Merge pull request #1983 from CosmWasm/secp256r1-support

Secp256r1 support

Author: webmaster128

.circleci/config.yml

@@ -84,7 +84,7 @@ workflows:
                 - main
                 - /^[0-9]+\.[0-9]+$/
                 # Add your branch here if benchmarking matters to your work
-                - add-noop
+                - secp256r1-support
       - coverage
   deploy:
     jobs:

CHANGELOG.md

@@ -6,6 +6,13 @@ and this project adheres to
 
 ## [Unreleased]
 
+### Added
+
+- cosmwasm-vm: Add `secp256r1_verify` and `secp256r1_recover_pubkey` imports for
+  ECDSA signature verification over secp256r1. ([#1983])
+
+[#1983]: https://github.com/CosmWasm/cosmwasm/pull/1983
+
 ### Changed
 
 - cosmwasm-std: Enable `add_event` and `add_events` functions to process types

Cargo.lock

@@ -227,6 +227,18 @@ extern "C" {
         recovery_param: u32,
     ) -> u64;
 
+    /// Verifies message hashes against a signature with a public key, using the
+    /// secp256r1 ECDSA parametrization.
+    /// Returns 0 on verification success, 1 on verification failure, and values
+    /// greater than 1 in case of error.
+    fn secp256r1_verify(message_hash_ptr: u32, signature_ptr: u32, public_key_ptr: u32) -> u32;
+
+    fn secp256r1_recover_pubkey(
+      message_hash_ptr: u32,
+      signature_ptr: u32,
+      recovery_param: u32,
+    ) -> u64;
+
     /// Verifies a message against a signature with a public key, using the
     /// ed25519 EdDSA scheme.
     /// Returns 0 on verification success, 1 on verification failure, and values

README.md

@@ -59,7 +59,52 @@
         "additionalProperties": false
       },
       {
-        "description": "Ethereum text verification (compatible to the eth_sign RPC/web3 enpoint). This cannot be used to verify transaction.\n\nSee https://web3js.readthedocs.io/en/v1.2.0/web3-eth.html#sign",
+        "description": "Cosmos format (secp256r1 verification scheme).",
+        "type": "object",
+        "required": [
+          "verify_secp256_r1_signature"
+        ],
+        "properties": {
+          "verify_secp256_r1_signature": {
+            "type": "object",
+            "required": [
+              "message",
+              "public_key",
+              "signature"
+            ],
+            "properties": {
+              "message": {
+                "description": "Message to verify.",
+                "allOf": [
+                  {
+                    "$ref": "#/definitions/Binary"
+                  }
+                ]
+              },
+              "public_key": {
+                "description": "Serialized compressed (33 bytes) or uncompressed (65 bytes) public key.",
+                "allOf": [
+                  {
+                    "$ref": "#/definitions/Binary"
+                  }
+                ]
+              },
+              "signature": {
+                "description": "Serialized signature. Cosmos format (64 bytes).",
+                "allOf": [
+                  {
+                    "$ref": "#/definitions/Binary"
+                  }
+                ]
+              }
+            },
+            "additionalProperties": false
+          }
+        },
+        "additionalProperties": false
+      },
+      {
+        "description": "Ethereum text verification (compatible to the eth_sign RPC/web3 endpoint). This cannot be used to verify transaction.\n\nSee https://web3js.readthedocs.io/en/v1.2.0/web3-eth.html#sign",
         "type": "object",
         "required": [
           "verify_ethereum_text"
@@ -86,7 +131,7 @@
                 ]
               },
               "signer_address": {
-                "description": "Signer address. This is matched case insensitive, so you can provide checksummed and non-checksummed addresses. Checksums are not validated.",
+                "description": "Signer address. This is matched case insensitive, so you can provide check-summed and non-check-summed addresses. Checksums are not validated.",
                 "type": "string"
               }
             },
@@ -339,6 +384,20 @@
       },
       "additionalProperties": false
     },
+    "verify_secp256_r1_signature": {
+      "$schema": "http://json-schema.org/draft-07/schema#",
+      "title": "VerifyResponse",
+      "type": "object",
+      "required": [
+        "verifies"
+      ],
+      "properties": {
+        "verifies": {
+          "type": "boolean"
+        }
+      },
+      "additionalProperties": false
+    },
     "verify_tendermint_batch": {
       "$schema": "http://json-schema.org/draft-07/schema#",
       "title": "VerifyResponse",