpEL9P4KfRZSW7abD2ttkWP3SSQvnyA8FSVqNTEcYFgJS2UaFcxupHiYkro49S8yGasTvXEYBVPamhGW6cFJodrTHy', |
|
'xtype': 'standard'}, |
|
{'xprv': 'yprvAJEYHeNEPcyBoQYM7sGCxDiNCTX65u4ANgZuSGTrKN5YCC9MP84SBayrgaMyZV7zvkHrr3HVPTK853s2SPk4EttPazBZBmz6QfDkXeE8Zr7', |
|
'xpub': 'ypub6XDth9u8DzXV1tcpDtoDKMf6kVMaVMn1juVWEesTshcX4zUVvfNgjPJLXrD9N7AdTLnbHFL64KmBn3SNaTe69iZYbYCqLCCNPZKbLz9niQ4', |
|
'xtype': 'segwit_p2sh'}, |
|
{'xprv': 'zprvAWgYBBk7JR8GkraNZJeEodAp2UR1VRWJTXyV1ywuUVs1awUgTiBS1ZTDtLA5F3MFDn1LZzu8dUpSKdT7ToDpvEG6PQu4bJs7zQY47Sd3sEZ', |
|
'xpub': 'zpub6jftahH18ngZyLeqfLBFAm7YaWFVttE9pku5pNMX2qPzTjoq1FVgZMmhjecyB2nqFb31gHE9vNvbaggU6vvWpNZbXEWLLUjYjFqG95LNyT8', |
|
'xtype': 'segwit'}, |
|
) |
|
|
|
def _do_test_bip32(self, seed, sequence): |
|
xprv, xpub = bip32_root(bfh(seed), 'standard') |
|
self.assertEqual("m/", sequence[0:2]) |
|
path = 'm' |
|
sequence = sequence[2:] |
|
for n in sequence.split('/'): |
|
child_path = path + '/' + n |
|
if n[-1] != "'": |
|
xpub2 = bip32_public_derivation(xpub, path, child_path) |
|
xprv, xpub = bip32_private_derivation(xprv, path, child_path) |
|
if n[-1] != "'": |
|
self.assertEqual(xpub, xpub2) |
|
path = child_path |
|
|
|
return xpub, xprv |
|
|
|
def test_bip32(self): |
|
# see https://en.bitcoin.it/wiki/BIP_0032_TestVectors |
|
xpub, xprv = self._do_test_bip32("000102030405060708090a0b0c0d0e0f", "m/0'/1/2'/2/1000000000") |
|
self.assertEqual("xpub6H1LXWLaKsWFhvm6RVpEL9P4KfRZSW7abD2ttkWP3SSQvnyA8FSVqNTEcYFgJS2UaFcxupHiYkro49S8yGasTvXEYBVPamhGW6cFJodrTHy", xpub) |
|
self.assertEqual("xprvA41z7zogVVwxVSgdKUHDy1SKmdb533PjDz7J6N6mV6uS3ze1ai8FHa8kmHScGpWmj4WggLyQjgPie1rFSruoUihUZREPSL39UNdE3BBDu76", xprv) |
|
|
|
xpub, xprv = self._do_test_bip32("fffcf9f6f3f0edeae7e4e1dedbd8d5d2cfccc9c6c3c0bdbab7b4b1aeaba8a5a29f9c999693908d8a8784817e7b7875726f6c696663605d5a5754514e4b484542","m/0/2147483647'/1/2147483646'/2") |
|
self.assertEqual("xpub6FnCn6nSzZAw5Tw7cgR9bi15UV96gLZhjDstkXXxvCLsUXBGXPdSnLFbdpq8p9HmGsApME5hQTZ3emM2rnY5agb9rXpVGyy3bdW6EEgAtqt", xpub) |
|
self.assertEqual("xprvA2nrNbFZABcdryreWet9Ea4LvTJcGsqrMzxHx98MMrotbir7yrKCEXw7nadnHM8Dq38EGfSh6dqA9QWTyefMLEcBYJUuekgW4BYPJcr9E7j", xprv) |
|
|
|
def test_xpub_from_xprv(self): |
|
"""We can derive the xpub key from a xprv.""" |
|
for xprv_details in self.xprv_xpub: |
|
result = xpub_from_xprv(xprv_details['xprv']) |
|
self.assertEqual(result, xprv_details['xpub']) |
|
|
|
def test_is_xpub(self): |
|
for xprv_details in self.xprv_xpub: |
|
xpub = xprv_details['xpub'] |
|
self.assertTrue(is_xpub(xpub)) |
|
self.assertFalse(is_xpub('xpub1nval1d')) |
|
self.assertFalse(is_xpub('xpub661MyMwAqRbcFWohJWt7PHsFEJfZAvw9ZxwQoDa4SoMgsDDM1T7WK3u9E4edkC4ugRnZ8E4xDZRpk8Rnts3Nbt97dPwT52WRONGBADWRONG')) |
|
|
|
def test_xpub_type(self): |
|
for xprv_details in self.xprv_xpub: |
|
xpub = xprv_details['xpub'] |
|
self.assertEqual(xprv_details['xtype'], xpub_type(xpub)) |
|
|
|
def test_is_xprv(self): |
|
for xprv_details in self.xprv_xpub: |
|
xprv = xprv_details['xprv'] |
|
self.assertTrue(is_xprv(xprv)) |
|
self.assertFalse(is_xprv('xprv1nval1d')) |
|
self.assertFalse(is_xprv('xprv661MyMwAqRbcFWohJWt7PHsFEJfZAvw9ZxwQoDa4SoMgsDDM1T7WK3u9E4edkC4ugRnZ8E4xDZRpk8Rnts3Nbt97dPwT52WRONGBADWRONG')) |
|
|
|
def test_is_bip32_derivation(self): |
|
self.assertTrue(is_bip32_derivation("m/0'/1")) |
|
self.assertTrue(is_bip32_derivation("m/0'/0'")) |
|
self.assertTrue(is_bip32_derivation("m/44'/0'/0'/0/0")) |
|
self.assertTrue(is_bip32_derivation("m/49'/0'/0'/0/0")) |
|
self.assertFalse(is_bip32_derivation("mmmmmm")) |
|
self.assertFalse(is_bip32_derivation("n/")) |
|
self.assertFalse(is_bip32_derivation("")) |
|
self.assertFalse(is_bip32_derivation("m/q8462")) |
|
|
|
|
|
class Test_keyImport(unittest.TestCase): |
|
|
|
priv_pub_addr = ( |
|
{'priv': 'KzMFjMC2MPadjvX5Cd7b8AKKjjpBSoRKUTpoAtN6B3J9ezWYyXS6', |
|
'pub': '02c6467b7e621144105ed3e4835b0b4ab7e35266a2ae1c4f8baa19e9ca93452997', |
|
'address': '17azqT8T16coRmWKYFj3UjzJuxiYrYFRBR', |
|
'minikey' : False, |
|
'txin_type': 'p2pkh', |
|
'compressed': True, |
|
'addr_encoding': 'base58', |
|
'scripthash': 'c9aecd1fef8d661a42c560bf75c8163e337099800b8face5ca3d1393a30508a7'}, |
|
{'priv': '5Hxn5C4SQuiV6e62A1MtZmbSeQyrLFhu5uYks62pU5VBUygK2KD', |
|
'pub': '04e5fe91a20fac945845a5518450d23405ff3e3e1ce39827b47ee6d5db020a9075422d56a59195ada0035e4a52a238849f68e7a325ba5b2247013e0481c5c7cb3f', |
|
'address': '1GPHVTY8UD9my6jyP4tb2TYJwUbDetyNC6', |
|
'minikey': False, |
|
'txin_type': 'p2pkh', |
|
'compressed': False, |
|
'addr_encoding': 'base58', |
|
'scripthash': 'f5914651408417e1166f725a5829ff9576d0dbf05237055bf13abd2af7f79473'}, |
|
{'priv': 'LHJnnvRzsdrTX2j5QeWVsaBkabK7gfMNqNNqxnbBVRaJYfk24iJz', |
|
'pub': '0279ad237ca0d812fb503ab86f25e15ebd5fa5dd95c193639a8a738dcd1acbad81', |
|
'address': '3GeVJB3oKr7psgKR6BTXSxKtWUkfsHHhk7', |
|
'minikey': False, |
|
'txin_type': 'p2wpkh-p2sh', |
|
'compressed': True, |
|
'addr_encoding': 'base58', |
|
'scripthash': 'd7b04e882fa6b13246829ac552a2b21461d9152eb00f0a6adb58457a3e63d7c5'}, |
|
{'priv': 'L8g5V8kFFeg2WbecahRSdobARbHz2w2STH9S8ePHVSY4fmia7Rsj', |
|
'pub': '03e9f948421aaa89415dc5f281a61b60dde12aae3181b3a76cd2d849b164fc6d0b', |
|
'address': 'bc1qqmpt7u5e9hfznljta5gnvhyvfd2kdd0r90hwue', |
|
'minikey': False, |
|
'txin_type': 'p2wpkh', |
|
'compressed': True, |
|
'addr_encoding': 'bech32', |
|
'scripthash': '1929acaaef3a208c715228e9f1ca0318e3a6b9394ab53c8d026137f847ecf97b'}, |
|
# from http://bitscan.com/articles/security/spotlight-on-mini-private-keys |
|
{'priv': 'SzavMBLoXU6kDrqtUVmffv', |
|
'pub': '02588d202afcc1ee4ab5254c7847ec25b9a135bbda0f2bc69ee1a714749fd77dc9', |
|
'address': '19GuvDvMMUZ8vq84wT79fvnvhMd5MnfTkR', |
|
'minikey': True, |
|
'txin_type': 'p2pkh', |
|
'compressed': True, # this is actually ambiguous... issue #2748 |
|
'addr_encoding': 'base58', |
|
'scripthash': '60ad5a8b922f758cd7884403e90ee7e6f093f8d21a0ff24c9a865e695ccefdf1'}, |
|
) |
|
|
|
def test_public_key_from_private_key(self): |
|
for priv_details in self.priv_pub_addr: |
|
txin_type, privkey, compressed = deserialize_privkey(priv_details['priv']) |
|
result = public_key_from_private_key(privkey, compressed) |
|
self.assertEqual(priv_details['pub'], result) |
|
self.assertEqual(priv_details['txin_type'], txin_type) |
|
self.assertEqual(priv_details['compressed'], compressed) |
|
|
|
def test_address_from_private_key(self): |
|
for priv_details in self.priv_pub_addr: |
|
addr2 = address_from_private_key(priv_details['priv']) |
|
self.assertEqual(priv_details['address'], addr2) |
|
|
|
def test_is_valid_address(self): |
|
for priv_details in self.priv_pub_addr: |
|
addr = priv_details['address'] |
|
self.assertFalse(is_address(priv_details['priv'])) |
|
self.assertFalse(is_address(priv_details['pub'])) |
|
self.assertTrue(is_address(addr)) |
|
|
|
is_enc_b58 = priv_details['addr_encoding'] == 'base58' |
|
self.assertEqual(is_enc_b58, is_b58_address(addr)) |
|
|
|
is_enc_bech32 = priv_details['addr_encoding'] == 'bech32' |
|
self.assertEqual(is_enc_bech32, is_segwit_address(addr)) |
|
|
|
self.assertFalse(is_address("not an address")) |
|
|
|
def test_is_private_key(self): |
|
for priv_details in self.priv_pub_addr: |
|
self.assertTrue(is_private_key(priv_details['priv'])) |
|
self.assertFalse(is_private_key(priv_details['pub'])) |
|
self.assertFalse(is_private_key(priv_details['address'])) |
|
self.assertFalse(is_private_key("not a privkey")) |
|
|
|
def test_serialize_privkey(self): |
|
for priv_details in self.priv_pub_addr: |
|
txin_type, privkey, compressed = deserialize_privkey(priv_details['priv']) |
|
priv2 = serialize_privkey(privkey, compressed, txin_type) |
|
if not priv_details['minikey']: |
|
self.assertEqual(priv_details['priv'], priv2) |
|
|
|
def test_address_to_scripthash(self): |
|
for priv_details in self.priv_pub_addr: |
|
sh = address_to_scripthash(priv_details['address']) |
|
self.assertEqual(priv_details['scripthash'], sh) |
|
|
|
def test_is_minikey(self): |
|
for priv_details in self.priv_pub_addr: |
|
minikey = priv_details['minikey'] |
|
priv = priv_details['priv'] |
|
self.assertEqual(minikey, is_minikey(priv)) |
|
|
|
def test_is_compressed(self): |
|
for priv_details in self.priv_pub_addr: |
|
self.assertEqual(priv_details['compressed'], |
|
is_compressed(priv_details['priv'])) |
|
|
|
|
|
class Test_seeds(unittest.TestCase): |
|
""" Test old and new seeds. """ |
|
|
|
def test_new_seed(self): |
|
seed = "cram swing cover prefer miss modify ritual silly deliver chunk behind inform able" |
|
self.assertTrue(is_new_seed(seed)) |
|
|
|
seed = "cram swing cover prefer miss modify ritual silly deliver chunk behind inform" |
|
self.assertFalse(is_new_seed(seed)) |
|
|
|
def test_old_seed(self): |
|
self.assertTrue(is_old_seed(" ".join(["like"] * 12))) |
|
self.assertFalse(is_old_seed(" ".join(["like"] * 18))) |
|
self.assertTrue(is_old_seed(" ".join(["like"] * 24))) |
|
self.assertFalse(is_old_seed("not a seed")) |
|
|
|
self.assertTrue(is_old_seed("0123456789ABCDEF" * 2)) |
|
self.assertTrue(is_old_seed("0123456789ABCDEF" * 4))
|
|
|