Bitcoin ABC 0.33.5
P2P Digital Currency
secp256k1.h
Go to the documentation of this file.
1#ifndef SECP256K1_H
2#define SECP256K1_H
3
4#ifdef __cplusplus
5extern "C" {
6#endif
7
8#include <stddef.h>
9
51
61typedef struct {
62 unsigned char data[64];
64
74typedef struct {
75 unsigned char data[64];
77
95 unsigned char *nonce32,
96 const unsigned char *msg32,
97 const unsigned char *key32,
98 const unsigned char *algo16,
99 void *data,
100 unsigned int attempt
101);
102
103# if !defined(SECP256K1_GNUC_PREREQ)
104# if defined(__GNUC__)&&defined(__GNUC_MINOR__)
105# define SECP256K1_GNUC_PREREQ(_maj,_min) \
106 ((__GNUC__<<16)+__GNUC_MINOR__>=((_maj)<<16)+(_min))
107# else
108# define SECP256K1_GNUC_PREREQ(_maj,_min) 0
109# endif
110# endif
111
112/* When this header is used at build-time the SECP256K1_BUILD define needs to be set
113 * to correctly setup export attributes and nullness checks. This is normally done
114 * by secp256k1.c but to guard against this header being included before secp256k1.c
115 * has had a chance to set the define (e.g. via test harnesses that just includes
116 * secp256k1.c) we set SECP256K1_NO_BUILD when this header is processed without the
117 * BUILD define so this condition can be caught.
118 */
119#ifndef SECP256K1_BUILD
120# define SECP256K1_NO_BUILD
121#endif
122
123/* Symbol visibility. */
124#if defined(_WIN32)
125 /* GCC for Windows (e.g., MinGW) accepts the __declspec syntax
126 * for MSVC compatibility. A __declspec declaration implies (but is not
127 * exactly equivalent to) __attribute__ ((visibility("default"))), and so we
128 * actually want __declspec even on GCC, see "Microsoft Windows Function
129 * Attributes" in the GCC manual and the recommendations in
130 * https://gcc.gnu.org/wiki/Visibility. */
131# if defined(SECP256K1_BUILD)
132# if defined(DLL_EXPORT) || defined(SECP256K1_DLL_EXPORT)
133 /* Building libsecp256k1 as a DLL.
134 * 1. If using Libtool, it defines DLL_EXPORT automatically.
135 * 2. In other cases, SECP256K1_DLL_EXPORT must be defined. */
136# define SECP256K1_API extern __declspec (dllexport)
137# endif
138 /* The user must define SECP256K1_STATIC when consuming libsecp256k1 as a static
139 * library on Windows. */
140# elif !defined(SECP256K1_STATIC)
141 /* Consuming libsecp256k1 as a DLL. */
142# define SECP256K1_API extern __declspec (dllimport)
143# endif
144#endif
145#ifndef SECP256K1_API
146# if defined(__GNUC__) && (__GNUC__ >= 4) && defined(SECP256K1_BUILD)
147 /* Building libsecp256k1 on non-Windows using GCC or compatible. */
148# define SECP256K1_API extern __attribute__ ((visibility ("default")))
149# else
150 /* All cases not captured above. */
151# define SECP256K1_API extern
152# endif
153#endif
154
155/* Warning attributes
156 * NONNULL is not used if SECP256K1_BUILD is set to avoid the compiler optimizing out
157 * some paranoid null checks. */
158# if defined(__GNUC__) && SECP256K1_GNUC_PREREQ(3, 4)
159# define SECP256K1_WARN_UNUSED_RESULT __attribute__ ((__warn_unused_result__))
160# else
161# define SECP256K1_WARN_UNUSED_RESULT
162# endif
163# if !defined(SECP256K1_BUILD) && defined(__GNUC__) && SECP256K1_GNUC_PREREQ(3, 4)
164# define SECP256K1_ARG_NONNULL(_x) __attribute__ ((__nonnull__(_x)))
165# else
166# define SECP256K1_ARG_NONNULL(_x)
167# endif
168
169/* Attribute for marking functions, types, and variables as deprecated */
170#if !defined(SECP256K1_BUILD) && defined(__has_attribute)
171# if __has_attribute(__deprecated__)
172# define SECP256K1_DEPRECATED(_msg) __attribute__ ((__deprecated__(_msg)))
173# else
174# define SECP256K1_DEPRECATED(_msg)
175# endif
176#else
177# define SECP256K1_DEPRECATED(_msg)
178#endif
179
180/* All flags' lower 8 bits indicate what they're for. Do not use directly. */
181#define SECP256K1_FLAGS_TYPE_MASK ((1 << 8) - 1)
182#define SECP256K1_FLAGS_TYPE_CONTEXT (1 << 0)
183#define SECP256K1_FLAGS_TYPE_COMPRESSION (1 << 1)
184/* The higher bits contain the actual data. Do not use directly. */
185#define SECP256K1_FLAGS_BIT_CONTEXT_VERIFY (1 << 8)
186#define SECP256K1_FLAGS_BIT_CONTEXT_SIGN (1 << 9)
187#define SECP256K1_FLAGS_BIT_CONTEXT_DECLASSIFY (1 << 10)
188#define SECP256K1_FLAGS_BIT_COMPRESSION (1 << 8)
189
192#define SECP256K1_CONTEXT_NONE (SECP256K1_FLAGS_TYPE_CONTEXT)
193
195#define SECP256K1_CONTEXT_VERIFY (SECP256K1_FLAGS_TYPE_CONTEXT | SECP256K1_FLAGS_BIT_CONTEXT_VERIFY)
196#define SECP256K1_CONTEXT_SIGN (SECP256K1_FLAGS_TYPE_CONTEXT | SECP256K1_FLAGS_BIT_CONTEXT_SIGN)
197
198/* Testing flag. Do not use. */
199#define SECP256K1_CONTEXT_DECLASSIFY (SECP256K1_FLAGS_TYPE_CONTEXT | SECP256K1_FLAGS_BIT_CONTEXT_DECLASSIFY)
200
202#define SECP256K1_EC_COMPRESSED (SECP256K1_FLAGS_TYPE_COMPRESSION | SECP256K1_FLAGS_BIT_COMPRESSION)
203#define SECP256K1_EC_UNCOMPRESSED (SECP256K1_FLAGS_TYPE_COMPRESSION)
204
206#define SECP256K1_TAG_PUBKEY_EVEN 0x02
207#define SECP256K1_TAG_PUBKEY_ODD 0x03
208#define SECP256K1_TAG_PUBKEY_UNCOMPRESSED 0x04
209#define SECP256K1_TAG_PUBKEY_HYBRID_EVEN 0x06
210#define SECP256K1_TAG_PUBKEY_HYBRID_ODD 0x07
211
224
227SECP256K1_DEPRECATED("Use secp256k1_context_static instead");
228
246
247
274 unsigned int flags
276
292
310
350 void (*fun)(const char *message, void *data),
351 const void *data
353
378 void (*fun)(const char *message, void *data),
379 const void *data
381
397 const secp256k1_context *ctx,
398 secp256k1_pubkey *pubkey,
399 const unsigned char *input,
400 size_t inputlen
402
419 const secp256k1_context *ctx,
420 unsigned char *output,
421 size_t *outputlen,
422 const secp256k1_pubkey *pubkey,
423 unsigned int flags
425
436 const secp256k1_context *ctx,
437 const secp256k1_pubkey *pubkey1,
438 const secp256k1_pubkey *pubkey2
440
457 const secp256k1_context *ctx,
459 const unsigned char *input64
461
478 const secp256k1_context *ctx,
480 const unsigned char *input,
481 size_t inputlen
483
496 const secp256k1_context *ctx,
497 unsigned char *output,
498 size_t *outputlen,
501
512 const secp256k1_context *ctx,
513 unsigned char *output64,
516
543 const secp256k1_context *ctx,
545 const unsigned char *msghash32,
546 const secp256k1_pubkey *pubkey
548
591 const secp256k1_context *ctx,
593 const secp256k1_ecdsa_signature *sigin
595
601
604
624 const secp256k1_context *ctx,
626 const unsigned char *msghash32,
627 const unsigned char *seckey,
629 const void *ndata
631
645 const secp256k1_context *ctx,
646 const unsigned char *seckey
648
658 const secp256k1_context *ctx,
659 secp256k1_pubkey *pubkey,
660 const unsigned char *seckey
662
674 const secp256k1_context *ctx,
675 unsigned char *seckey
677
681 const secp256k1_context *ctx,
682 unsigned char *seckey
685
693 const secp256k1_context *ctx,
694 secp256k1_pubkey *pubkey
696
713 const secp256k1_context *ctx,
714 unsigned char *seckey,
715 const unsigned char *tweak32
717
721 const secp256k1_context *ctx,
722 unsigned char *seckey,
723 const unsigned char *tweak32
726
741 const secp256k1_context *ctx,
742 secp256k1_pubkey *pubkey,
743 const unsigned char *tweak32
745
760 const secp256k1_context *ctx,
761 unsigned char *seckey,
762 const unsigned char *tweak32
764
768 const secp256k1_context *ctx,
769 unsigned char *seckey,
770 const unsigned char *tweak32
773
786 const secp256k1_context *ctx,
787 secp256k1_pubkey *pubkey,
788 const unsigned char *tweak32
790
825 const unsigned char *seed32
827
838 const secp256k1_context *ctx,
840 const secp256k1_pubkey * const *ins,
841 size_t n
843
861 const secp256k1_context *ctx,
862 unsigned char *hash32,
863 const unsigned char *tag,
864 size_t taglen,
865 const unsigned char *msg,
866 size_t msglen
868
869#ifdef __cplusplus
870}
871#endif
872
873#endif /* SECP256K1_H */
int flags
Definition: bitcoin-tx.cpp:546
secp256k1_context * ctx
Definition: bench_impl.h:13
SchnorrSig sig
Definition: processor.cpp:537
const secp256k1_context * secp256k1_context_no_precomp
Definition: secp256k1.c:74
SECP256K1_API void secp256k1_context_destroy(secp256k1_context *ctx) SECP256K1_ARG_NONNULL(1)
Destroy a secp256k1 context object (created in dynamically allocated memory).
Definition: secp256k1.c:186
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_seckey_tweak_mul(const secp256k1_context *ctx, unsigned char *seckey, const unsigned char *tweak32) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Tweak a secret key by multiplying it by a tweak.
Definition: secp256k1.c:704
#define SECP256K1_ARG_NONNULL(_x)
Definition: secp256k1.h:166
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_context_randomize(secp256k1_context *ctx, const unsigned char *seed32) SECP256K1_ARG_NONNULL(1)
Randomizes the context to provide enhanced protection against side-channel leakage.
Definition: secp256k1.c:751
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_combine(const secp256k1_context *ctx, secp256k1_pubkey *out, const secp256k1_pubkey *const *ins, size_t n) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Add a number of public keys together.
Definition: secp256k1.c:761
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_seckey_negate(const secp256k1_context *ctx, unsigned char *seckey) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2)
Negates a secret key in place.
Definition: secp256k1.c:614
SECP256K1_API const secp256k1_nonce_function secp256k1_nonce_function_default
A default safe nonce generation function (currently equal to secp256k1_nonce_function_rfc6979).
Definition: secp256k1.h:603
SECP256K1_API int secp256k1_ecdsa_signature_parse_compact(const secp256k1_context *ctx, secp256k1_ecdsa_signature *sig, const unsigned char *input64) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Parse an ECDSA signature in compact (64 bytes) format.
Definition: secp256k1.c:379
SECP256K1_API int secp256k1_ec_pubkey_serialize(const secp256k1_context *ctx, unsigned char *output, size_t *outputlen, const secp256k1_pubkey *pubkey, unsigned int flags) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4)
Serialize a pubkey object into a serialized byte sequence.
Definition: secp256k1.c:290
SECP256K1_API void secp256k1_context_set_error_callback(secp256k1_context *ctx, void(*fun)(const char *message, void *data), const void *data) SECP256K1_ARG_NONNULL(1)
Set a callback function to be called when an internal consistency check fails.
Definition: secp256k1.c:210
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_cmp(const secp256k1_context *ctx, const secp256k1_pubkey *pubkey1, const secp256k1_pubkey *pubkey2) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Compare two public keys using lexicographic (of compressed serialization) order.
Definition: secp256k1.c:313
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_seckey_verify(const secp256k1_context *ctx, const unsigned char *seckey) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2)
Verify an ECDSA secret key.
Definition: secp256k1.c:573
SECP256K1_API secp256k1_context * secp256k1_context_create(unsigned int flags) SECP256K1_WARN_UNUSED_RESULT
Create a secp256k1 context object (in dynamically allocated memory).
Definition: secp256k1.c:140
SECP256K1_API void secp256k1_context_set_illegal_callback(secp256k1_context *ctx, void(*fun)(const char *message, void *data), const void *data) SECP256K1_ARG_NONNULL(1)
Set a callback function to be called when an illegal argument is passed to an API call.
Definition: secp256k1.c:198
#define SECP256K1_API
Definition: secp256k1.h:151
SECP256K1_API int secp256k1_ecdsa_sign(const secp256k1_context *ctx, secp256k1_ecdsa_signature *sig, const unsigned char *msghash32, const unsigned char *seckey, secp256k1_nonce_function noncefp, const void *ndata) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4)
Create an ECDSA signature.
Definition: secp256k1.c:558
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_parse(const secp256k1_context *ctx, secp256k1_pubkey *pubkey, const unsigned char *input, size_t inputlen) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Parse a variable-length public key into the pubkey object.
Definition: secp256k1.c:272
int(* secp256k1_nonce_function)(unsigned char *nonce32, const unsigned char *msg32, const unsigned char *key32, const unsigned char *algo16, void *data, unsigned int attempt)
A pointer to a function to deterministically generate a nonce.
Definition: secp256k1.h:94
SECP256K1_API int secp256k1_ecdsa_signature_parse_der(const secp256k1_context *ctx, secp256k1_ecdsa_signature *sig, const unsigned char *input, size_t inputlen) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Parse a DER ECDSA signature.
Definition: secp256k1.c:363
SECP256K1_API void secp256k1_selftest(void)
Perform basic self tests (to be used in conjunction with secp256k1_context_static)
Definition: secp256k1.c:85
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_create(const secp256k1_context *ctx, secp256k1_pubkey *pubkey, const unsigned char *seckey) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Compute the public key for a secret key.
Definition: secp256k1.c:596
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_tagged_sha256(const secp256k1_context *ctx, unsigned char *hash32, const unsigned char *tag, size_t taglen, const unsigned char *msg, size_t msglen) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(5)
Compute a tagged hash as defined in BIP-340.
Definition: secp256k1.c:787
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ecdsa_verify(const secp256k1_context *ctx, const secp256k1_ecdsa_signature *sig, const unsigned char *msghash32, const secp256k1_pubkey *pubkey) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4)
Verify an ECDSA signature.
Definition: secp256k1.c:444
#define SECP256K1_DEPRECATED(_msg)
Definition: secp256k1.h:177
SECP256K1_API int secp256k1_ecdsa_signature_normalize(const secp256k1_context *ctx, secp256k1_ecdsa_signature *sigout, const secp256k1_ecdsa_signature *sigin) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(3)
Convert a signature to a normalized lower-S form.
Definition: secp256k1.c:425
SECP256K1_API secp256k1_context * secp256k1_context_clone(const secp256k1_context *ctx) SECP256K1_ARG_NONNULL(1) SECP256K1_WARN_UNUSED_RESULT
Copy a secp256k1 context object (into dynamically allocated memory).
Definition: secp256k1.c:162
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_tweak_add(const secp256k1_context *ctx, secp256k1_pubkey *pubkey, const unsigned char *tweak32) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Tweak a public key by adding tweak times the generator to it.
Definition: secp256k1.c:687
SECP256K1_API const secp256k1_nonce_function secp256k1_nonce_function_rfc6979
An implementation of RFC6979 (using HMAC-SHA256) as nonce generation function.
Definition: secp256k1.h:600
SECP256K1_API int secp256k1_ecdsa_signature_serialize_der(const secp256k1_context *ctx, unsigned char *output, size_t *outputlen, const secp256k1_ecdsa_signature *sig) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4)
Serialize an ECDSA signature in DER format.
Definition: secp256k1.c:400
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_negate(const secp256k1_context *ctx, secp256k1_pubkey *pubkey) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2)
Negates a public key in place.
Definition: secp256k1.c:633
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_privkey_tweak_add(const secp256k1_context *ctx, unsigned char *seckey, const unsigned char *tweak32) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_DEPRECATED("Use secp256k1_ec_seckey_tweak_add instead")
Same as secp256k1_ec_seckey_tweak_add, but DEPRECATED.
Definition: secp256k1.c:676
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_privkey_negate(const secp256k1_context *ctx, unsigned char *seckey) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_DEPRECATED("Use secp256k1_ec_seckey_negate instead")
Same as secp256k1_ec_seckey_negate, but DEPRECATED.
Definition: secp256k1.c:629
#define SECP256K1_WARN_UNUSED_RESULT
Definition: secp256k1.h:161
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_seckey_tweak_add(const secp256k1_context *ctx, unsigned char *seckey, const unsigned char *tweak32) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Tweak a secret key by adding tweak to it.
Definition: secp256k1.c:660
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_tweak_mul(const secp256k1_context *ctx, secp256k1_pubkey *pubkey, const unsigned char *tweak32) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Tweak a public key by multiplying it by a tweak value.
Definition: secp256k1.c:728
SECP256K1_API int secp256k1_ecdsa_signature_serialize_compact(const secp256k1_context *ctx, unsigned char *output64, const secp256k1_ecdsa_signature *sig) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Serialize an ECDSA signature in compact (64 byte) format.
Definition: secp256k1.c:412
SECP256K1_API const secp256k1_context * secp256k1_context_static
A built-in constant secp256k1 context object with static storage duration, to be used in conjunction ...
Definition: secp256k1.h:223
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_privkey_tweak_mul(const secp256k1_context *ctx, unsigned char *seckey, const unsigned char *tweak32) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_DEPRECATED("Use secp256k1_ec_seckey_tweak_mul instead")
Same as secp256k1_ec_seckey_tweak_mul, but DEPRECATED.
Definition: secp256k1.c:724
Opaque data structured that holds a parsed ECDSA signature.
Definition: secp256k1.h:74
Opaque data structure that holds a parsed and valid public key.
Definition: secp256k1.h:61