New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
Socket
Book a DemoSign in
Socket

@node-fi/react-native-bip39

Package Overview
Dependencies
Maintainers
1
Versions
8
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@node-fi/react-native-bip39

ReactNative-ready Bitcoin BIP39: Mnemonic code for generating deterministic keys

latest
Source
npmnpm
Version
2.2.5
Version published
Weekly downloads
24
200%
Maintainers
1
Weekly downloads
 
Created
Source

ReactNative BIP39 (react-native-bip39)

js-standard-style

ReactNative-ready fork of the original Javascript implementation of Bitcoin BIP39: Mnemonic code for generating deterministic keys

Features

  • Native generation of random bytes using react-native-randombytes
  • Partial implementation of node's crypto for react-native, using react-native-crypto

Reminder for developers

Please remember to allow recovery from mnemonic phrases that have invalid checksums (or that you don't have the wordlist)

When a checksum is invalid, warn the user that the phrase is not something generated by your app, and ask if they would like to use it anyway. This way, your app only needs to hold the wordlists for your supported languages, but you can recover phrases made by other apps in other languages.

However, there should be other checks in place, such as checking to make sure the user is inputting 12 words or more separated by a space. ie. phrase.trim().split(/\s+/g).length >= 12

Examples


import bip39 from 'react-native-bip39'

// Generate a random mnemonic (uses react-native-randombytes under the hood), defaults to 128-bits of entropy

// NOTE: react-native-bip39's generateMnemonic in async, while original bip39's is sync
// this is due to react-native-randombytes which is forced to return natively generated 
// bytes with a callback
static generateMnemonic = async () => {
  try {
    return await bip39.generateMnemonic(256) // default to 128
  } catch(e) {
    return false
  }
}
// => 'reveal man culture nominee tag abuse keen behave refuse warfare crisp thunder valve knock unique try fold energy torch news thought access hawk table'

bip39.mnemonicToSeedHex('basket actual')
// => '5cf2d4a8b0355e90295bdfc565a022a409af063d5365bb57bf74d9528f494bfa4400f53d8349b80fdae44082d7f9541e1dba2b003bcfec9d0d53781ca676651f'

bip39.mnemonicToSeed('basket actual')
// => <Buffer 5c f2 d4 a8 b0 35 5e 90 29 5b df c5 65 a0 22 a4 09 af 06 3d 53 65 bb 57 bf 74 d9 52 8f 49 4b fa 44 00 f5 3d 83 49 b8 0f da e4 40 82 d7 f9 54 1e 1d ba 2b ...>

bip39.validateMnemonic(myMnemonic)
// => true

bip39.validateMnemonic('basket actual')
// => false
import bip39 from 'react-native-bip39'

// defaults to BIP39 English word list
// uses HEX strings for entropy
const mnemonic = bip39.entropyToMnemonic('133755ff')
// => basket rival lemon

// reversible
bip39.mnemonicToEntropy(mnemonic)
// => '133755ff'

FAQs

Package last updated on 21 Jan 2023

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts