Momentum-Firmware/applications/external/flipbip/lib/crypto/bip32.h

/**
 * Copyright (c) 2013-2014 Tomas Dzetkulic
 * Copyright (c) 2013-2014 Pavol Rusnak
 *
 * Permission is hereby granted, free of charge, to any person obtaining
 * a copy of this software and associated documentation files (the "Software"),
 * to deal in the Software without restriction, including without limitation
 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
 * and/or sell copies of the Software, and to permit persons to whom the
 * Software is furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included
 * in all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
 * OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES
 * OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
 * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
 * OTHER DEALINGS IN THE SOFTWARE.
 */

#ifndef __BIP32_H__
#define __BIP32_H__

#include <stdbool.h>
#include <stdint.h>
#include <stdlib.h>
#include "ecdsa.h"
#include "ed25519_donna/ed25519.h"
#include "options.h"

// Maximum length of a Base58Check-encoded extended public or private key.
#define XPUB_MAXLEN 112

// Maximum length of a Base58Check-encoded address.
#define ADDRESS_MAXLEN 39

typedef struct {
    const char* bip32_name; // string for generating BIP32 xprv from seed
    const ecdsa_curve* params; // ecdsa curve parameters, null for ed25519

    HasherType hasher_base58;
    HasherType hasher_sign;
    HasherType hasher_pubkey;
    HasherType hasher_script;
} curve_info;

typedef struct {
    uint32_t depth;
    uint32_t child_num;
    uint8_t chain_code[32];

    uint8_t private_key[32];
    uint8_t private_key_extension[32];

    uint8_t public_key[33];
    const curve_info* curve;
} HDNode;

int hdnode_from_xpub(
    uint32_t depth,
    uint32_t child_num,
    const uint8_t* chain_code,
    const uint8_t* public_key,
    const char* curve,
    HDNode* out);

int hdnode_from_xprv(
    uint32_t depth,
    uint32_t child_num,
    const uint8_t* chain_code,
    const uint8_t* private_key,
    const char* curve,
    HDNode* out);

int hdnode_from_seed(const uint8_t* seed, int seed_len, const char* curve, HDNode* out);

#define hdnode_private_ckd_prime(X, I) hdnode_private_ckd((X), ((I) | 0x80000000))

int hdnode_private_ckd(HDNode* inout, uint32_t i);

int hdnode_public_ckd_cp(
    const ecdsa_curve* curve,
    const curve_point* parent,
    const uint8_t* parent_chain_code,
    uint32_t i,
    curve_point* child,
    uint8_t* child_chain_code);

int hdnode_public_ckd(HDNode* inout, uint32_t i);

void hdnode_public_ckd_address_optimized(
    const curve_point* pub,
    const uint8_t* chain_code,
    uint32_t i,
    uint32_t version,
    HasherType hasher_pubkey,
    HasherType hasher_base58,
    char* addr,
    int addrsize,
    int addrformat);

#if USE_BIP32_CACHE
void bip32_cache_clear(void);
int hdnode_private_ckd_cached(
    HDNode* inout,
    const uint32_t* i,
    size_t i_count,
    uint32_t* fingerprint);
#endif

uint32_t hdnode_fingerprint(HDNode* node);

int hdnode_fill_public_key(HDNode* node);

#if USE_ETHEREUM
int hdnode_get_ethereum_pubkeyhash(const HDNode* node, uint8_t* pubkeyhash);
#endif

#if USE_NEM
int hdnode_get_nem_address(HDNode* node, uint8_t version, char* address);
int hdnode_get_nem_shared_key(
    const HDNode* node,
    const ed25519_public_key peer_public_key,
    const uint8_t* salt,
    ed25519_public_key mul,
    uint8_t* shared_key);
int hdnode_nem_encrypt(
    const HDNode* node,
    const ed25519_public_key public_key,
    const uint8_t* iv,
    const uint8_t* salt,
    const uint8_t* payload,
    size_t size,
    uint8_t* buffer);
int hdnode_nem_decrypt(
    const HDNode* node,
    const ed25519_public_key public_key,
    uint8_t* iv,
    const uint8_t* salt,
    const uint8_t* payload,
    size_t size,
    uint8_t* buffer);
#endif

int hdnode_sign(
    HDNode* node,
    const uint8_t* msg,
    uint32_t msg_len,
    HasherType hasher_sign,
    uint8_t* sig,
    uint8_t* pby,
    int (*is_canonical)(uint8_t by, uint8_t sig[64]));
int hdnode_sign_digest(
    HDNode* node,
    const uint8_t* digest,
    uint8_t* sig,
    uint8_t* pby,
    int (*is_canonical)(uint8_t by, uint8_t sig[64]));

int hdnode_get_shared_key(
    const HDNode* node,
    const uint8_t* peer_public_key,
    uint8_t* session_key,
    int* result_size);

int hdnode_serialize_public(
    const HDNode* node,
    uint32_t fingerprint,
    uint32_t version,
    char* str,
    int strsize);

int hdnode_serialize_private(
    const HDNode* node,
    uint32_t fingerprint,
    uint32_t version,
    char* str,
    int strsize);

int hdnode_deserialize_public(
    const char* str,
    uint32_t version,
    const char* curve,
    HDNode* node,
    uint32_t* fingerprint);

int hdnode_deserialize_private(
    const char* str,
    uint32_t version,
    const char* curve,
    HDNode* node,
    uint32_t* fingerprint);

int hdnode_get_address_raw(HDNode* node, uint32_t version, uint8_t* addr_raw);
int hdnode_get_address(HDNode* node, uint32_t version, char* addr, int addrsize);

const curve_info* get_curve_by_name(const char* curve_name);

#endif