2015-07-07 00:54:22 +00:00
|
|
|
// Copyright 2014 The go-ethereum Authors
|
2015-07-22 16:48:40 +00:00
|
|
|
// This file is part of the go-ethereum library.
|
2015-07-07 00:54:22 +00:00
|
|
|
//
|
|
|
|
// go-ethereum is free software: you can redistribute it and/or modify
|
|
|
|
// it under the terms of the GNU Lesser General Public License as published by
|
|
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
|
|
// (at your option) any later version.
|
|
|
|
//
|
2015-07-22 16:48:40 +00:00
|
|
|
// The go-ethereum library is distributed in the hope that it will be useful,
|
2015-07-07 00:54:22 +00:00
|
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
2015-07-22 16:48:40 +00:00
|
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
2015-07-07 00:54:22 +00:00
|
|
|
// GNU Lesser General Public License for more details.
|
|
|
|
//
|
|
|
|
// You should have received a copy of the GNU Lesser General Public License
|
2015-07-22 16:48:40 +00:00
|
|
|
// along with the go-ethereum library. If not, see <http://www.gnu.org/licenses/>.
|
2015-07-07 00:54:22 +00:00
|
|
|
|
2014-10-18 11:31:20 +00:00
|
|
|
package vm
|
2014-10-08 10:01:36 +00:00
|
|
|
|
|
|
|
import (
|
|
|
|
"math/big"
|
|
|
|
|
2015-03-16 10:27:38 +00:00
|
|
|
"github.com/ethereum/go-ethereum/common"
|
2015-03-19 03:56:06 +00:00
|
|
|
"github.com/ethereum/go-ethereum/crypto"
|
2015-04-07 10:48:13 +00:00
|
|
|
"github.com/ethereum/go-ethereum/logger"
|
2015-04-05 17:31:18 +00:00
|
|
|
"github.com/ethereum/go-ethereum/logger/glog"
|
2015-04-02 03:17:15 +00:00
|
|
|
"github.com/ethereum/go-ethereum/params"
|
2014-10-08 10:01:36 +00:00
|
|
|
)
|
|
|
|
|
|
|
|
type Address interface {
|
|
|
|
Call(in []byte) []byte
|
|
|
|
}
|
|
|
|
|
2014-12-17 22:58:52 +00:00
|
|
|
type PrecompiledAccount struct {
|
2014-12-09 19:27:57 +00:00
|
|
|
Gas func(l int) *big.Int
|
2014-10-08 10:01:36 +00:00
|
|
|
fn func(in []byte) []byte
|
|
|
|
}
|
|
|
|
|
2014-12-17 22:58:52 +00:00
|
|
|
func (self PrecompiledAccount) Call(in []byte) []byte {
|
2014-10-08 10:01:36 +00:00
|
|
|
return self.fn(in)
|
|
|
|
}
|
|
|
|
|
2015-01-13 09:30:52 +00:00
|
|
|
var Precompiled = PrecompiledContracts()
|
|
|
|
|
|
|
|
// XXX Could set directly. Testing requires resetting and setting of pre compiled contracts.
|
|
|
|
func PrecompiledContracts() map[string]*PrecompiledAccount {
|
|
|
|
return map[string]*PrecompiledAccount{
|
|
|
|
// ECRECOVER
|
2015-03-16 10:27:38 +00:00
|
|
|
string(common.LeftPadBytes([]byte{1}, 20)): &PrecompiledAccount{func(l int) *big.Int {
|
2015-04-02 03:17:15 +00:00
|
|
|
return params.EcrecoverGas
|
2015-01-13 09:30:52 +00:00
|
|
|
}, ecrecoverFunc},
|
|
|
|
|
|
|
|
// SHA256
|
2015-03-16 10:27:38 +00:00
|
|
|
string(common.LeftPadBytes([]byte{2}, 20)): &PrecompiledAccount{func(l int) *big.Int {
|
2015-03-02 15:32:02 +00:00
|
|
|
n := big.NewInt(int64(l+31) / 32)
|
2015-04-02 03:17:15 +00:00
|
|
|
n.Mul(n, params.Sha256WordGas)
|
|
|
|
return n.Add(n, params.Sha256Gas)
|
2015-01-13 09:30:52 +00:00
|
|
|
}, sha256Func},
|
|
|
|
|
|
|
|
// RIPEMD160
|
2015-03-16 10:27:38 +00:00
|
|
|
string(common.LeftPadBytes([]byte{3}, 20)): &PrecompiledAccount{func(l int) *big.Int {
|
2015-03-02 15:32:02 +00:00
|
|
|
n := big.NewInt(int64(l+31) / 32)
|
2015-04-02 03:17:15 +00:00
|
|
|
n.Mul(n, params.Ripemd160WordGas)
|
|
|
|
return n.Add(n, params.Ripemd160Gas)
|
2015-01-13 09:30:52 +00:00
|
|
|
}, ripemd160Func},
|
|
|
|
|
2015-03-16 10:27:38 +00:00
|
|
|
string(common.LeftPadBytes([]byte{4}, 20)): &PrecompiledAccount{func(l int) *big.Int {
|
2015-03-02 15:32:02 +00:00
|
|
|
n := big.NewInt(int64(l+31) / 32)
|
2015-04-02 03:17:15 +00:00
|
|
|
n.Mul(n, params.IdentityWordGas)
|
2015-01-13 09:30:52 +00:00
|
|
|
|
2015-04-02 03:17:15 +00:00
|
|
|
return n.Add(n, params.IdentityGas)
|
2015-01-13 09:30:52 +00:00
|
|
|
}, memCpy},
|
|
|
|
}
|
2014-10-08 10:01:36 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
func sha256Func(in []byte) []byte {
|
2014-10-31 11:37:43 +00:00
|
|
|
return crypto.Sha256(in)
|
2014-10-08 10:01:36 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
func ripemd160Func(in []byte) []byte {
|
2015-03-16 10:27:38 +00:00
|
|
|
return common.LeftPadBytes(crypto.Ripemd160(in), 32)
|
2014-10-08 10:01:36 +00:00
|
|
|
}
|
|
|
|
|
2015-03-29 13:02:49 +00:00
|
|
|
const ecRecoverInputLength = 128
|
2014-10-08 10:01:36 +00:00
|
|
|
|
2015-03-19 03:56:06 +00:00
|
|
|
func ecrecoverFunc(in []byte) []byte {
|
2015-06-09 14:03:05 +00:00
|
|
|
in = common.RightPadBytes(in, 128)
|
2015-06-09 13:41:15 +00:00
|
|
|
// "in" is (hash, v, r, s), each 32 bytes
|
|
|
|
// but for ecrecover we want (r, s, v)
|
2015-03-29 13:02:49 +00:00
|
|
|
|
2015-06-09 13:41:15 +00:00
|
|
|
r := common.BytesToBig(in[64:96])
|
|
|
|
s := common.BytesToBig(in[96:128])
|
2015-03-29 13:02:49 +00:00
|
|
|
// Treat V as a 256bit integer
|
2015-06-09 13:41:15 +00:00
|
|
|
vbig := common.Bytes2Big(in[32:64])
|
|
|
|
v := byte(vbig.Uint64())
|
|
|
|
|
|
|
|
if !crypto.ValidateSignatureValues(v, r, s) {
|
|
|
|
glog.V(logger.Error).Infof("EC RECOVER FAIL: v, r or s value invalid")
|
2015-03-19 03:56:06 +00:00
|
|
|
return nil
|
|
|
|
}
|
2015-03-29 13:02:49 +00:00
|
|
|
|
2015-06-09 13:41:15 +00:00
|
|
|
// v needs to be at the end and normalized for libsecp256k1
|
|
|
|
vbignormal := new(big.Int).Sub(vbig, big.NewInt(27))
|
|
|
|
vnormal := byte(vbignormal.Uint64())
|
|
|
|
rsv := append(in[64:128], vnormal)
|
2015-04-05 17:31:18 +00:00
|
|
|
pubKey, err := crypto.Ecrecover(in[:32], rsv)
|
2015-03-29 13:02:49 +00:00
|
|
|
// make sure the public key is a valid one
|
2015-04-05 17:31:18 +00:00
|
|
|
if err != nil {
|
2015-04-07 10:48:13 +00:00
|
|
|
glog.V(logger.Error).Infof("EC RECOVER FAIL: ", err)
|
2015-03-19 03:56:06 +00:00
|
|
|
return nil
|
|
|
|
}
|
2015-03-29 13:02:49 +00:00
|
|
|
|
2015-03-19 03:56:06 +00:00
|
|
|
// the first byte of pubkey is bitcoin heritage
|
|
|
|
return common.LeftPadBytes(crypto.Sha3(pubKey[1:])[12:], 32)
|
2014-10-08 10:01:36 +00:00
|
|
|
}
|
2015-01-05 16:37:30 +00:00
|
|
|
|
|
|
|
func memCpy(in []byte) []byte {
|
|
|
|
return in
|
|
|
|
}
|