Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

cardano-crypto.js

Package Overview
Dependencies
Maintainers
3
Versions
49
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

cardano-crypto.js

input-output-hk/cardano-crypto compiled to pure javascript using Emscripten

  • 5.3.6-rc.3
  • Source
  • npm
  • Socket score

Version published
Weekly downloads
881
decreased by-19.76%
Maintainers
3
Weekly downloads
 
Created
Source

cardano-crypto.js

  • input-output-hk/cardano-crypto
  • haskell-crypto/cryptonite
  • grigorig/chachapoly

Compiled to pure javascript using Emscripten. This is a collection of cryptolibraries and functions useful for working with Cardano cryptocurrency, eliminating the need for many dependencies.

Examples

Signing

var lib = require('cardano-crypto.js')

var mnemonic = 'logic easily waste eager injury oval sentence wine bomb embrace gossip supreme'
var walletSecret = await lib.mnemonicToRootKeypair(mnemonic, 1)
var msg = new Buffer('hello there')
var sig = lib.sign(msg, walletSecret)

Deriving child keys (hardened derivation, you can choose either derivation scheme 1 or 2)

var lib = require('cardano-crypto.js')

var mnemonic = 'logic easily waste eager injury oval sentence wine bomb embrace gossip supreme'
var parentWalletSecret = lib.mnemonicToRootKeypair(mnemonic, 1)
var childWalletSecret = lib.derivePrivate(parentWalletSecret, 0x80000001, 1)

Deriving child public keys (nonhardened derivation, you can choose either derivation scheme 1 or 2)

var lib = require('cardano-crypto.js')

var mnemonic = 'logic easily waste eager injury oval sentence wine bomb embrace gossip supreme'
var parentWalletSecret = lib.mnemonicToRootKeypair(mnemonic, 1)
var parentWalletPublicKey = parentWalletSecret.slice(64, 128)
var childWalletSecret = lib.derivePublic(parentWalletPublicKey, 1, 1)

Available Functions

Signing/Verification

  • Buffer sign(Buffer msg, Buffer walletSecret)
  • Bool verify(Buffer msg, Buffer publicKey, Buffer sig)

Key derivation

  • async Buffer mnemonicToRootKeypair(String mnemonic, int derivationScheme)
  • Buffer derivePrivate(Buffer parentKey, int index, int derivationScheme)
  • Buffer derivePublic(Buffer parentExtPubKey, int index, int derivationScheme)
  • Buffer toPublic(Buffer privateKey)

Address encoding/decoding/validation

  • Buffer packBootstrapAddress(Array[int] derivationPath, Buffer xpub, Buffer hdPassphrase, int derivationScheme)
  • Buffer packBaseAddress(Buffer spendingPubKey, Buffer stakingPubKey, int networkId, Bool isStakeHash = false)
  • Buffer packPointerAddress(Buffer pubKey, Object pointer, int networkId)
  • Buffer packEnterpriseAddress(Buffer spendingPubKey, int networkId)
  • Buffer packRewardsAccountAddress(Buffer stakingPubkey, int networkId, Bool isStakeHash = false)
  • Object getAddressType(Buffer address)
  • Object getShelleyAddressInfo(Buffer address)
  • Object AddressTypes
  • string unpackBootstrapAddress(string address, Buffer hdPassphrase)
  • Bool isValidBootstrapAddress(string address)
  • Bool isValidShelleyAddress(string address)
  • Buffer xpubToHdPassphrase(Buffer xpub)

Cardano crypto primitives

  • Buffer blake2b(Buffer input, outputLen)
  • Buffer cardanoMemoryCombine(Buffer input, String password)
  • string bech32.encode(string prefix, Buffer data)
  • Object bech32.decode(string address)
  • [base58](https://www.npmjs.com/package/base58)
  • [scrypt](https://www.npmjs.com/package/scrypt-async)

Daedalus paper wallets (27-word mnemonics)

  • Buffer decodePaperWalletMnemonic(string paperWalletMnemonic)

We encourage you to take a look at test/index.js to see how the functions above should be used.

Development

  • Install emscripten, recommended version is 1.38.8
  • run npm install
  • run npm run build

Emscripten build example

git clone https://github.com/emscripten-core/emsdk.git
cd emsdk
./emsdk install 1.39.19
./emsdk activate 1.39.19
source ./emsdk_env.sh
cd ../
git clone https://github.com/vacuumlabs/cardano-crypto.js
cd cardano-crypto.js
npm install
npm run build
shasum lib.js # should match shasum of published version of lib.js

known issues

When trying to compile the library with emscripten 1.38.41, the cardanoMemoryCombine function slows down significantly. With the 1.38.8 version it runs significantly faster.

tests

  • run npm run test

Removing wordlists from webpack/browserify

Browserify/Webpack bundles can get very large if you include all the wordlists, so you can now exclude wordlists to make your bundle lighter.

For example, if we want to exclude all wordlists besides chinese_simplified, you could build using the browserify command below.

$ browserify -r bip39 -s bip39 \
 --exclude=./wordlists/english.json \
 --exclude=./wordlists/japanese.json \
 --exclude=./wordlists/spanish.json \
 --exclude=./wordlists/italian.json \
 --exclude=./wordlists/french.json \
 --exclude=./wordlists/korean.json \
 --exclude=./wordlists/chinese_traditional.json \
  > bip39.browser.js

This will create a bundle that only contains the chinese_simplified wordlist, and it will be the default wordlist for all calls without explicit wordlists.

You can also do this in Webpack using the IgnorePlugin. Here is an example of excluding all non-English wordlists

...
plugins: [
  new webpack.IgnorePlugin(/^\.\/wordlists\/(?!english)/, /bip39\/src$/),
],
...

Keywords

FAQs

Package last updated on 01 Sep 2020

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc