NativeSecp256k1Test.java

Go to the documentation of this file.

package org.bitcoin;

import static org.bitcoin.NativeSecp256k1Util.*;

public class NativeSecp256k1Test {

    private static byte[] hexStringToByteArray(String s) {
        int len = s.length();
        assert len % 2 == 0 : "The hex string length should be even !";
        byte[] byteArray = new byte[len / 2];
        for (int i = 0; i < len; i += 2) {
            byteArray[i / 2] = (byte)((Character.digit(s.charAt(i), 16) << 4) +
                Character.digit(s.charAt(i + 1), 16));
        }
        return byteArray;
    }

    private static String byteArrayToHexString(byte[] byteArray) {
       StringBuilder stringBuilder = new StringBuilder(byteArray.length * 2);
       for(byte b: byteArray) {
           stringBuilder.append(String.format("%02X", b));
       }
       return stringBuilder.toString();
    }

    //TODO improve comments/add more tests

    public static void testVerifyPos() throws AssertFailException{
        boolean result = false;

        // sha256hash of "testing"
        byte[] data = hexStringToByteArray("CF80CD8AED482D5D1527D7DC72FCEFF84E6326592848447D2DC0B0E87DFC9A90");
        byte[] sig = hexStringToByteArray("3044022079BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F817980220294F14E883B3F525B5367756C2A11EF6CF84B730B36C17CB0C56F0AAB2C98589");
        byte[] pub = hexStringToByteArray("040A629506E1B65CD9D2E0BA9C75DF9C4FED0DB16DC9625ED14397F0AFC836FAE595DC53F8B0EFE61E703075BD9B143BAC75EC0E19F82A2208CAEB32BE53414C40");

        result = NativeSecp256k1.verify(data, sig, pub);
        assertEquals(result, true, "testVerifyPos");
    }

    public static void testVerifyNeg() throws AssertFailException{
        boolean result = false;

        // sha256hash of "testing"
        byte[] data = hexStringToByteArray("CF80CD8AED482D5D1527D7DC72FCEFF84E6326592848447D2DC0B0E87DFC9A91");
        byte[] sig = hexStringToByteArray("3044022079BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F817980220294F14E883B3F525B5367756C2A11EF6CF84B730B36C17CB0C56F0AAB2C98589");
        byte[] pub = hexStringToByteArray("040A629506E1B65CD9D2E0BA9C75DF9C4FED0DB16DC9625ED14397F0AFC836FAE595DC53F8B0EFE61E703075BD9B143BAC75EC0E19F82A2208CAEB32BE53414C40");

        result = NativeSecp256k1.verify(data, sig, pub);
        assertEquals(result, false, "testVerifyNeg");
    }

    public static void testSecKeyVerifyPos() throws AssertFailException{
        boolean result = false;

        byte[] sec = hexStringToByteArray("67E56582298859DDAE725F972992A07C6C4FB9F62A8FFF58CE3CA926A1063530");

        result = NativeSecp256k1.secKeyVerify(sec);
        assertEquals(result, true, "testSecKeyVerifyPos");
    }

    public static void testSecKeyVerifyNeg() throws AssertFailException{
        boolean result = false;

        byte[] sec = hexStringToByteArray("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF");

        result = NativeSecp256k1.secKeyVerify(sec);
        assertEquals(result, false, "testSecKeyVerifyNeg");
    }

    public static void testPubKeyCreatePos() throws AssertFailException{
        byte[] sec = hexStringToByteArray("67E56582298859DDAE725F972992A07C6C4FB9F62A8FFF58CE3CA926A1063530");

        byte[] resultArr = NativeSecp256k1.computePubkey(sec);
        String pubkeyString = byteArrayToHexString(resultArr);
        assertEquals(pubkeyString, "04C591A8FF19AC9C4E4E5793673B83123437E975285E7B442F4EE2654DFFCA5E2D2103ED494718C697AC9AEBCFD19612E224DB46661011863ED2FC54E71861E2A6", "testPubKeyCreatePos");
    }

    public static void testPubKeyCreateNeg() throws AssertFailException{
        byte[] sec = hexStringToByteArray("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF");

        byte[] resultArr = NativeSecp256k1.computePubkey(sec);
        String pubkeyString = byteArrayToHexString(resultArr);
        assertEquals(pubkeyString, "", "testPubKeyCreateNeg");
    }

    public static void testSignPos() throws AssertFailException{
        // sha256hash of "testing"
        byte[] data = hexStringToByteArray("CF80CD8AED482D5D1527D7DC72FCEFF84E6326592848447D2DC0B0E87DFC9A90");
        byte[] sec = hexStringToByteArray("67E56582298859DDAE725F972992A07C6C4FB9F62A8FFF58CE3CA926A1063530");

        byte[] resultArr = NativeSecp256k1.sign(data, sec);
        String sigString = byteArrayToHexString(resultArr);
        assertEquals(sigString, "3045022100F51D069AA46EDB4E2E77773FE364AA2AF6818AF733EA542CFC4D546640A58D8802204F1C442AC9F26F232451A0C3EE99F6875353FC73902C68055C19E31624F687CC", "testSignPos");
    }

    public static void testSignNeg() throws AssertFailException{
        // sha256hash of "testing"
        byte[] data = hexStringToByteArray("CF80CD8AED482D5D1527D7DC72FCEFF84E6326592848447D2DC0B0E87DFC9A90");
        byte[] sec = hexStringToByteArray("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF");

        byte[] resultArr = NativeSecp256k1.sign(data, sec);
        String sigString = byteArrayToHexString(resultArr);
        assertEquals(sigString, "", "testSignNeg");
    }

    public static void testPrivKeyTweakAdd_1() throws AssertFailException {
        // sha256hash of "tweak"
        byte[] data = hexStringToByteArray("3982F19BEF1615BCCFBB05E321C10E1D4CBA3DF0E841C2E41EEB6016347653C3"); 
        byte[] sec = hexStringToByteArray("67E56582298859DDAE725F972992A07C6C4FB9F62A8FFF58CE3CA926A1063530");

        byte[] resultArr = NativeSecp256k1.privKeyTweakAdd(sec, data);
        String sigString = byteArrayToHexString(resultArr);
        assertEquals(sigString, "A168571E189E6F9A7E2D657A4B53AE99B909F7E712D1C23CED28093CD57C88F3", "testPrivKeyAdd_1");
    }

    public static void testPrivKeyTweakMul_1() throws AssertFailException {
        // sha256hash of "tweak"
        byte[] data = hexStringToByteArray("3982F19BEF1615BCCFBB05E321C10E1D4CBA3DF0E841C2E41EEB6016347653C3");
        byte[] sec = hexStringToByteArray("67E56582298859DDAE725F972992A07C6C4FB9F62A8FFF58CE3CA926A1063530");

        byte[] resultArr = NativeSecp256k1.privKeyTweakMul(sec, data);
        String sigString = byteArrayToHexString(resultArr);
        assertEquals(sigString, "97F8184235F101550F3C71C927507651BD3F1CDB4A5A33B8986ACF0DEE20FFFC", "testPrivKeyMul_1");
    }

    public static void testPrivKeyTweakAdd_2() throws AssertFailException {
        // sha256hash of "tweak"
        byte[] data = hexStringToByteArray("3982F19BEF1615BCCFBB05E321C10E1D4CBA3DF0E841C2E41EEB6016347653C3");
        byte[] pub = hexStringToByteArray("040A629506E1B65CD9D2E0BA9C75DF9C4FED0DB16DC9625ED14397F0AFC836FAE595DC53F8B0EFE61E703075BD9B143BAC75EC0E19F82A2208CAEB32BE53414C40");

        byte[] resultArr = NativeSecp256k1.pubKeyTweakAdd(pub ,data);
        String sigString = byteArrayToHexString(resultArr);
        assertEquals(sigString, "0411C6790F4B663CCE607BAAE08C43557EDC1A4D11D88DFCB3D841D0C6A941AF525A268E2A863C148555C48FB5FBA368E88718A46E205FABC3DBA2CCFFAB0796EF", "testPrivKeyAdd_2");
    }

    public static void testPrivKeyTweakMul_2() throws AssertFailException {
        // sha256hash of "tweak"
        byte[] data = hexStringToByteArray("3982F19BEF1615BCCFBB05E321C10E1D4CBA3DF0E841C2E41EEB6016347653C3");
        byte[] pub = hexStringToByteArray("040A629506E1B65CD9D2E0BA9C75DF9C4FED0DB16DC9625ED14397F0AFC836FAE595DC53F8B0EFE61E703075BD9B143BAC75EC0E19F82A2208CAEB32BE53414C40");

        byte[] resultArr = NativeSecp256k1.pubKeyTweakMul(pub, data);
        String sigString = byteArrayToHexString(resultArr);
        assertEquals(sigString, "04E0FE6FE55EBCA626B98A807F6CAF654139E14E5E3698F01A9A658E21DC1D2791EC060D4F412A794D5370F672BC94B722640B5F76914151CFCA6E712CA48CC589", "testPrivKeyMul_2");
    }

    public static void testRandomize() throws AssertFailException {
        // sha256hash of "random"
        byte[] seed = hexStringToByteArray("A441B15FE9A3CF56661190A0B93B9DEC7D04127288CC87250967CF3B52894D11");

        boolean result = NativeSecp256k1.randomize(seed);
        assertEquals(result, true, "testRandomize");
    }

    private static class SchnorrTestVector {
        String data;
        String sig;
        String pubKey;
        boolean expected;
        String comment;

        SchnorrTestVector(String d, String s, String p, boolean e, String c) {
            data = d;
            sig = s;
            pubKey = p;
            expected = e;
            comment = c;
        }
    }

    public static void testSchnorrVerify() throws AssertFailException{
        SchnorrTestVector[] tests = new SchnorrTestVector[]{
            new SchnorrTestVector(
                "0000000000000000000000000000000000000000000000000000000000000000",
                "787A848E71043D280C50470E8E1532B2DD5D20EE912A45DBDD2BD1DFBF187EF67031A98831859DC34DFFEEDDA86831842CCD0079E1F92AF177F7F22CC1DCED05",
                "0279BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798",
                true,
                "success"
            ),
            new SchnorrTestVector(
                "243F6A8885A308D313198A2E03707344A4093822299F31D0082EFA98EC4E6C89",
                "2A298DACAE57395A15D0795DDBFD1DCB564DA82B0F269BC70A74F8220429BA1D1E51A22CCEC35599B8F266912281F8365FFC2D035A230434A1A64DC59F7013FD",
                "02DFF1D77F2A671C5F36183726DB2341BE58FEAE1DA2DECED843240F7B502BA659",
                true,
                "success"
            ),
            new SchnorrTestVector(
                "5E2D58D8B3BCDF1ABADEC7829054F90DDA9805AAB56C77333024B9D0A508B75C",
                "00DA9B08172A9B6F0466A2DEFD817F2D7AB437E0D253CB5395A963866B3574BE00880371D01766935B92D2AB4CD5C8A2A5837EC57FED7660773A05F0DE142380",
                "03FAC2114C2FBB091527EB7C64ECB11F8021CB45E8E7809D3C0938E4B8C0E5F84B",
                true,
                "success"
            ),
            new SchnorrTestVector(
                "4DF3C3F68FCC83B27E9D42C90431A72499F17875C81A599B566C9889B9696703",
                "00000000000000000000003B78CE563F89A0ED9414F5AA28AD0D96D6795F9C6302A8DC32E64E86A333F20EF56EAC9BA30B7246D6D25E22ADB8C6BE1AEB08D49D",
                "03DEFDEA4CDB677750A420FEE807EACF21EB9898AE79B9768766E4FAA04A2D4A34",
                true,
                "success"
            ),
            new SchnorrTestVector(
                "0000000000000000000000000000000000000000000000000000000000000000",
                "52818579ACA59767E3291D91B76B637BEF062083284992F2D95F564CA6CB4E3530B1DA849C8E8304ADC0CFE870660334B3CFC18E825EF1DB34CFAE3DFC5D8187",
                "031B84C5567B126440995D3ED5AABA0565D71E1834604819FF9C17F5E9D5DD078F",
                true,
                "success"
            ),
            new SchnorrTestVector(
                "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF",
                "570DD4CA83D4E6317B8EE6BAE83467A1BF419D0767122DE409394414B05080DCE9EE5F237CBD108EABAE1E37759AE47F8E4203DA3532EB28DB860F33D62D49BD",
                "03FAC2114C2FBB091527EB7C64ECB11F8021CB45E8E7809D3C0938E4B8C0E5F84B",
                true,
                "success"
            ),
            new SchnorrTestVector(
                "4DF3C3F68FCC83B27E9D42C90431A72499F17875C81A599B566C9889B9696703",
                "00000000000000000000003B78CE563F89A0ED9414F5AA28AD0D96D6795F9C6302A8DC32E64E86A333F20EF56EAC9BA30B7246D6D25E22ADB8C6BE1AEB08D49D",
                "02DFF1D77F2A671C5F36183726DB2341BE58FEAE1DA2DECED843240F7B502BA659",
                false,
                "public key not on the curve"
            ),
            new SchnorrTestVector(
                "243F6A8885A308D313198A2E03707344A4093822299F31D0082EFA98EC4E6C89",
                "2A298DACAE57395A15D0795DDBFD1DCB564DA82B0F269BC70A74F8220429BA1DFA16AEE06609280A19B67A24E1977E4697712B5FD2943914ECD5F730901B4AB7",
                "03EEFDEA4CDB677750A420FEE807EACF21EB9898AE79B9768766E4FAA04A2D4A34",
                false,
                "incorrect R residuosity"
            ),
            new SchnorrTestVector(
                "5E2D58D8B3BCDF1ABADEC7829054F90DDA9805AAB56C77333024B9D0A508B75C",
                "00DA9B08172A9B6F0466A2DEFD817F2D7AB437E0D253CB5395A963866B3574BED092F9D860F1776A1F7412AD8A1EB50DACCC222BC8C0E26B2056DF2F273EFDEC",
                "03FAC2114C2FBB091527EB7C64ECB11F8021CB45E8E7809D3C0938E4B8C0E5F84B",
                false,
                "negated message hash"
            ),
            new SchnorrTestVector(
                "0000000000000000000000000000000000000000000000000000000000000000",
                "787A848E71043D280C50470E8E1532B2DD5D20EE912A45DBDD2BD1DFBF187EF68FCE5677CE7A623CB20011225797CE7A8DE1DC6CCD4F754A47DA6C600E59543C",
                "0279BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798",
                false,
                "negated s value"
            ),
            new SchnorrTestVector(
                "243F6A8885A308D313198A2E03707344A4093822299F31D0082EFA98EC4E6C89",
                "2A298DACAE57395A15D0795DDBFD1DCB564DA82B0F269BC70A74F8220429BA1D1E51A22CCEC35599B8F266912281F8365FFC2D035A230434A1A64DC59F7013FD",
                "03DFF1D77F2A671C5F36183726DB2341BE58FEAE1DA2DECED843240F7B502BA659",
                false,
                "negated public key"
            ),
            new SchnorrTestVector(
                "243F6A8885A308D313198A2E03707344A4093822299F31D0082EFA98EC4E6C89",
                "00000000000000000000000000000000000000000000000000000000000000009E9D01AF988B5CEDCE47221BFA9B222721F3FA408915444A4B489021DB55775F",
                "02DFF1D77F2A671C5F36183726DB2341BE58FEAE1DA2DECED843240F7B502BA659",
                false,
                "sG - eP is infinite. Test fails in single verification if jacobi(y(inf)) is defined as 1 and x(inf) as 0"
            ),
            new SchnorrTestVector(
                "243F6A8885A308D313198A2E03707344A4093822299F31D0082EFA98EC4E6C89",
                "0000000000000000000000000000000000000000000000000000000000000001D37DDF0254351836D84B1BD6A795FD5D523048F298C4214D187FE4892947F728",
                "02DFF1D77F2A671C5F36183726DB2341BE58FEAE1DA2DECED843240F7B502BA659",
                false,
                "sG - eP is infinite. Test fails in single verification if jacobi(y(inf)) is defined as 1 and x(inf) as 1"
            ),
            new SchnorrTestVector(
                "243F6A8885A308D313198A2E03707344A4093822299F31D0082EFA98EC4E6C89",
                "4A298DACAE57395A15D0795DDBFD1DCB564DA82B0F269BC70A74F8220429BA1D1E51A22CCEC35599B8F266912281F8365FFC2D035A230434A1A64DC59F7013FD",
                "02DFF1D77F2A671C5F36183726DB2341BE58FEAE1DA2DECED843240F7B502BA659",
                false,
                "sig[0:32] is not an X coordinate on the curve"
            ),
            new SchnorrTestVector(
                "243F6A8885A308D313198A2E03707344A4093822299F31D0082EFA98EC4E6C89",
                "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC2F1E51A22CCEC35599B8F266912281F8365FFC2D035A230434A1A64DC59F7013FD",
                "02DFF1D77F2A671C5F36183726DB2341BE58FEAE1DA2DECED843240F7B502BA659",
                false,
                "sig[0:32] is equal to field size"
            ),
            new SchnorrTestVector(
                "243F6A8885A308D313198A2E03707344A4093822299F31D0082EFA98EC4E6C89",
                "2A298DACAE57395A15D0795DDBFD1DCB564DA82B0F269BC70A74F8220429BA1DFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141",
                "02DFF1D77F2A671C5F36183726DB2341BE58FEAE1DA2DECED843240F7B502BA659",
                false,
                "sig[32:64] is equal to curve order"
            )
        };
        int i = 0;
        for(SchnorrTestVector test : tests) {
            boolean expected = test.expected;
            byte[] data = hexStringToByteArray(test.data);
            byte[] sig = hexStringToByteArray(test.sig);
            byte[] pub = hexStringToByteArray(test.pubKey);
            boolean result = NativeSecp256k1.schnorrVerify(data, sig, pub);

            String testMsg = String.join(" ", "testSchnorrVerify", String.valueOf(i++), String.valueOf(expected), test.comment);

            assertEquals(result, expected, testMsg);
        }
    }

    public static void testSchnorrSign() throws AssertFailException{
        // sha256(sha256("Very deterministic message"))
        byte[] data = hexStringToByteArray("5255683DA567900BFD3E786ED8836A4E7763C221BF1AC20ECE2A5171B9199E8A"); 
        byte[] sec = hexStringToByteArray("12B004FFF7F4B69EF8650E767F18F11EDE158148B425660723B9F9A66E61F747");

        byte[] resultArr = NativeSecp256k1.schnorrSign(data, sec);
        String sigString = byteArrayToHexString(resultArr);
        assertEquals(sigString, "2C56731AC2F7A7E7F11518FC7722A166B02438924CA9D8B4D111347B81D0717571846DE67AD3D913A8FDF9D8F3F73161A4C48AE81CB183B214765FEB86E255CE", "testSchnorrSign");
    }

    public static void testCreateECDHSecret() throws AssertFailException{
        byte[] sec = hexStringToByteArray("67E56582298859DDAE725F972992A07C6C4FB9F62A8FFF58CE3CA926A1063530");
        byte[] pub = hexStringToByteArray("040A629506E1B65CD9D2E0BA9C75DF9C4FED0DB16DC9625ED14397F0AFC836FAE595DC53F8B0EFE61E703075BD9B143BAC75EC0E19F82A2208CAEB32BE53414C40");

        byte[] resultArr = NativeSecp256k1.createECDHSecret(sec, pub);
        String ecdhString = byteArrayToHexString(resultArr);
        assertEquals(ecdhString, "2A2A67007A926E6594AF3EB564FC74005B37A9C8AEF2033C4552051B5C87F043", "testCreateECDHSecret");
    }

    public static void main(String[] args) throws AssertFailException{
        System.out.println("\nlibsecp256k1 enabled: " + Secp256k1Context.isEnabled() + "\n");

        assertEquals(Secp256k1Context.isEnabled(), true, "isEnabled");

        // Test verify() success/fail
        testVerifyPos();
        testVerifyNeg();

        // Test secKeyVerify() success/fail
        testSecKeyVerifyPos();
        testSecKeyVerifyNeg();

        // Test computePubkey() success/fail
        testPubKeyCreatePos();
        testPubKeyCreateNeg();

        // Test sign() success/fail
        testSignPos();
        testSignNeg();

        // Test privKeyTweakAdd() 1
        testPrivKeyTweakAdd_1();

        // Test privKeyTweakMul() 2
        testPrivKeyTweakMul_1();

        // Test privKeyTweakAdd() 3
        testPrivKeyTweakAdd_2();

        // Test privKeyTweakMul() 4
        testPrivKeyTweakMul_2();

        // Test randomize()
        testRandomize();

        // Test verifySchnorr() success/fail
        testSchnorrVerify();

        // Test schnorrSign()
        testSchnorrSign();

        // Test ECDH
        testCreateECDHSecret();

        NativeSecp256k1.cleanup();

        System.out.println("All tests passed.");
    }
}