224 lines
9.2 KiB
JavaScript
224 lines
9.2 KiB
JavaScript
/*! scure-bip39 - MIT License (c) 2022 Patricio Palladino, Paul Miller (paulmillr.com) */
|
|
import { pbkdf2, pbkdf2Async } from '@noble/hashes/pbkdf2.js';
|
|
import { sha256, sha512 } from '@noble/hashes/sha2.js';
|
|
import { abytes, anumber, randomBytes } from '@noble/hashes/utils.js';
|
|
import { pbkdf2 as pbkdf2web, sha512 as sha512web } from '@noble/hashes/webcrypto.js';
|
|
import { utils as baseUtils } from '@scure/base';
|
|
// Japanese wordlist
|
|
// The canonical BIP-39 Japanese wordlist starts with あいこくしん.
|
|
// Use that sentinel so generated phrases use U+3000 ideographic spaces.
|
|
const isJapanese = (wordlist) => wordlist[0] === '\u3042\u3044\u3053\u304f\u3057\u3093';
|
|
// Normalization replaces equivalent sequences of characters
|
|
// so that any two texts that are equivalent will be reduced
|
|
// to the same sequence of code points, called the normal form of the original text.
|
|
// https://tonsky.me/blog/unicode/#why-is-a----
|
|
// BIP-39 requires UTF-8 NFKD for localized wordlists and mnemonic sentences.
|
|
// It also applies NFKD to the "mnemonic" + passphrase salt.
|
|
function nfkd(str) {
|
|
if (typeof str !== 'string')
|
|
throw new TypeError('invalid mnemonic type: ' + typeof str);
|
|
return str.normalize('NFKD');
|
|
}
|
|
// BIP-39 mnemonics are consumed in NFKD form.
|
|
// They must contain 12, 15, 18, 21, or 24 words before checksum validation.
|
|
function normalize(str) {
|
|
const norm = nfkd(str);
|
|
const words = norm.split(' ');
|
|
if (![12, 15, 18, 21, 24].includes(words.length))
|
|
throw new Error('Invalid mnemonic');
|
|
return { nfkd: norm, words };
|
|
}
|
|
// BIP-39 entropy payloads are 128-256 bits in 32-bit increments, i.e. 16/20/24/28/32 bytes.
|
|
function aentropy(ent) {
|
|
abytes(ent);
|
|
if (![16, 20, 24, 28, 32].includes(ent.length))
|
|
throw new RangeError('invalid entropy length');
|
|
}
|
|
/**
|
|
* Generate x random words. Uses Cryptographically-Secure Random Number Generator.
|
|
* @param wordlist - Imported wordlist for a specific language.
|
|
* @param strength - Mnemonic strength, from 128 to 256 bits.
|
|
* @returns 12-24 word mnemonic phrase.
|
|
* @throws On wrong argument types. {@link TypeError}
|
|
* @throws On wrong argument ranges or values. {@link RangeError}
|
|
* @example
|
|
* Generate a new English mnemonic.
|
|
* ```ts
|
|
* import { generateMnemonic } from '@scure/bip39';
|
|
* import { wordlist } from '@scure/bip39/wordlists/english.js';
|
|
* const mnemonic = generateMnemonic(wordlist, 128);
|
|
* // 'legal winner thank year wave sausage worth useful legal winner thank yellow'
|
|
* ```
|
|
*/
|
|
export function generateMnemonic(wordlist, strength = 128) {
|
|
anumber(strength);
|
|
if (strength % 32 !== 0 || strength > 256)
|
|
throw new RangeError('Invalid entropy');
|
|
return entropyToMnemonic(randomBytes(strength / 8), wordlist);
|
|
}
|
|
const calcChecksum = (entropy) => {
|
|
// Checksum is ent.length/4 bits long
|
|
const bitsLeft = 8 - entropy.length / 4;
|
|
// Zero rightmost "bitsLeft" bits in byte
|
|
// For example: bitsLeft=4 val=10111101 -> 10110000
|
|
return new Uint8Array([(sha256(entropy)[0] >> bitsLeft) << bitsLeft]);
|
|
};
|
|
function getCoder(wordlist) {
|
|
if (!Array.isArray(wordlist) || wordlist.length !== 2048 || typeof wordlist[0] !== 'string')
|
|
throw new TypeError('Wordlist: expected array of 2048 strings');
|
|
wordlist.forEach((i) => {
|
|
if (typeof i !== 'string')
|
|
throw new TypeError('wordlist: non-string element: ' + i);
|
|
});
|
|
// BIP-39 appends checksum bits to entropy.
|
|
// It then splits the bitstream into 11-bit indexes for a 2048-word list.
|
|
return baseUtils.chain(baseUtils.checksum(1, calcChecksum), baseUtils.radix2(11, true), baseUtils.alphabet(wordlist));
|
|
}
|
|
/**
|
|
* Reversible: Converts mnemonic string to raw entropy in form of byte array.
|
|
* @param mnemonic - 12-24 words.
|
|
* @param wordlist - Imported wordlist for a specific language.
|
|
* @returns Raw entropy bytes.
|
|
* @throws If the mnemonic shape or checksum is invalid. {@link Error}
|
|
* @throws On wrong argument types. {@link TypeError}
|
|
* @throws On wrong argument ranges or values. {@link RangeError}
|
|
* @example
|
|
* Decode a mnemonic back into its original entropy bytes.
|
|
* ```ts
|
|
* import { mnemonicToEntropy } from '@scure/bip39';
|
|
* import { wordlist } from '@scure/bip39/wordlists/english.js';
|
|
* const mnem = 'legal winner thank year wave sausage worth useful legal winner thank yellow';
|
|
* const entropy = mnemonicToEntropy(mnem, wordlist);
|
|
* // Produces the original 16-byte entropy payload.
|
|
* new Uint8Array([
|
|
* 0x7f, 0x7f, 0x7f, 0x7f, 0x7f, 0x7f, 0x7f, 0x7f,
|
|
* 0x7f, 0x7f, 0x7f, 0x7f, 0x7f, 0x7f, 0x7f, 0x7f
|
|
* ])
|
|
* ```
|
|
*/
|
|
export function mnemonicToEntropy(mnemonic, wordlist) {
|
|
const { words } = normalize(mnemonic);
|
|
const entropy = getCoder(wordlist).decode(words);
|
|
aentropy(entropy);
|
|
return entropy;
|
|
}
|
|
/**
|
|
* Reversible: Converts raw entropy in form of byte array to mnemonic string.
|
|
* @param entropy - Byte array.
|
|
* @param wordlist - Imported wordlist for a specific language.
|
|
* @returns 12-24 words.
|
|
* @throws On wrong argument types. {@link TypeError}
|
|
* @throws On wrong argument ranges or values. {@link RangeError}
|
|
* @example
|
|
* Convert raw entropy into an English mnemonic.
|
|
* ```ts
|
|
* import { entropyToMnemonic } from '@scure/bip39';
|
|
* import { wordlist } from '@scure/bip39/wordlists/english.js';
|
|
* const ent = new Uint8Array([
|
|
* 0x7f, 0x7f, 0x7f, 0x7f, 0x7f, 0x7f, 0x7f, 0x7f,
|
|
* 0x7f, 0x7f, 0x7f, 0x7f, 0x7f, 0x7f, 0x7f, 0x7f
|
|
* ]);
|
|
* const mnemonic = entropyToMnemonic(ent, wordlist);
|
|
* // 'legal winner thank year wave sausage worth useful legal winner thank yellow'
|
|
* ```
|
|
*/
|
|
export function entropyToMnemonic(entropy, wordlist) {
|
|
aentropy(entropy);
|
|
const words = getCoder(wordlist).encode(entropy);
|
|
return words.join(isJapanese(wordlist) ? '\u3000' : ' ');
|
|
}
|
|
/**
|
|
* Validates mnemonic for being 12-24 words contained in `wordlist`.
|
|
* @param mnemonic - 12-24 words.
|
|
* @param wordlist - Imported wordlist for a specific language.
|
|
* @returns `true` when mnemonic checksum and words are valid.
|
|
* @example
|
|
* Validate one English mnemonic.
|
|
* ```ts
|
|
* import { validateMnemonic } from '@scure/bip39';
|
|
* import { wordlist } from '@scure/bip39/wordlists/english.js';
|
|
* const ok = validateMnemonic(
|
|
* 'legal winner thank year wave sausage worth useful legal winner thank yellow',
|
|
* wordlist
|
|
* );
|
|
* // => true
|
|
* ```
|
|
*/
|
|
export function validateMnemonic(mnemonic, wordlist) {
|
|
try {
|
|
mnemonicToEntropy(mnemonic, wordlist);
|
|
}
|
|
catch (e) {
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
// BIP-39 salts PBKDF2 with the UTF-8 NFKD string "mnemonic" + passphrase.
|
|
const psalt = (passphrase) => nfkd('mnemonic' + passphrase);
|
|
/**
|
|
* Irreversible: Uses KDF to derive 64 bytes of key data from mnemonic + optional password.
|
|
* @param mnemonic - 12-24 words.
|
|
* @param passphrase - String that will additionally protect the key.
|
|
* @returns 64 bytes of key data.
|
|
* @throws If the mnemonic shape is invalid. {@link Error}
|
|
* @throws On wrong argument types. {@link TypeError}
|
|
* @example
|
|
* Derive a seed from a mnemonic with the async PBKDF2 helper.
|
|
* ```ts
|
|
* const mnem = 'legal winner thank year wave sausage worth useful legal winner thank yellow';
|
|
* const seed = await mnemonicToSeed(mnem, 'password');
|
|
* // => new Uint8Array([...64 bytes])
|
|
* ```
|
|
*/
|
|
// BIP-39 seed derivation is independent from mnemonic generation.
|
|
// These helpers normalize the phrase but do not verify checksum or wordlist membership.
|
|
export function mnemonicToSeed(mnemonic, passphrase = '') {
|
|
return pbkdf2Async(sha512, normalize(mnemonic).nfkd, psalt(passphrase), {
|
|
c: 2048,
|
|
dkLen: 64,
|
|
});
|
|
}
|
|
/**
|
|
* Irreversible: Uses KDF to derive 64 bytes of key data from mnemonic + optional password.
|
|
* @param mnemonic - 12-24 words.
|
|
* @param passphrase - String that will additionally protect the key.
|
|
* @returns 64 bytes of key data.
|
|
* @throws If the mnemonic shape is invalid. {@link Error}
|
|
* @throws On wrong argument types. {@link TypeError}
|
|
* @example
|
|
* Derive a seed from a mnemonic with the sync PBKDF2 helper.
|
|
* ```ts
|
|
* const mnem = 'legal winner thank year wave sausage worth useful legal winner thank yellow';
|
|
* const seed = mnemonicToSeedSync(mnem, 'password');
|
|
* // => new Uint8Array([...64 bytes])
|
|
* ```
|
|
*/
|
|
export function mnemonicToSeedSync(mnemonic, passphrase = '') {
|
|
return pbkdf2(sha512, normalize(mnemonic).nfkd, psalt(passphrase), {
|
|
c: 2048,
|
|
dkLen: 64,
|
|
});
|
|
}
|
|
/**
|
|
* Uses native, built-in functionality, provided by globalThis.crypto.
|
|
* Irreversible: Uses KDF to derive 64 bytes of key data from mnemonic + optional password.
|
|
* @param mnemonic - 12-24 words.
|
|
* @param passphrase - String that will additionally protect the key.
|
|
* @returns 64 bytes of key data.
|
|
* @throws If the mnemonic shape is invalid. {@link Error}
|
|
* @throws On wrong argument types. {@link TypeError}
|
|
* @example
|
|
* Derive a seed with the native WebCrypto PBKDF2 helper.
|
|
* ```ts
|
|
* const mnem = 'legal winner thank year wave sausage worth useful legal winner thank yellow';
|
|
* const seed = await mnemonicToSeedWebcrypto(mnem, 'password');
|
|
* // => new Uint8Array([...64 bytes])
|
|
* ```
|
|
*/
|
|
export function mnemonicToSeedWebcrypto(mnemonic, passphrase = '') {
|
|
return pbkdf2web(sha512web, normalize(mnemonic).nfkd, psalt(passphrase), {
|
|
c: 2048,
|
|
dkLen: 64,
|
|
});
|
|
}
|
|
//# sourceMappingURL=index.js.map
|