gentest.py 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328
  1. #!/usr/bin/env python3
  2. #
  3. # mmgen = Multi-Mode GENerator, command-line Bitcoin cold storage solution
  4. # Copyright (C)2013-2019 The MMGen Project <mmgen@tuta.io>
  5. #
  6. # This program is free software: you can redistribute it and/or modify
  7. # it under the terms of the GNU General Public License as published by
  8. # the Free Software Foundation, either version 3 of the License, or
  9. # (at your option) any later version.
  10. #
  11. # This program is distributed in the hope that it will be useful,
  12. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  13. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  14. # GNU General Public License for more details.
  15. #
  16. # You should have received a copy of the GNU General Public License
  17. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  18. """
  19. test/gentest.py: Cryptocoin key/address generation tests for the MMGen suite
  20. """
  21. import sys,os
  22. pn = os.path.dirname(sys.argv[0])
  23. os.chdir(os.path.join(pn,os.pardir))
  24. sys.path.__setitem__(0,os.path.abspath(os.curdir))
  25. os.environ['MMGEN_TEST_SUITE'] = '1'
  26. # Import these _after_ local path's been added to sys.path
  27. from mmgen.common import *
  28. from mmgen.obj import MMGenAddrType
  29. rounds = 100
  30. opts_data = {
  31. 'text': {
  32. 'desc': 'Test address generation in various ways',
  33. 'usage':'[options] [spec] [rounds | dump file]',
  34. 'options': """
  35. -h, --help Print this help message
  36. -a, --all Test all supported coins for external generator 'ext'
  37. -k, --use-internal-keccak-module Force use of the internal keccak module
  38. --, --longhelp Print help message for long options (common options)
  39. -q, --quiet Produce quieter output
  40. -t, --type=t Specify address type (valid options: 'compressed','segwit','zcash_z')
  41. -v, --verbose Produce more verbose output
  42. """,
  43. 'notes': """
  44. Tests:
  45. A/B: {prog} a:b [rounds] (compare output of two key generators)
  46. Speed: {prog} a [rounds] (test speed of one key generator)
  47. Compare: {prog} a <dump file> (compare output of a key generator against wallet dump)
  48. where a and b are one of:
  49. '1' - native Python ecdsa library (very slow)
  50. '2' - bitcoincore.org's secp256k1 library (default from v0.8.6)
  51. EXAMPLES:
  52. {prog} 1:2 100
  53. (compare output of native Python ECDSA with secp256k1 library, 100 rounds)
  54. {prog} 2:ext 100
  55. (compare output of secp256k1 library with external library (see below), 100 rounds)
  56. {prog} 2 1000
  57. (test speed of secp256k1 library address generation, 1000 rounds)
  58. {prog} 2 my.dump
  59. (compare addrs generated with secp256k1 library to {dn} wallet dump)
  60. External libraries required for the 'ext' generator:
  61. + ethkey (for ETH,ETC) https://github.com/paritytech/parity-ethereum
  62. + zcash-mini (for zcash_z addresses) https://github.com/FiloSottile/zcash-mini
  63. + pycoin (for supported coins) https://github.com/richardkiss/pycoin
  64. + keyconv (for all other coins) https://github.com/exploitagency/vanitygen-plus
  65. ('keyconv' generates uncompressed addresses only)
  66. """
  67. },
  68. 'code': {
  69. 'notes': lambda s: s.format(
  70. prog='gentest.py',
  71. pnm=g.proj_name,
  72. snum=rounds,
  73. dn=g.proto.daemon_name)
  74. }
  75. }
  76. sys.argv = [sys.argv[0]] + ['--skip-cfg-file'] + sys.argv[1:]
  77. cmd_args = opts.init(opts_data,add_opts=['exact_output','use_old_ed25519'])
  78. if not 1 <= len(cmd_args) <= 2: opts.usage()
  79. addr_type = MMGenAddrType(opt.type or g.proto.dfl_mmtype)
  80. from subprocess import run,PIPE,DEVNULL
  81. def get_cmd_output(cmd,input=None):
  82. return run(cmd,input=input,stdout=PIPE,stderr=DEVNULL).stdout.decode().splitlines()
  83. def ethkey_sec2addr(sec):
  84. o = get_cmd_output(['ethkey','info',sec])
  85. return (sec,o[-1].split()[1])
  86. def keyconv_sec2addr(sec):
  87. o = get_cmd_output(['keyconv','-C',g.coin,sec.wif])
  88. return (o[1].split()[1],o[0].split()[1])
  89. def zcash_mini_sec2addr(sec):
  90. o = get_cmd_output(['zcash-mini','-key','-simple'],input=(sec.wif+'\n').encode())
  91. return (sec.wif,o[0],o[-1])
  92. def pycoin_sec2addr(sec):
  93. coin = ci.external_tests['testnet']['pycoin'][g.coin] if g.testnet else g.coin
  94. network = network_for_netcode(coin)
  95. key = network.keys.private(secret_exponent=int(sec,16),is_compressed=addr_type.name != 'legacy')
  96. if key is None:
  97. die(1,"can't parse {}".format(sec))
  98. if addr_type.name in ('segwit','bech32'):
  99. hash160_c = key.hash160(is_compressed=True)
  100. if addr_type.name == 'segwit':
  101. p2sh_script = network.contract.for_p2pkh_wit(hash160_c)
  102. addr = network.address.for_p2s(p2sh_script)
  103. else:
  104. addr = network.address.for_p2pkh_wit(hash160_c)
  105. else:
  106. addr = key.address()
  107. return (key.wif(),addr)
  108. # pycoin/networks/all.py pycoin/networks/legacy_networks.py
  109. def init_external_prog():
  110. global b,b_desc,ext_prog,ext_sec2addr,eth,addr_type
  111. def test_support(k):
  112. if b == k: return True
  113. if b != 'ext' and b != k: return False
  114. if g.coin in ci.external_tests['mainnet'][k] and not g.testnet: return True
  115. if g.coin in ci.external_tests['testnet'][k]: return True
  116. return False
  117. if b == 'zcash_mini' or addr_type.name == 'zcash_z':
  118. ext_sec2addr = zcash_mini_sec2addr
  119. ext_prog = 'zcash_mini'
  120. init_coin('zec')
  121. addr_type = MMGenAddrType('Z')
  122. elif test_support('ethkey'): # build with 'cargo build -p ethkey-cli --release'
  123. ext_sec2addr = ethkey_sec2addr
  124. ext_prog = 'ethkey'
  125. elif test_support('pycoin'):
  126. global network_for_netcode
  127. try:
  128. from pycoin.networks.registry import network_for_netcode
  129. except:
  130. raise ImportError("Unable to import pycoin.networks.registry Is pycoin installed and up-to-date?")
  131. ext_sec2addr = pycoin_sec2addr
  132. ext_prog = 'pycoin'
  133. elif test_support('keyconv'):
  134. ext_sec2addr = keyconv_sec2addr
  135. ext_prog = 'keyconv'
  136. else:
  137. m = '{}: coin supported by MMGen but unsupported by gentest.py for {}'
  138. raise ValueError(m.format(g.coin,('mainnet','testnet')[g.testnet]))
  139. b_desc = ext_prog
  140. b = 'ext'
  141. def match_error(sec,wif,a_addr,b_addr,a,b):
  142. qmsg_r(red('\nERROR: Values do not match!'))
  143. die(3,"""
  144. sec key : {}
  145. WIF key : {}
  146. {a:10}: {}
  147. {b:10}: {}
  148. """.format(sec,wif,a_addr,b_addr,pnm=g.proj_name,a=kg_a.desc,b=b_desc).rstrip())
  149. def compare_test():
  150. for k in ('segwit','compressed'):
  151. if b == 'ext' and addr_type.name == k and g.coin not in ci.external_tests_segwit_compressed[k]:
  152. m = 'skipping - external program does not support {} for coin {}'
  153. msg(m.format(addr_type.name.capitalize(),g.coin))
  154. return
  155. if 'ext_prog' in globals():
  156. if g.coin not in ci.external_tests[('mainnet','testnet')[g.testnet]][ext_prog]:
  157. msg("Coin '{}' incompatible with external generator '{}'".format(g.coin,ext_prog))
  158. return
  159. last_t = time.time()
  160. A = kg_a.desc
  161. B = ext_prog if b == 'ext' else kg_b.desc
  162. if A == B:
  163. msg('skipping - generation methods A and B are the same ({})'.format(A))
  164. return
  165. m = "Comparing address generators '{}' and '{}' for coin {}, addrtype {!r}"
  166. qmsg(green(m.format(A,B,g.coin,addr_type.name)))
  167. for i in range(rounds):
  168. if opt.verbose or time.time() - last_t >= 0.1:
  169. qmsg_r('\rRound {}/{} '.format(i+1,rounds))
  170. last_t = time.time()
  171. sec = PrivKey(os.urandom(32),compressed=addr_type.compressed,pubkey_type=addr_type.pubkey_type)
  172. ph = kg_a.to_pubhex(sec)
  173. a_addr = ag.to_addr(ph)
  174. if addr_type.name == 'zcash_z':
  175. a_vk = ag.to_viewkey(ph)
  176. if b == 'ext':
  177. if addr_type.name == 'zcash_z':
  178. b_wif,b_addr,b_vk = ext_sec2addr(sec)
  179. vmsg_r('\nvkey: {}'.format(b_vk))
  180. if b_vk != a_vk:
  181. match_error(sec,sec.wif,a_vk,b_vk,a,b)
  182. else:
  183. b_wif,b_addr = ext_sec2addr(sec)
  184. if b_wif != sec.wif:
  185. match_error(sec,sec.wif,sec.wif,b_wif,a,b)
  186. else:
  187. b_addr = ag.to_addr(kg_b.to_pubhex(sec))
  188. vmsg('\nkey: {}\naddr: {}\n'.format(sec.wif,a_addr))
  189. if a_addr != b_addr:
  190. match_error(sec,sec.wif,a_addr,b_addr,a,ext_prog if b == 'ext' else b)
  191. qmsg_r('\rRound {}/{} '.format(i+1,rounds))
  192. qmsg(green(('\n','')[bool(opt.verbose)] + 'OK'))
  193. def speed_test():
  194. m = "Testing speed of address generator '{}' for coin {}"
  195. qmsg(green(m.format(kg_a.desc,g.coin)))
  196. from struct import pack,unpack
  197. seed = os.urandom(28)
  198. print('Incrementing key with each round')
  199. print('Starting key:', (seed + pack('I',0)).hex())
  200. import time
  201. start = last_t = time.time()
  202. for i in range(rounds):
  203. if time.time() - last_t >= 0.1:
  204. qmsg_r('\rRound {}/{} '.format(i+1,rounds))
  205. last_t = time.time()
  206. sec = PrivKey(seed+pack('I',i),compressed=addr_type.compressed,pubkey_type=addr_type.pubkey_type)
  207. a_addr = ag.to_addr(kg_a.to_pubhex(sec))
  208. vmsg('\nkey: {}\naddr: {}\n'.format(sec.wif,a_addr))
  209. qmsg_r('\rRound {}/{} '.format(i+1,rounds))
  210. qmsg('\n{} addresses generated in {:.2f} seconds'.format(rounds,time.time()-start))
  211. def dump_test():
  212. m = "Comparing output of address generator '{}' against wallet dump '{}'"
  213. qmsg(green(m.format(kg_a.desc,cmd_args[1])))
  214. for n,[wif,a_addr] in enumerate(dump,1):
  215. qmsg_r('\rKey {}/{} '.format(n,len(dump)))
  216. try:
  217. sec = PrivKey(wif=wif)
  218. except:
  219. die(2,'\nInvalid {}net WIF address in dump file: {}'.format(('main','test')[g.testnet],wif))
  220. b_addr = ag.to_addr(kg_a.to_pubhex(sec))
  221. vmsg('\nwif: {}\naddr: {}\n'.format(wif,b_addr))
  222. if a_addr != b_addr:
  223. match_error(sec,wif,a_addr,b_addr,3,a)
  224. qmsg(green(('\n','')[bool(opt.verbose)] + 'OK'))
  225. # begin execution
  226. from mmgen.protocol import init_coin
  227. from mmgen.altcoin import CoinInfo as ci
  228. urounds,fh = None,None
  229. dump = []
  230. if len(cmd_args) == 2:
  231. try:
  232. urounds = int(cmd_args[1])
  233. assert urounds > 0
  234. except:
  235. try:
  236. fh = open(cmd_args[1])
  237. except:
  238. die(1,'Second argument must be filename or positive integer')
  239. else:
  240. for line in fh.readlines():
  241. if 'addr=' in line:
  242. x,addr = line.split('addr=')
  243. dump.append([x.split()[0],addr.split()[0]])
  244. if urounds: rounds = urounds
  245. a,b = None,None
  246. b_desc = 'unknown'
  247. try:
  248. a,b = cmd_args[0].split(':')
  249. except:
  250. try:
  251. a = cmd_args[0]
  252. a = int(a)
  253. assert 1 <= a <= len(g.key_generators)
  254. except:
  255. die(1,'First argument must be one or two generator IDs, colon separated')
  256. else:
  257. try:
  258. a = int(a)
  259. assert 1 <= a <= len(g.key_generators),'{}: invalid key generator'.format(a)
  260. if b in ('ext','ethkey','pycoin','keyconv','zcash_mini'):
  261. init_external_prog()
  262. else:
  263. b = int(b)
  264. assert 1 <= b <= len(g.key_generators),'{}: invalid key generator'.format(b)
  265. assert a != b,'Key generators are the same!'
  266. except Exception as e:
  267. die(1,'{}\n{}: invalid generator argument'.format(e.args[0],cmd_args[0]))
  268. from mmgen.addr import KeyGenerator,AddrGenerator
  269. from mmgen.obj import PrivKey
  270. kg_a = KeyGenerator(addr_type,a)
  271. ag = AddrGenerator(addr_type)
  272. if a and b:
  273. if opt.all:
  274. from mmgen.protocol import init_genonly_altcoins,CoinProtocol
  275. init_genonly_altcoins('btc',trust_level=0)
  276. mmgen_supported = CoinProtocol.get_valid_coins(upcase=True)
  277. for coin in ci.external_tests[('mainnet','testnet')[g.testnet]][ext_prog]:
  278. if coin not in mmgen_supported: continue
  279. init_coin(coin)
  280. if addr_type not in g.proto.mmtypes:
  281. addr_type = MMGenAddrType(g.proto.dfl_mmtype)
  282. kg_a = KeyGenerator(addr_type,a)
  283. ag = AddrGenerator(addr_type)
  284. compare_test()
  285. else:
  286. if b != 'ext':
  287. kg_b = KeyGenerator(addr_type,b)
  288. b_desc = kg_b.desc
  289. compare_test()
  290. elif a and not fh:
  291. speed_test()
  292. elif a and dump:
  293. b_desc = 'dump'
  294. dump_test()
  295. else:
  296. die(2,'Illegal invocation')