cryptonomic / conseiljs-softsigner Goto Github PK

In src/utils/WrapperWrapper.js, change the publickey() function to use crypto_sign_ed25519_sk_to_pk() instead of crypto_sign_ed25519_sk_to_seed() and then crypto_sign_seed_keypair().

Offer an option to initialize SoftSigner with an encrypted secret key.

The repo has inconsistent parameter names between secretKey & privateKey.

Currently, the signText and checkTextSignature functions don't hash the message before signing/verifying.

When verifying a signature in a smart contract, it will also hash the message before checking. This is mentioned in the michelson docs, but I haven't verified it in a smart contract myself. This is also in line with most other libraries that do sign/verify (eg. pytezos, haskell tezos package).

In our library we hash it like this:

const hash: Buffer = sodium.crypto_generichash(32, sodium.from_string(message))
const rawSignature: Uint8Array = sodium.crypto_sign_detached(hash, privateKey)