signature.js 3.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167
  1. 'use strict';
  2. var BN = require('bn.js');
  3. var utils = require('../utils');
  4. var assert = utils.assert;
  5. function Signature(options, enc) {
  6. if (options instanceof Signature)
  7. return options;
  8. if (this._importDER(options, enc))
  9. return;
  10. assert(options.r && options.s, 'Signature without r or s');
  11. this.r = new BN(options.r, 16);
  12. this.s = new BN(options.s, 16);
  13. if (options.recoveryParam === undefined)
  14. this.recoveryParam = null;
  15. else
  16. this.recoveryParam = options.recoveryParam;
  17. }
  18. module.exports = Signature;
  19. function Position() {
  20. this.place = 0;
  21. }
  22. function getLength(buf, p) {
  23. var initial = buf[p.place++];
  24. if (!(initial & 0x80)) {
  25. return initial;
  26. }
  27. var octetLen = initial & 0xf;
  28. // Indefinite length or overflow
  29. if (octetLen === 0 || octetLen > 4) {
  30. return false;
  31. }
  32. var val = 0;
  33. for (var i = 0, off = p.place; i < octetLen; i++, off++) {
  34. val <<= 8;
  35. val |= buf[off];
  36. val >>>= 0;
  37. }
  38. // Leading zeroes
  39. if (val <= 0x7f) {
  40. return false;
  41. }
  42. p.place = off;
  43. return val;
  44. }
  45. function rmPadding(buf) {
  46. var i = 0;
  47. var len = buf.length - 1;
  48. while (!buf[i] && !(buf[i + 1] & 0x80) && i < len) {
  49. i++;
  50. }
  51. if (i === 0) {
  52. return buf;
  53. }
  54. return buf.slice(i);
  55. }
  56. Signature.prototype._importDER = function _importDER(data, enc) {
  57. data = utils.toArray(data, enc);
  58. var p = new Position();
  59. if (data[p.place++] !== 0x30) {
  60. return false;
  61. }
  62. var len = getLength(data, p);
  63. if (len === false) {
  64. return false;
  65. }
  66. if ((len + p.place) !== data.length) {
  67. return false;
  68. }
  69. if (data[p.place++] !== 0x02) {
  70. return false;
  71. }
  72. var rlen = getLength(data, p);
  73. if (rlen === false) {
  74. return false;
  75. }
  76. var r = data.slice(p.place, rlen + p.place);
  77. p.place += rlen;
  78. if (data[p.place++] !== 0x02) {
  79. return false;
  80. }
  81. var slen = getLength(data, p);
  82. if (slen === false) {
  83. return false;
  84. }
  85. if (data.length !== slen + p.place) {
  86. return false;
  87. }
  88. var s = data.slice(p.place, slen + p.place);
  89. if (r[0] === 0) {
  90. if (r[1] & 0x80) {
  91. r = r.slice(1);
  92. } else {
  93. // Leading zeroes
  94. return false;
  95. }
  96. }
  97. if (s[0] === 0) {
  98. if (s[1] & 0x80) {
  99. s = s.slice(1);
  100. } else {
  101. // Leading zeroes
  102. return false;
  103. }
  104. }
  105. this.r = new BN(r);
  106. this.s = new BN(s);
  107. this.recoveryParam = null;
  108. return true;
  109. };
  110. function constructLength(arr, len) {
  111. if (len < 0x80) {
  112. arr.push(len);
  113. return;
  114. }
  115. var octets = 1 + (Math.log(len) / Math.LN2 >>> 3);
  116. arr.push(octets | 0x80);
  117. while (--octets) {
  118. arr.push((len >>> (octets << 3)) & 0xff);
  119. }
  120. arr.push(len);
  121. }
  122. Signature.prototype.toDER = function toDER(enc) {
  123. var r = this.r.toArray();
  124. var s = this.s.toArray();
  125. // Pad values
  126. if (r[0] & 0x80)
  127. r = [ 0 ].concat(r);
  128. // Pad values
  129. if (s[0] & 0x80)
  130. s = [ 0 ].concat(s);
  131. r = rmPadding(r);
  132. s = rmPadding(s);
  133. while (!s[0] && !(s[1] & 0x80)) {
  134. s = s.slice(1);
  135. }
  136. var arr = [ 0x02 ];
  137. constructLength(arr, r.length);
  138. arr = arr.concat(r);
  139. arr.push(0x02);
  140. constructLength(arr, s.length);
  141. var backHalf = arr.concat(s);
  142. var res = [ 0x30 ];
  143. constructLength(res, backHalf.length);
  144. res = res.concat(backHalf);
  145. return utils.encode(res, enc);
  146. };