|
| 1 | +use reth::revm::precompile::{Precompile, PrecompileWithAddress}; |
| 2 | +use revm_primitives::{Bytes, PrecompileError, PrecompileResult, StandardPrecompileFn, B256}; |
| 3 | + |
| 4 | +/// EIP-7212 secp256r1 precompile. |
| 5 | +pub const P256VERIFY: PrecompileWithAddress = PrecompileWithAddress( |
| 6 | + crate::u64_to_address(0x0b), /* 0x0b according to https://eips.ethereum.org/EIPS/eip-7212#specification */ |
| 7 | + Precompile::Standard(p256_verify as StandardPrecompileFn), |
| 8 | +); |
| 9 | + |
| 10 | +/// The input is encoded as follows: |
| 11 | +/// | signed msg hash | r | s | pk x | pk y | |
| 12 | +/// | 32 | 32 | 32 | 32 | 32 | |
| 13 | +fn p256_verify(input: &Bytes, target_gas: u64) -> PrecompileResult { |
| 14 | + use p256::ecdsa::{signature::hazmat::PrehashVerifier, Signature, VerifyingKey}; |
| 15 | + |
| 16 | + const P256VERIFY_BASE: u64 = 3_450; |
| 17 | + |
| 18 | + if P256VERIFY_BASE > target_gas { |
| 19 | + return Err(PrecompileError::OutOfGas); |
| 20 | + } |
| 21 | + if input.len() < 160 { |
| 22 | + return Ok((P256VERIFY_BASE, B256::ZERO.into())); |
| 23 | + } |
| 24 | + |
| 25 | + // msg signed (msg is already the hash of the original message) |
| 26 | + let msg: &[u8; 32] = input[..32].try_into().unwrap(); |
| 27 | + // r, s: signature |
| 28 | + let sig: &[u8; 64] = input[32..96].try_into().unwrap(); |
| 29 | + // x, y: public key |
| 30 | + let pk: &[u8; 64] = input[96..160].try_into().unwrap(); |
| 31 | + // append 0x04 to the public key: uncompressed form |
| 32 | + let mut uncompressed_pk = [0u8; 65]; |
| 33 | + uncompressed_pk[0] = 0x04; |
| 34 | + uncompressed_pk[1..].copy_from_slice(pk); |
| 35 | + |
| 36 | + let signature: Signature = Signature::from_slice(sig).unwrap(); |
| 37 | + let public_key: VerifyingKey = VerifyingKey::from_sec1_bytes(&uncompressed_pk).unwrap(); |
| 38 | + |
| 39 | + let result = public_key.verify_prehash(msg, &signature).is_ok(); |
| 40 | + Ok((P256VERIFY_BASE, B256::with_last_byte(result as u8).into())) |
| 41 | +} |
| 42 | + |
| 43 | +#[cfg(test)] |
| 44 | +mod test { |
| 45 | + use super::p256_verify; |
| 46 | + use revm_primitives::{hex::FromHex, Bytes, PrecompileError, B256}; |
| 47 | + use rstest::rstest; |
| 48 | + |
| 49 | + #[rstest] |
| 50 | + // test vectors from https://github.com/daimo-eth/p256-verifier/tree/master/test-vectors |
| 51 | + #[case::ok_1("4cee90eb86eaa050036147a12d49004b6b9c72bd725d39d4785011fe190f0b4da73bd4903f0ce3b639bbbf6e8e80d16931ff4bcf5993d58468e8fb19086e8cac36dbcd03009df8c59286b162af3bd7fcc0450c9aa81be5d10d312af6c66b1d604aebd3099c618202fcfe16ae7770b0c49ab5eadf74b754204a3bb6060e44eff37618b065f9832de4ca6ca971a7a1adc826d0f7c00181a5fb2ddf79ae00b4e10e", true)] |
| 52 | + #[case::ok_2("3fec5769b5cf4e310a7d150508e82fb8e3eda1c2c94c61492d3bd8aea99e06c9e22466e928fdccef0de49e3503d2657d00494a00e764fd437bdafa05f5922b1fbbb77c6817ccf50748419477e843d5bac67e6a70e97dde5a57e0c983b777e1ad31a80482dadf89de6302b1988c82c29544c9c07bb910596158f6062517eb089a2f54c9a0f348752950094d3228d3b940258c75fe2a413cb70baa21dc2e352fc5", true)] |
| 53 | + #[case::ok_3("e775723953ead4a90411a02908fd1a629db584bc600664c609061f221ef6bf7c440066c8626b49daaa7bf2bcc0b74be4f7a1e3dcf0e869f1542fe821498cbf2de73ad398194129f635de4424a07ca715838aefe8fe69d1a391cfa70470795a80dd056866e6e1125aff94413921880c437c9e2570a28ced7267c8beef7e9b2d8d1547d76dfcf4bee592f5fefe10ddfb6aeb0991c5b9dbbee6ec80d11b17c0eb1a", true)] |
| 54 | + #[case::ok_4("b5a77e7a90aa14e0bf5f337f06f597148676424fae26e175c6e5621c34351955289f319789da424845c9eac935245fcddd805950e2f02506d09be7e411199556d262144475b1fa46ad85250728c600c53dfd10f8b3f4adf140e27241aec3c2da3a81046703fccf468b48b145f939efdbb96c3786db712b3113bb2488ef286cdcef8afe82d200a5bb36b5462166e8ce77f2d831a52ef2135b2af188110beaefb1", true)] |
| 55 | + #[case::ok_5("858b991cfd78f16537fe6d1f4afd10273384db08bdfc843562a22b0626766686f6aec8247599f40bfe01bec0e0ecf17b4319559022d4d9bf007fe929943004eb4866760dedf31b7c691f5ce665f8aae0bda895c23595c834fecc2390a5bcc203b04afcacbb4280713287a2d0c37e23f7513fab898f2c1fefa00ec09a924c335d9b629f1d4fb71901c3e59611afbfea354d101324e894c788d1c01f00b3c251b2", true)] |
| 56 | + #[case::fail_1("3cee90eb86eaa050036147a12d49004b6b9c72bd725d39d4785011fe190f0b4da73bd4903f0ce3b639bbbf6e8e80d16931ff4bcf5993d58468e8fb19086e8cac36dbcd03009df8c59286b162af3bd7fcc0450c9aa81be5d10d312af6c66b1d604aebd3099c618202fcfe16ae7770b0c49ab5eadf74b754204a3bb6060e44eff37618b065f9832de4ca6ca971a7a1adc826d0f7c00181a5fb2ddf79ae00b4e10e", false)] |
| 57 | + #[case::fail_2("afec5769b5cf4e310a7d150508e82fb8e3eda1c2c94c61492d3bd8aea99e06c9e22466e928fdccef0de49e3503d2657d00494a00e764fd437bdafa05f5922b1fbbb77c6817ccf50748419477e843d5bac67e6a70e97dde5a57e0c983b777e1ad31a80482dadf89de6302b1988c82c29544c9c07bb910596158f6062517eb089a2f54c9a0f348752950094d3228d3b940258c75fe2a413cb70baa21dc2e352fc5", false)] |
| 58 | + #[case::fail_3("f775723953ead4a90411a02908fd1a629db584bc600664c609061f221ef6bf7c440066c8626b49daaa7bf2bcc0b74be4f7a1e3dcf0e869f1542fe821498cbf2de73ad398194129f635de4424a07ca715838aefe8fe69d1a391cfa70470795a80dd056866e6e1125aff94413921880c437c9e2570a28ced7267c8beef7e9b2d8d1547d76dfcf4bee592f5fefe10ddfb6aeb0991c5b9dbbee6ec80d11b17c0eb1a", false)] |
| 59 | + #[case::fail_4("c5a77e7a90aa14e0bf5f337f06f597148676424fae26e175c6e5621c34351955289f319789da424845c9eac935245fcddd805950e2f02506d09be7e411199556d262144475b1fa46ad85250728c600c53dfd10f8b3f4adf140e27241aec3c2da3a81046703fccf468b48b145f939efdbb96c3786db712b3113bb2488ef286cdcef8afe82d200a5bb36b5462166e8ce77f2d831a52ef2135b2af188110beaefb1", false)] |
| 60 | + #[case::fail_5("958b991cfd78f16537fe6d1f4afd10273384db08bdfc843562a22b0626766686f6aec8247599f40bfe01bec0e0ecf17b4319559022d4d9bf007fe929943004eb4866760dedf31b7c691f5ce665f8aae0bda895c23595c834fecc2390a5bcc203b04afcacbb4280713287a2d0c37e23f7513fab898f2c1fefa00ec09a924c335d9b629f1d4fb71901c3e59611afbfea354d101324e894c788d1c01f00b3c251b2", false)] |
| 61 | + fn test_sig_verify(#[case] input: &str, #[case] expect_success: bool) { |
| 62 | + let input = Bytes::from_hex(input).unwrap(); |
| 63 | + let target_gas = 3_500u64; |
| 64 | + let (gas_used, res) = p256_verify(&input, target_gas).unwrap(); |
| 65 | + assert_eq!(gas_used, 3_450u64); |
| 66 | + let expected_result = B256::with_last_byte(expect_success as u8); |
| 67 | + assert_eq!(res, expected_result.to_vec()); |
| 68 | + } |
| 69 | + |
| 70 | + #[rstest] |
| 71 | + fn test_not_enough_gas_errors() { |
| 72 | + let input = Bytes::from_hex("4cee90eb86eaa050036147a12d49004b6b9c72bd725d39d4785011fe190f0b4da73bd4903f0ce3b639bbbf6e8e80d16931ff4bcf5993d58468e8fb19086e8cac36dbcd03009df8c59286b162af3bd7fcc0450c9aa81be5d10d312af6c66b1d604aebd3099c618202fcfe16ae7770b0c49ab5eadf74b754204a3bb6060e44eff37618b065f9832de4ca6ca971a7a1adc826d0f7c00181a5fb2ddf79ae00b4e10e").unwrap(); |
| 73 | + let target_gas = 2_500u64; |
| 74 | + let result = p256_verify(&input, target_gas); |
| 75 | + |
| 76 | + assert!(result.is_err()); |
| 77 | + assert_eq!(result.err(), Some(PrecompileError::OutOfGas)); |
| 78 | + } |
| 79 | + |
| 80 | + #[rstest] |
| 81 | + fn test_smaller_input_fails() { |
| 82 | + let input = Bytes::from_hex("4cee90eb86eaa050036147a12d49004b6a").unwrap(); |
| 83 | + let target_gas = 3_500u64; |
| 84 | + let result = p256_verify(&input, target_gas); |
| 85 | + |
| 86 | + assert!(result.is_ok()); |
| 87 | + assert_eq!(result.ok(), Some((3_450u64, B256::ZERO.into()))); |
| 88 | + } |
| 89 | +} |
0 commit comments