258 lines
9.3 KiB
JavaScript
258 lines
9.3 KiB
JavaScript
import { assertUint8 } from './assert.js'
|
|
import { nativeEncoder, E_STRING } from './fallback/_utils.js'
|
|
import { decodeAscii, encodeAscii, encodeLatin1 } from './fallback/latin1.js'
|
|
|
|
const alphabet = [...'qpzry9x8gf2tvdw0s3jn54khce6mua7l']
|
|
const BECH32 = 1
|
|
const BECH32M = 0x2b_c8_30_a3
|
|
|
|
const E_SIZE = 'Input length is out of range'
|
|
const E_PREFIX = 'Missing or invalid prefix'
|
|
const E_MIXED = 'Mixed-case string'
|
|
const E_PADDING = 'Padding is invalid'
|
|
const E_CHECKSUM = 'Invalid checksum'
|
|
const E_CHARACTER = 'Non-bech32 character'
|
|
|
|
// nativeEncoder path uses encodeAscii which asserts ascii, otherwise we have 0-255 bytes from encodeLatin1
|
|
const c2x = new Int8Array(nativeEncoder ? 128 : 256).fill(-1)
|
|
const x2c = new Uint8Array(32)
|
|
for (let i = 0; i < alphabet.length; i++) {
|
|
const c = alphabet[i].charCodeAt(0)
|
|
c2x[c] = i
|
|
x2c[i] = c
|
|
}
|
|
|
|
// checksum size is 30 bits, 0x3f_ff_ff_ff
|
|
// The good thing about the checksum is that it's linear over every bit
|
|
const poly0 = new Uint32Array(32) // just precache all possible ones, it's only 1 KiB
|
|
const p = (x) => ((x & 0x1_ff_ff_ff) << 5) ^ poly0[x >> 25]
|
|
for (let i = 0; i < 32; i++) {
|
|
poly0[i] =
|
|
(i & 0b0_0001 ? 0x3b_6a_57_b2 : 0) ^
|
|
(i & 0b0_0010 ? 0x26_50_8e_6d : 0) ^
|
|
(i & 0b0_0100 ? 0x1e_a1_19_fa : 0) ^
|
|
(i & 0b0_1000 ? 0x3d_42_33_dd : 0) ^
|
|
(i & 0b1_0000 ? 0x2a_14_62_b3 : 0)
|
|
}
|
|
|
|
// 7 KiB more for faster p6/p8
|
|
const poly1 = new Uint32Array(32)
|
|
const poly2 = new Uint32Array(32)
|
|
const poly3 = new Uint32Array(32)
|
|
const poly4 = new Uint32Array(32)
|
|
const poly5 = new Uint32Array(32)
|
|
const poly6 = new Uint32Array(32)
|
|
const poly7 = new Uint32Array(32)
|
|
for (let i = 0; i < 32; i++) {
|
|
// poly0[i] === p(p(p(p(p(p(i))))))
|
|
poly1[i] = p(poly0[i]) // aka p(p(p(p(p(p(i << 5))))))
|
|
poly2[i] = p(poly1[i]) // aka p(p(p(p(p(p(i << 10))))))
|
|
poly3[i] = p(poly2[i]) // aka p(p(p(p(p(p(i << 15))))))
|
|
poly4[i] = p(poly3[i]) // aka p(p(p(p(p(p(i << 20))))))
|
|
poly5[i] = p(poly4[i]) // aka p(p(p(p(p(p(i << 25))))))
|
|
poly6[i] = p(poly5[i])
|
|
poly7[i] = p(poly6[i])
|
|
}
|
|
|
|
function p6(x) {
|
|
// Same as: return p(p(p(p(p(p(x))))))
|
|
const x0 = x & 0x1f
|
|
const x1 = (x >> 5) & 0x1f
|
|
const x2 = (x >> 10) & 0x1f
|
|
const x3 = (x >> 15) & 0x1f
|
|
const x4 = (x >> 20) & 0x1f
|
|
const x5 = (x >> 25) & 0x1f
|
|
return poly0[x0] ^ poly1[x1] ^ poly2[x2] ^ poly3[x3] ^ poly4[x4] ^ poly5[x5]
|
|
}
|
|
|
|
function p8(x) {
|
|
// Same as: return p(p(p(p(p(p(p(p(x))))))))
|
|
const x0 = x & 0x1f
|
|
const x1 = (x >> 5) & 0x1f
|
|
const x2 = (x >> 10) & 0x1f
|
|
const x3 = (x >> 15) & 0x1f
|
|
const x4 = (x >> 20) & 0x1f
|
|
const x5 = (x >> 25) & 0x1f
|
|
return poly2[x0] ^ poly3[x1] ^ poly4[x2] ^ poly5[x3] ^ poly6[x4] ^ poly7[x5]
|
|
}
|
|
|
|
// p(p(p(p(p(p(chk) ^ x0) ^ x1) ^ x2) ^ x3) ^ x4) ^ x5 === p6(chk) ^ merge(x0, x1, x2, x3, x4, x5)
|
|
const merge = (a, b, c, d, e, f) => f ^ (e << 5) ^ (d << 10) ^ (c << 15) ^ (b << 20) ^ (a << 25)
|
|
|
|
const prefixCache = new Map() // Cache 10 of them
|
|
|
|
function pPrefix(prefix) {
|
|
if (prefix === 'bc') return 0x2_31_80_43 // perf
|
|
const cached = prefixCache.get(prefix)
|
|
if (cached !== undefined) return cached
|
|
|
|
// bech32_hrp_expand(s): [ord(x) >> 5 for x in s] + [0] + [ord(x) & 31 for x in s]
|
|
// We can do this in a single scan due to linearity, but it's not very beneficial
|
|
let chk = 1 // it starts with one (see def bech32_polymod in BIP_0173)
|
|
const length = prefix.length
|
|
for (let i = 0; i < length; i++) {
|
|
const c = prefix.charCodeAt(i)
|
|
if (c < 33 || c > 126) throw new Error(E_PREFIX) // each character having a value in the range [33-126]
|
|
chk = p(chk) ^ (c >> 5)
|
|
}
|
|
|
|
chk = p(chk) // <= for + [0]
|
|
for (let i = 0; i < length; i++) {
|
|
const c = prefix.charCodeAt(i)
|
|
chk = p(chk) ^ (c & 0x1f)
|
|
}
|
|
|
|
if (prefixCache.size < 10) prefixCache.set(prefix, chk)
|
|
return chk
|
|
}
|
|
|
|
function toBech32enc(prefix, bytes, limit, encoding) {
|
|
if (typeof prefix !== 'string' || !prefix) throw new TypeError(E_PREFIX)
|
|
if (typeof limit !== 'number') throw new TypeError(E_SIZE)
|
|
assertUint8(bytes)
|
|
const bytesLength = bytes.length
|
|
const wordsLength = Math.ceil((bytesLength * 8) / 5)
|
|
if (!(prefix.length + 7 + wordsLength <= limit)) throw new TypeError(E_SIZE)
|
|
prefix = prefix.toLowerCase()
|
|
const out = new Uint8Array(wordsLength + 6)
|
|
|
|
let chk = pPrefix(prefix)
|
|
let i = 0, j = 0 // prettier-ignore
|
|
|
|
// This loop is just an optimization of the next one
|
|
for (const length4 = bytesLength - 4; i < length4; i += 5, j += 8) {
|
|
const b0 = bytes[i], b1 = bytes[i + 1], b2 = bytes[i + 2], b3 = bytes[i + 3], b4 = bytes[i + 4] // prettier-ignore
|
|
const x0 = b0 >> 3
|
|
const x1 = ((b0 << 2) & 0x1f) | (b1 >> 6)
|
|
const x2 = (b1 >> 1) & 0x1f
|
|
const x3 = ((b1 << 4) & 0x1f) | (b2 >> 4)
|
|
const x4 = ((b2 << 1) & 0x1f) | (b3 >> 7)
|
|
const x5 = (b3 >> 2) & 0x1f
|
|
const x6 = ((b3 << 3) & 0x1f) | (b4 >> 5)
|
|
const x7 = b4 & 0x1f
|
|
chk = merge(x2, x3, x4, x5, x6, x7) ^ poly0[x1] ^ poly1[x0] ^ p8(chk)
|
|
out[j] = x2c[x0]
|
|
out[j + 1] = x2c[x1]
|
|
out[j + 2] = x2c[x2]
|
|
out[j + 3] = x2c[x3]
|
|
out[j + 4] = x2c[x4]
|
|
out[j + 5] = x2c[x5]
|
|
out[j + 6] = x2c[x6]
|
|
out[j + 7] = x2c[x7]
|
|
}
|
|
|
|
let value = 0, bits = 0 // prettier-ignore
|
|
for (; i < bytesLength; i++) {
|
|
value = ((value & 0xf) << 8) | bytes[i]
|
|
bits += 3
|
|
const x = (value >> bits) & 0x1f
|
|
chk = p(chk) ^ x
|
|
out[j++] = x2c[x]
|
|
if (bits >= 5) {
|
|
bits -= 5
|
|
const x = (value >> bits) & 0x1f
|
|
chk = p(chk) ^ x
|
|
out[j++] = x2c[x]
|
|
}
|
|
}
|
|
|
|
if (bits > 0) {
|
|
const x = (value << (5 - bits)) & 0x1f
|
|
chk = p(chk) ^ x
|
|
out[j++] = x2c[x]
|
|
}
|
|
|
|
chk = encoding ^ p6(chk)
|
|
out[j++] = x2c[(chk >> 25) & 0x1f]
|
|
out[j++] = x2c[(chk >> 20) & 0x1f]
|
|
out[j++] = x2c[(chk >> 15) & 0x1f]
|
|
out[j++] = x2c[(chk >> 10) & 0x1f]
|
|
out[j++] = x2c[(chk >> 5) & 0x1f]
|
|
out[j++] = x2c[(chk >> 0) & 0x1f]
|
|
|
|
return prefix + '1' + decodeAscii(out) // suboptimal in barebones, but actually ok in Hermes for not to care atm
|
|
}
|
|
|
|
function assertDecodeArgs(str, limit) {
|
|
if (typeof str !== 'string') throw new TypeError(E_STRING)
|
|
if (typeof limit !== 'number' || str.length < 8 || !(str.length <= limit)) throw new Error(E_SIZE)
|
|
}
|
|
|
|
// this is instant on 8-bit strings
|
|
const NON_LATIN = /[^\x00-\xFF]/ // eslint-disable-line no-control-regex
|
|
|
|
function fromBech32enc(str, limit, encoding) {
|
|
assertDecodeArgs(str, limit)
|
|
const lower = str.toLowerCase()
|
|
if (str !== lower) {
|
|
if (str !== str.toUpperCase()) throw new Error(E_MIXED)
|
|
str = lower
|
|
}
|
|
|
|
const split = str.lastIndexOf('1')
|
|
if (split <= 0) throw new Error(E_PREFIX)
|
|
const prefix = str.slice(0, split)
|
|
const charsLength = str.length - split - 1
|
|
const wordsLength = charsLength - 6
|
|
if (wordsLength < 0) throw new Error(E_SIZE)
|
|
const bytesLength = (wordsLength * 5) >> 3
|
|
const slice = str.slice(split + 1)
|
|
if (!nativeEncoder && NON_LATIN.test(slice)) throw new SyntaxError(E_CHARACTER) // otherwise can't use encodeLatin1
|
|
const c = nativeEncoder ? encodeAscii(slice, E_CHARACTER) : encodeLatin1(slice) // suboptimal, but only affects non-Hermes barebones
|
|
const bytes = new Uint8Array(bytesLength)
|
|
|
|
let chk = pPrefix(prefix)
|
|
let i = 0, j = 0 // prettier-ignore
|
|
|
|
// This loop is just an optimization of the next one
|
|
for (const length7 = wordsLength - 7; i < length7; i += 8, j += 5) {
|
|
const c0 = c[i], c1 = c[i + 1], c2 = c[i + 2], c3 = c[i + 3], c4 = c[i + 4], c5 = c[i + 5], c6 = c[i + 6], c7 = c[i + 7] // prettier-ignore
|
|
const x0 = c2x[c0], x1 = c2x[c1], x2 = c2x[c2], x3 = c2x[c3], x4 = c2x[c4], x5 = c2x[c5], x6 = c2x[c6], x7 = c2x[c7] // prettier-ignore
|
|
if (x0 < 0 || x1 < 0 || x2 < 0 || x3 < 0 || x4 < 0 || x5 < 0 || x6 < 0 || x7 < 0) throw new SyntaxError(E_CHARACTER) // prettier-ignore
|
|
chk = merge(x2, x3, x4, x5, x6, x7) ^ poly0[x1] ^ poly1[x0] ^ p8(chk)
|
|
bytes[j] = (x0 << 3) | (x1 >> 2)
|
|
bytes[j + 1] = (((x1 << 6) | (x2 << 1)) & 0xff) | (x3 >> 4)
|
|
bytes[j + 2] = ((x3 << 4) & 0xff) | (x4 >> 1)
|
|
bytes[j + 3] = ((((x4 << 5) | x5) << 2) & 0xff) | (x6 >> 3)
|
|
bytes[j + 4] = ((x6 << 5) & 0xff) | x7
|
|
}
|
|
|
|
let value = 0, bits = 0 // prettier-ignore
|
|
for (; i < wordsLength; i++) {
|
|
const x = c2x[c[i]]
|
|
if (x < 0) throw new SyntaxError(E_CHARACTER)
|
|
chk = p(chk) ^ x
|
|
value = (value << 5) | x
|
|
bits += 5
|
|
if (bits >= 8) {
|
|
bits -= 8
|
|
bytes[j++] = (value >> bits) & 0xff
|
|
}
|
|
}
|
|
|
|
if (bits >= 5 || (value << (8 - bits)) & 0xff) throw new Error(E_PADDING)
|
|
|
|
// Checksum
|
|
{
|
|
const c0 = c[i], c1 = c[i + 1], c2 = c[i + 2], c3 = c[i + 3], c4 = c[i + 4], c5 = c[i + 5] // prettier-ignore
|
|
const x0 = c2x[c0], x1 = c2x[c1], x2 = c2x[c2], x3 = c2x[c3], x4 = c2x[c4], x5 = c2x[c5] // prettier-ignore
|
|
if (x0 < 0 || x1 < 0 || x2 < 0 || x3 < 0 || x4 < 0 || x5 < 0) throw new SyntaxError(E_CHARACTER)
|
|
if ((merge(x0, x1, x2, x3, x4, x5) ^ p6(chk)) !== encoding) throw new Error(E_CHECKSUM)
|
|
}
|
|
|
|
return { prefix, bytes }
|
|
}
|
|
|
|
// This is designed to be a very quick check, skipping all other validation
|
|
export function getPrefix(str, limit = 90) {
|
|
assertDecodeArgs(str, limit)
|
|
const split = str.lastIndexOf('1')
|
|
if (split <= 0) throw new Error(E_PREFIX)
|
|
return str.slice(0, split).toLowerCase()
|
|
}
|
|
|
|
export const toBech32 = (prefix, bytes, limit = 90) => toBech32enc(prefix, bytes, limit, BECH32)
|
|
export const fromBech32 = (str, limit = 90) => fromBech32enc(str, limit, BECH32)
|
|
export const toBech32m = (prefix, bytes, limit = 90) => toBech32enc(prefix, bytes, limit, BECH32M)
|
|
export const fromBech32m = (str, limit = 90) => fromBech32enc(str, limit, BECH32M)
|