- (3.2.1)
+ (3.2.3)
527B 5C82 B1F6 B2DB 72A0
ECBF 8749 7B91 6397 4F5A
@@ -10448,7 +10475,10 @@ ninja.wallets.vanitywallet = {
keyToECKeyWithBrain: function (key) {
var btcKey = new Bitcoin.ECKey(key);
- if (btcKey.priv == null) {
+ if (btcKey.error != null) {
+ alert(translator.get("detailalertnotvalidprivatekey") + "\n" + btcKey.error);
+ }
+ else if (btcKey.priv == null) {
// enforce a minimum passphrase length
if (key.length >= wallets.brainwallet.minPassphraseLength) {
// Deterministic Wallet confirm box to ask if user wants to SHA256 the input to get a private key
@@ -11630,7 +11660,64 @@ ninja.wallets.splitwallet = {
return false;
}
return true;
- }
+ },
+
+ // test checksum exceptions
+ testUncompressedWifShouldFailChecksum: function () {
+ // original key: 5KjQAHniFiy18SU7eenyJ9EPYUkjrbiBPfDqw987QjT5vehVQZV K->k
+ var key = "5kjQAHniFiy18SU7eenyJ9EPYUkjrbiBPfDqw987QjT5vehVQZV";
+ var btcKey = new Bitcoin.ECKey(key);
+ if (btcKey.error.toString().indexOf("failed") == -1) { //Checksum validation failed!
+ return false;
+ }
+ return true;
+
+ },
+ testCompressedWifShouldFailChecksum: function () {
+ // original key: L5g9E16m5zEBZqQgMBouUfL6VwW49vCks1hgyxrPHkN8jNNdWTTk g->G
+ var key = "L5G9E16m5zEBZqQgMBouUfL6VwW49vCks1hgyxrPHkN8jNNdWTTk";
+ var btcKey = new Bitcoin.ECKey(key);
+ if (btcKey.error.toString().indexOf("failed") == -1) { //Checksum validation failed!
+ return false;
+ }
+ return true;
+
+ },
+ // test range of valid private key values for the secp256k1 curve, when specified in hex is
+ // [0x1, 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364140]
+ testBigIntegerZeroShouldSetError: function () {
+ var key = "0000000000000000000000000000000000000000000000000000000000000000";
+ var btcKey = new Bitcoin.ECKey(key);
+ if (btcKey.error == null) {
+ return false;
+ }
+ return true;
+
+ },
+ testBigIntegerOutOfCurveRangeShouldSetError1: function () {
+ var key = "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141";
+ var btcKey = new Bitcoin.ECKey(key);
+ if (btcKey.error == null) {
+ return false;
+ }
+ return true;
+ },
+ testBigIntegerOutOfCurveRangeShouldSetError2: function () {
+ var key = "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364142";
+ var btcKey = new Bitcoin.ECKey(key);
+ if (btcKey.error == null) {
+ return false;
+ }
+ return true;
+ },
+ testBigIntegerOutOfCurveRangeShouldSetError3: function () {
+ var key = "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF";
+ var btcKey = new Bitcoin.ECKey(key);
+ if (btcKey.error == null) {
+ return false;
+ }
+ return true;
+ }
},
asynchronousTests: {
diff --git a/bitaddress.org.html.sig b/bitaddress.org.html.sig
index d895ee3..ad49c02 100644
--- a/bitaddress.org.html.sig
+++ b/bitaddress.org.html.sig
@@ -1,11 +1,11 @@
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
-iQEcBAABAgAGBQJWx8DzAAoJEIdJe5Fjl09awNYIAIsrdkZJylt01F15y1jy5SUB
-elatgdvoWuvBtj1toTBknvWs3SrLbAi4OkzIZbZnu/QSf+6BejeGlus1AKJwbQFr
-srVVdw3x3I9T+mY3GLdrbrAhivulBQhGk+LSyJhp9/tVj6r924kbceK+QtV6GVLs
-6UXzjejbwoTF51av0n5isuF7tUIUC2cfpgvznSGVFGlUbseByBLIut+X0VgVwa7V
-zIjnkgI12tiAAWquZtaZ5H5SKcVOQ1+7MqcZ3m9fH7E3+st+xe6JczHIytqu0hVI
-IXs5TpzzdeXaxEuJPGa7w43M5e6CHKviDT8EjTnc/JBJjBLHymrTAa/jUkQXYaU=
-=y/7l
+iQEcBAABAgAGBQJYOz47AAoJEIdJe5Fjl09ateQIANi2qaAdLvTsslWSUtLH7fn5
+1Ywej5Dm+qX/TuzIoQ/eAIAKtrJe3KiLioRONDbMqDMovuseQUDB6FBYOlhOSHUd
+636Lwjs/aZW+weEgLnCi54JUj4/T/aaYZrQfzAvSFbj6G3mrc38xtB1anKJ6JmX0
+W482dWJR0+Ew0qB3419DKUtHUf8DjTlPT093H8HCb+DvCeWTxansnGXzAswxEJus
+yio7wUnGNaB9/rcVncU1dUHYsnb0hkstIwmlIIKcgPV/siDWCPXcigTI0IFSRoOW
+SrA+W9E5hWWxSYzzrzbW3iVJksT97ULXQOhzr3hy0ulUzTfqLZJmgNslfdfM3IU=
+=sgFZ
-----END PGP SIGNATURE-----
diff --git a/package.json b/package.json
index b834f0e..afa5bc8 100644
--- a/package.json
+++ b/package.json
@@ -1,8 +1,8 @@
{
"name": "bitaddress.org",
- "version": "3.2.1",
- "sha1sum": "",
- "sha256sum": "",
+ "version": "3.2.3",
+ "sha1sum": "b8f7d12ddfef6561603f24a20478fad56abaca49",
+ "sha256sum": "c9a0bb3ed50aa75a5ae9c606d81e3fd41a4ff686ad38ad5379e2402f481e79a4",
"description": "Open Source JavaScript Client-Side Bitcoin Wallet Generator",
"main": "Gruntfile.js",
"dependencies": {
@@ -27,7 +27,7 @@
],
"author": "pointbiz",
"license": "MIT",
- "readmeFilename": "README",
+ "readmeFilename": "README.md",
"gitHead": "d77aaf687fca1f0e28388b0a8de5eb3d89d4fad3",
"bugs": {
"url": "https://github.com/pointbiz/bitaddress.org/issues"
diff --git a/src/bitcoinjs-lib.eckey.js b/src/bitcoinjs-lib.eckey.js
index e1ab37d..8517e53 100644
--- a/src/bitcoinjs-lib.eckey.js
+++ b/src/bitcoinjs-lib.eckey.js
@@ -90,19 +90,23 @@ Bitcoin.ECKey = (function () {
this.priv = BigInteger.fromByteArrayUnsigned(input);
} else if ("string" == typeof input) {
var bytes = null;
- if (ECKey.isWalletImportFormat(input)) {
- bytes = ECKey.decodeWalletImportFormat(input);
- } else if (ECKey.isCompressedWalletImportFormat(input)) {
- bytes = ECKey.decodeCompressedWalletImportFormat(input);
- this.compressed = true;
- } else if (ECKey.isMiniFormat(input)) {
- bytes = Crypto.SHA256(input, { asBytes: true });
- } else if (ECKey.isHexFormat(input)) {
- bytes = Crypto.util.hexToBytes(input);
- } else if (ECKey.isBase64Format(input)) {
- bytes = Crypto.util.base64ToBytes(input);
+ try{
+ if (ECKey.isWalletImportFormat(input)) {
+ bytes = ECKey.decodeWalletImportFormat(input);
+ } else if (ECKey.isCompressedWalletImportFormat(input)) {
+ bytes = ECKey.decodeCompressedWalletImportFormat(input);
+ this.compressed = true;
+ } else if (ECKey.isMiniFormat(input)) {
+ bytes = Crypto.SHA256(input, { asBytes: true });
+ } else if (ECKey.isHexFormat(input)) {
+ bytes = Crypto.util.hexToBytes(input);
+ } else if (ECKey.isBase64Format(input)) {
+ bytes = Crypto.util.base64ToBytes(input);
+ }
+ } catch (exc1) {
+ this.setError(exc1);
}
-
+
if (ECKey.isBase6Format(input)) {
this.priv = new BigInteger(input, 6);
} else if (bytes == null || bytes.length != 32) {
@@ -114,7 +118,21 @@ Bitcoin.ECKey = (function () {
}
this.compressed = (this.compressed == undefined) ? !!ECKey.compressByDefault : this.compressed;
- KeyPool.push(this);
+ try {
+ // check not zero
+ if (this.priv != null && BigInteger.ZERO.compareTo(this.priv) == 0) this.setError("Error: BigInteger equal to zero.");
+ // valid range [0x1, 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364140])
+ var hexKeyRangeLimit = "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364140";
+ var rangeLimitBytes = Crypto.util.hexToBytes(hexKeyRangeLimit);
+ var limitBigInt = BigInteger.fromByteArrayUnsigned(rangeLimitBytes);
+ if (this.priv != null && limitBigInt.compareTo(this.priv) < 0) this.setError("Error: BigInteger outside of curve range.")
+
+ if (this.priv != null) {
+ KeyPool.push(this);
+ }
+ } catch (exc2) {
+ this.setError(exc2);
+ }
};
ECKey.privateKeyPrefix = 0x80; // mainnet 0x80 testnet 0xEF
@@ -124,6 +142,15 @@ Bitcoin.ECKey = (function () {
*/
ECKey.compressByDefault = false;
+ /**
+ * Set whether the public key should be returned compressed or not.
+ */
+ ECKey.prototype.setError = function (err) {
+ this.error = err;
+ this.priv = null;
+ return this;
+ };
+
/**
* Set whether the public key should be returned compressed or not.
*/
diff --git a/src/ninja.detailwallet.js b/src/ninja.detailwallet.js
index bfe86e6..35eab17 100644
--- a/src/ninja.detailwallet.js
+++ b/src/ninja.detailwallet.js
@@ -50,7 +50,10 @@
keyToECKeyWithBrain: function (key) {
var btcKey = new Bitcoin.ECKey(key);
- if (btcKey.priv == null) {
+ if (btcKey.error != null) {
+ alert(translator.get("detailalertnotvalidprivatekey") + "\n" + btcKey.error);
+ }
+ else if (btcKey.priv == null) {
// enforce a minimum passphrase length
if (key.length >= wallets.brainwallet.minPassphraseLength) {
// Deterministic Wallet confirm box to ask if user wants to SHA256 the input to get a private key
diff --git a/src/ninja.unittests.js b/src/ninja.unittests.js
index b4cb4c4..b45b39b 100644
--- a/src/ninja.unittests.js
+++ b/src/ninja.unittests.js
@@ -837,7 +837,64 @@
return false;
}
return true;
- }
+ },
+
+ // test checksum exceptions
+ testUncompressedWifShouldFailChecksum: function () {
+ // original key: 5KjQAHniFiy18SU7eenyJ9EPYUkjrbiBPfDqw987QjT5vehVQZV K->k
+ var key = "5kjQAHniFiy18SU7eenyJ9EPYUkjrbiBPfDqw987QjT5vehVQZV";
+ var btcKey = new Bitcoin.ECKey(key);
+ if (btcKey.error.toString().indexOf("failed") == -1) { //Checksum validation failed!
+ return false;
+ }
+ return true;
+
+ },
+ testCompressedWifShouldFailChecksum: function () {
+ // original key: L5g9E16m5zEBZqQgMBouUfL6VwW49vCks1hgyxrPHkN8jNNdWTTk g->G
+ var key = "L5G9E16m5zEBZqQgMBouUfL6VwW49vCks1hgyxrPHkN8jNNdWTTk";
+ var btcKey = new Bitcoin.ECKey(key);
+ if (btcKey.error.toString().indexOf("failed") == -1) { //Checksum validation failed!
+ return false;
+ }
+ return true;
+
+ },
+ // test range of valid private key values for the secp256k1 curve, when specified in hex is
+ // [0x1, 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364140]
+ testBigIntegerZeroShouldSetError: function () {
+ var key = "0000000000000000000000000000000000000000000000000000000000000000";
+ var btcKey = new Bitcoin.ECKey(key);
+ if (btcKey.error == null) {
+ return false;
+ }
+ return true;
+
+ },
+ testBigIntegerOutOfCurveRangeShouldSetError1: function () {
+ var key = "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141";
+ var btcKey = new Bitcoin.ECKey(key);
+ if (btcKey.error == null) {
+ return false;
+ }
+ return true;
+ },
+ testBigIntegerOutOfCurveRangeShouldSetError2: function () {
+ var key = "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364142";
+ var btcKey = new Bitcoin.ECKey(key);
+ if (btcKey.error == null) {
+ return false;
+ }
+ return true;
+ },
+ testBigIntegerOutOfCurveRangeShouldSetError3: function () {
+ var key = "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF";
+ var btcKey = new Bitcoin.ECKey(key);
+ if (btcKey.error == null) {
+ return false;
+ }
+ return true;
+ }
},
asynchronousTests: {