bitcoinjs/tiny-secp256k1

Name: tiny-secp256k1

Owner: BitcoinJS

Description: null

Created: 2017-10-10 23:51:47.0

Updated: 2018-05-24 15:36:50.0

Pushed: 2018-05-24 15:36:49.0

Homepage: null

Size: 7001

Language: C++

GitHub Committers

User	Most Recent Commit	# Commits

Other Committers

User	Email	Most Recent Commit	# Commits

README

tiny-secp256k1

isPoint (A)

int :: Buffer -> Bool

Returns false if

• A is not encoded with a sequence tag of 0x02, 0x03 or 0x04
• A.x is not in [1...p - 1]
• A.y is not in [1...p - 1]

isPointCompressed (A)

intCompressed :: Buffer -> Bool

Returns false if the signature is not compressed.

isPrivate (d)

ivate :: Buffer -> Bool

Returns false if

• d is not 256-bit, or
• d is not in [1..order - 1]

pointAdd (A, B[, compressed])

tAdd :: Buffer -> Buffer [-> Bool] -> Maybe Buffer

Returns null if result is at infinity.

Throws:

• Expected Point if !isPoint(A)
• Expected Point if !isPoint(B)

pointAddScalar (A, tweak[, compressed])

tAddScalar :: Buffer -> Buffer [-> Bool] -> Maybe Buffer

Returns null if result is at infinity.

Throws:

• Expected Point if !isPoint(A)
• Expected Tweak if tweak is not in [0...order - 1]

pointCompress (A, compressed)

tCompress :: Buffer -> Bool -> Buffer

Throws:

• Expected Point if !isPoint(A)

pointFromScalar (d[, compressed])

tFromScalar :: Buffer [-> Bool] -> Maybe Buffer

Returns null if result is at infinity.

Throws:

• Expected Private if !isPrivate(d)

pointMultiply (A, tweak[, compressed])

tMultiply :: Buffer -> Buffer [-> Bool] -> Maybe Buffer

Returns null if result is at infinity.

Throws:

• Expected Point if !isPoint(A)
• Expected Tweak if tweak is not in [0...order - 1]

privateAdd (d, tweak)

ateAdd :: Buffer -> Buffer -> Maybe Buffer

Returns null if result is equal to 0.

Throws:

• Expected Private if !isPrivate(d)
• Expected Tweak if tweak is not in [0...order - 1]

privateSub (d, tweak)

ateSub :: Buffer -> Buffer -> Maybe Buffer

Returns null if result is equal to 0.

Throws:

• Expected Private if !isPrivate(d)
• Expected Tweak if tweak is not in [0...order - 1]

sign (h, d)

 :: Buffer -> Buffer -> Buffer

Returns normalized signatures, each of (r, s) values are guaranteed to less than order / 2. Uses RFC6979.

Throws:

• Expected Private if !isPrivate(d)
• Expected Scalar if h is not 256-bit

verify (h, Q, signature[, strict = false])

fy :: Buffer -> Buffer -> Buffer -> Bool

Returns false if any of (r, s) values are equal to 0, or if the signature is rejected.

If strict is true, valid signatures with any of (r, s) values greater than order / 2 are rejected.

Throws:

• Expected Point if !isPoint(Q)
• Expected Signature if signature has any (r, s) values not in range [0...order - 1]
• Expected Scalar if h is not 256-bit