Bitcoin Core 31.99.0
P2P Digital Currency
secp256k1.h
Go to the documentation of this file.
1#ifndef SECP256K1_H
2#define SECP256K1_H
3
4#ifdef __cplusplus
5extern "C" {
6#endif
7
8#include <stddef.h>
9#include <stdint.h>
10
52
62typedef struct secp256k1_pubkey {
63 unsigned char data[64];
65
76 unsigned char data[64];
78
96 unsigned char *nonce32,
97 const unsigned char *msg32,
98 const unsigned char *key32,
99 const unsigned char *algo16,
100 void *data,
101 unsigned int attempt
102);
103
104/* When this header is used at build-time the SECP256K1_BUILD define needs to be set
105 * to correctly setup export attributes and nullness checks. This is normally done
106 * by secp256k1.c but to guard against this header being included before secp256k1.c
107 * has had a chance to set the define (e.g. via test harnesses that just includes
108 * secp256k1.c) we set SECP256K1_NO_BUILD when this header is processed without the
109 * BUILD define so this condition can be caught.
110 */
111#ifndef SECP256K1_BUILD
112# define SECP256K1_NO_BUILD
113#endif
114
115/* Symbol visibility. */
116#if !defined(SECP256K1_API) && defined(SECP256K1_NO_API_VISIBILITY_ATTRIBUTES)
117 /* The user has requested that we don't specify visibility attributes in
118 * the public API.
119 *
120 * Since all our non-API declarations use the static qualifier, this means
121 * that the user can use -fvisibility=<value> to set the visibility of the
122 * API symbols. For instance, -fvisibility=hidden can be useful *even for
123 * the API symbols*, e.g., when building a static library which is linked
124 * into a shared library, and the latter should not re-export the
125 * libsecp256k1 API.
126 *
127 * While visibility is a concept that applies only to shared libraries,
128 * setting visibility will still make a difference when building a static
129 * library: the visibility settings will be stored in the static library,
130 * solely for the potential case that the static library will be linked into
131 * a shared library. In that case, the stored visibility settings will
132 * resurface and be honored for the shared library. */
133# define SECP256K1_API extern
134#endif
135#if !defined(SECP256K1_API)
136# if defined(SECP256K1_BUILD)
137 /* On Windows, assume a shared library only if explicitly requested.
138 * 1. If using Libtool, it defines DLL_EXPORT automatically.
139 * 2. In other cases, SECP256K1_DLL_EXPORT must be defined. */
140# if defined(_WIN32) && (defined(SECP256K1_DLL_EXPORT) || defined(DLL_EXPORT))
141 /* GCC for Windows (e.g., MinGW) accepts the __declspec syntax for
142 * MSVC compatibility. A __declspec declaration implies (but is not
143 * exactly equivalent to) __attribute__ ((visibility("default"))),
144 * and so we actually want __declspec even on GCC, see "Microsoft
145 * Windows Function Attributes" in the GCC manual and the
146 * recommendations in https://gcc.gnu.org/wiki/Visibility . */
147# define SECP256K1_API extern __declspec(dllexport)
148 /* Avoid __attribute__ ((visibility("default"))) on Windows to get rid
149 * of warnings when compiling with -flto due to a bug in GCC, see
150 * https://gcc.gnu.org/bugzilla/show_bug.cgi?id=116478 . */
151# elif !defined(_WIN32) && defined (__GNUC__) && (__GNUC__ >= 4)
152# define SECP256K1_API extern __attribute__ ((visibility("default")))
153# else
154# define SECP256K1_API extern
155# endif
156# else
157 /* On Windows, SECP256K1_STATIC must be defined when consuming
158 * libsecp256k1 as a static library. Note that SECP256K1_STATIC is a
159 * "consumer-only" macro, and it has no meaning when building
160 * libsecp256k1. */
161# if defined(_WIN32) && !defined(SECP256K1_STATIC)
162# define SECP256K1_API extern __declspec(dllimport)
163# else
164# define SECP256K1_API extern
165# endif
166# endif
167#endif
168
169/* Warning attributes
170 * NONNULL is not used if SECP256K1_BUILD is set to avoid the compiler optimizing out
171 * some paranoid null checks. */
172# if defined(__GNUC__)
173# define SECP256K1_WARN_UNUSED_RESULT __attribute__ ((__warn_unused_result__))
174# else
175# define SECP256K1_WARN_UNUSED_RESULT
176# endif
177# if !defined(SECP256K1_BUILD) && defined(__GNUC__)
178# define SECP256K1_ARG_NONNULL(_x) __attribute__ ((__nonnull__(_x)))
179# else
180# define SECP256K1_ARG_NONNULL(_x)
181# endif
182
183/* Attribute for marking functions, types, and variables as deprecated */
184#if !defined(SECP256K1_BUILD) && defined(__has_attribute)
185# if __has_attribute(__deprecated__)
186# define SECP256K1_DEPRECATED(_msg) __attribute__ ((__deprecated__(_msg)))
187# else
188# define SECP256K1_DEPRECATED(_msg)
189# endif
190#else
191# define SECP256K1_DEPRECATED(_msg)
192#endif
193
194/* All flags' lower 8 bits indicate what they're for. Do not use directly. */
195#define SECP256K1_FLAGS_TYPE_MASK ((1 << 8) - 1)
196#define SECP256K1_FLAGS_TYPE_CONTEXT (1 << 0)
197#define SECP256K1_FLAGS_TYPE_COMPRESSION (1 << 1)
198/* The higher bits contain the actual data. Do not use directly. */
199#define SECP256K1_FLAGS_BIT_CONTEXT_VERIFY (1 << 8)
200#define SECP256K1_FLAGS_BIT_CONTEXT_SIGN (1 << 9)
201#define SECP256K1_FLAGS_BIT_CONTEXT_DECLASSIFY (1 << 10)
202#define SECP256K1_FLAGS_BIT_COMPRESSION (1 << 8)
203
206#define SECP256K1_CONTEXT_NONE (SECP256K1_FLAGS_TYPE_CONTEXT)
207
209#define SECP256K1_CONTEXT_VERIFY (SECP256K1_FLAGS_TYPE_CONTEXT | SECP256K1_FLAGS_BIT_CONTEXT_VERIFY)
210#define SECP256K1_CONTEXT_SIGN (SECP256K1_FLAGS_TYPE_CONTEXT | SECP256K1_FLAGS_BIT_CONTEXT_SIGN)
211
212/* Testing flag. Do not use. */
213#define SECP256K1_CONTEXT_DECLASSIFY (SECP256K1_FLAGS_TYPE_CONTEXT | SECP256K1_FLAGS_BIT_CONTEXT_DECLASSIFY)
214
216#define SECP256K1_EC_COMPRESSED (SECP256K1_FLAGS_TYPE_COMPRESSION | SECP256K1_FLAGS_BIT_COMPRESSION)
217#define SECP256K1_EC_UNCOMPRESSED (SECP256K1_FLAGS_TYPE_COMPRESSION)
218
220#define SECP256K1_TAG_PUBKEY_EVEN 0x02
221#define SECP256K1_TAG_PUBKEY_ODD 0x03
222#define SECP256K1_TAG_PUBKEY_UNCOMPRESSED 0x04
223#define SECP256K1_TAG_PUBKEY_HYBRID_EVEN 0x06
224#define SECP256K1_TAG_PUBKEY_HYBRID_ODD 0x07
225
238
256
257
284 unsigned int flags
286
300 const secp256k1_context *ctx
302
320
362 void (*fun)(const char *message, void *data),
363 const void *data
365
391 void (*fun)(const char *message, void *data),
392 const void *data
394
408 uint32_t *state,
409 const unsigned char *blocks64,
410 size_t n_blocks
411);
412
449
465 const secp256k1_context *ctx,
466 secp256k1_pubkey *pubkey,
467 const unsigned char *input,
468 size_t inputlen
470
487 const secp256k1_context *ctx,
488 unsigned char *output,
489 size_t *outputlen,
490 const secp256k1_pubkey *pubkey,
491 unsigned int flags
493
504 const secp256k1_context *ctx,
505 const secp256k1_pubkey *pubkey1,
506 const secp256k1_pubkey *pubkey2
508
518 const secp256k1_context *ctx,
519 const secp256k1_pubkey **pubkeys,
520 size_t n_pubkeys
522
539 const secp256k1_context *ctx,
541 const unsigned char *input64
543
560 const secp256k1_context *ctx,
562 const unsigned char *input,
563 size_t inputlen
565
578 const secp256k1_context *ctx,
579 unsigned char *output,
580 size_t *outputlen,
583
594 const secp256k1_context *ctx,
595 unsigned char *output64,
598
625 const secp256k1_context *ctx,
626 const secp256k1_ecdsa_signature *sig,
627 const unsigned char *msghash32,
628 const secp256k1_pubkey *pubkey
630
673 const secp256k1_context *ctx,
675 const secp256k1_ecdsa_signature *sigin
677
683
686
706 const secp256k1_context *ctx,
708 const unsigned char *msghash32,
709 const unsigned char *seckey,
711 const void *ndata
713
729 const secp256k1_context *ctx,
730 const unsigned char *seckey
732
742 const secp256k1_context *ctx,
743 secp256k1_pubkey *pubkey,
744 const unsigned char *seckey
746
758 const secp256k1_context *ctx,
759 unsigned char *seckey
761
769 const secp256k1_context *ctx,
770 secp256k1_pubkey *pubkey
772
789 const secp256k1_context *ctx,
790 unsigned char *seckey,
791 const unsigned char *tweak32
793
808 const secp256k1_context *ctx,
809 secp256k1_pubkey *pubkey,
810 const unsigned char *tweak32
812
827 const secp256k1_context *ctx,
828 unsigned char *seckey,
829 const unsigned char *tweak32
831
844 const secp256k1_context *ctx,
845 secp256k1_pubkey *pubkey,
846 const unsigned char *tweak32
848
883 const unsigned char *seed32
885
896 const secp256k1_context *ctx,
898 const secp256k1_pubkey * const *ins,
899 size_t n
901
919 const secp256k1_context *ctx,
920 unsigned char *hash32,
921 const unsigned char *tag,
922 size_t taglen,
923 const unsigned char *msg,
924 size_t msglen
926
927#ifdef __cplusplus
928}
929#endif
930
931#endif /* SECP256K1_H */
int flags
Definition: bitcoin-tx.cpp:530
static const PrecomputedData data
Precomputed COutPoint and CCoins values.
SECP256K1_API void secp256k1_context_destroy(secp256k1_context *ctx) SECP256K1_ARG_NONNULL(1)
Destroy a secp256k1 context object (created in dynamically allocated memory).
Definition: secp256k1.c:189
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_seckey_tweak_mul(const secp256k1_context *ctx, unsigned char *seckey, const unsigned char *tweak32) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Tweak a secret key by multiplying it by a tweak.
Definition: secp256k1.c:736
#define SECP256K1_ARG_NONNULL(_x)
Definition: secp256k1.h:180
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_context_randomize(secp256k1_context *ctx, const unsigned char *seed32) SECP256K1_ARG_NONNULL(1)
Randomizes the context to provide enhanced protection against side-channel leakage.
Definition: secp256k1.c:779
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_combine(const secp256k1_context *ctx, secp256k1_pubkey *out, const secp256k1_pubkey *const *ins, size_t n) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Add a number of public keys together.
Definition: secp256k1.c:789
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_seckey_negate(const secp256k1_context *ctx, unsigned char *seckey) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2)
Negates a secret key in place.
Definition: secp256k1.c:654
SECP256K1_API const secp256k1_nonce_function secp256k1_nonce_function_default
A default safe nonce generation function (currently equal to secp256k1_nonce_function_rfc6979).
Definition: secp256k1.h:685
SECP256K1_API int secp256k1_ecdsa_signature_parse_compact(const secp256k1_context *ctx, secp256k1_ecdsa_signature *sig, const unsigned char *input64) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Parse an ECDSA signature in compact (64 bytes) format.
Definition: secp256k1.c:411
SECP256K1_API int secp256k1_ec_pubkey_serialize(const secp256k1_context *ctx, unsigned char *output, size_t *outputlen, const secp256k1_pubkey *pubkey, unsigned int flags) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4)
Serialize a pubkey object into a serialized byte sequence.
Definition: secp256k1.c:286
SECP256K1_API void secp256k1_context_set_error_callback(secp256k1_context *ctx, void(*fun)(const char *message, void *data), const void *data) SECP256K1_ARG_NONNULL(1)
Set a callback function to be called when an internal consistency check fails.
Definition: secp256k1.c:213
SECP256K1_API int secp256k1_ec_pubkey_negate(const secp256k1_context *ctx, secp256k1_pubkey *pubkey) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2)
Negates a public key in place.
Definition: secp256k1.c:669
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_cmp(const secp256k1_context *ctx, const secp256k1_pubkey *pubkey1, const secp256k1_pubkey *pubkey2) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Compare two public keys using lexicographic (of compressed serialization) order.
Definition: secp256k1.c:312
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_seckey_verify(const secp256k1_context *ctx, const unsigned char *seckey) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2)
Verify an elliptic curve secret key.
Definition: secp256k1.c:615
SECP256K1_API secp256k1_context * secp256k1_context_create(unsigned int flags) SECP256K1_WARN_UNUSED_RESULT
Create a secp256k1 context object (in dynamically allocated memory).
Definition: secp256k1.c:143
SECP256K1_API void secp256k1_context_set_illegal_callback(secp256k1_context *ctx, void(*fun)(const char *message, void *data), const void *data) SECP256K1_ARG_NONNULL(1)
Set a callback function to be called when an illegal argument is passed to an API call.
Definition: secp256k1.c:201
#define SECP256K1_API
Definition: secp256k1.h:164
SECP256K1_API int secp256k1_ecdsa_sign(const secp256k1_context *ctx, secp256k1_ecdsa_signature *sig, const unsigned char *msghash32, const unsigned char *seckey, secp256k1_nonce_function noncefp, const void *ndata) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4)
Create an ECDSA signature.
Definition: secp256k1.c:601
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_parse(const secp256k1_context *ctx, secp256k1_pubkey *pubkey, const unsigned char *input, size_t inputlen) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Parse a variable-length public key into the pubkey object.
Definition: secp256k1.c:268
int(* secp256k1_nonce_function)(unsigned char *nonce32, const unsigned char *msg32, const unsigned char *key32, const unsigned char *algo16, void *data, unsigned int attempt)
A pointer to a function to deterministically generate a nonce.
Definition: secp256k1.h:95
SECP256K1_API int secp256k1_ecdsa_signature_parse_der(const secp256k1_context *ctx, secp256k1_ecdsa_signature *sig, const unsigned char *input, size_t inputlen) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Parse a DER ECDSA signature.
Definition: secp256k1.c:395
SECP256K1_API void secp256k1_selftest(void)
Perform basic self tests (to be used in conjunction with secp256k1_context_static)
Definition: secp256k1.c:87
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_create(const secp256k1_context *ctx, secp256k1_pubkey *pubkey, const unsigned char *seckey) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Compute the public key for a secret key.
Definition: secp256k1.c:636
struct secp256k1_pubkey secp256k1_pubkey
Opaque data structure that holds a parsed and valid public key.
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ecdsa_verify(const secp256k1_context *ctx, const secp256k1_ecdsa_signature *sig, const unsigned char *msghash32, const secp256k1_pubkey *pubkey) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4)
Verify an ECDSA signature.
Definition: secp256k1.c:476
void(* secp256k1_sha256_compression_function)(uint32_t *state, const unsigned char *blocks64, size_t n_blocks)
A pointer to a function implementing SHA256's internal compression function.
Definition: secp256k1.h:407
SECP256K1_API int secp256k1_tagged_sha256(const secp256k1_context *ctx, unsigned char *hash32, const unsigned char *tag, size_t taglen, const unsigned char *msg, size_t msglen) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(5)
Compute a tagged hash as defined in BIP-340.
Definition: secp256k1.c:815
SECP256K1_API const secp256k1_context *const secp256k1_context_static
A built-in constant secp256k1 context object with static storage duration, to be used in conjunction ...
Definition: secp256k1.h:237
SECP256K1_API int secp256k1_ecdsa_signature_normalize(const secp256k1_context *ctx, secp256k1_ecdsa_signature *sigout, const secp256k1_ecdsa_signature *sigin) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(3)
Convert a signature to a normalized lower-S form.
Definition: secp256k1.c:457
SECP256K1_API secp256k1_context * secp256k1_context_clone(const secp256k1_context *ctx) SECP256K1_ARG_NONNULL(1) SECP256K1_WARN_UNUSED_RESULT
Copy a secp256k1 context object (into dynamically allocated memory).
Definition: secp256k1.c:165
SECP256K1_API void secp256k1_context_set_sha256_compression(secp256k1_context *ctx, secp256k1_sha256_compression_function fn_compression) SECP256K1_ARG_NONNULL(1)
Set a callback function to override the internal SHA256 compression function.
Definition: secp256k1.c:225
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_tweak_add(const secp256k1_context *ctx, secp256k1_pubkey *pubkey, const unsigned char *tweak32) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Tweak a public key by adding tweak times the generator to it.
Definition: secp256k1.c:719
SECP256K1_API const secp256k1_nonce_function secp256k1_nonce_function_rfc6979
An implementation of RFC6979 (using HMAC-SHA256) as nonce generation function.
Definition: secp256k1.h:682
SECP256K1_API int secp256k1_ecdsa_signature_serialize_der(const secp256k1_context *ctx, unsigned char *output, size_t *outputlen, const secp256k1_ecdsa_signature *sig) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4)
Serialize an ECDSA signature in DER format.
Definition: secp256k1.c:432
struct secp256k1_ecdsa_signature secp256k1_ecdsa_signature
Opaque data structure that holds a parsed ECDSA signature.
SECP256K1_API int secp256k1_ec_pubkey_sort(const secp256k1_context *ctx, const secp256k1_pubkey **pubkeys, size_t n_pubkeys) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2)
Sort public keys using lexicographic (of compressed serialization) order.
Definition: secp256k1.c:344
#define SECP256K1_WARN_UNUSED_RESULT
Definition: secp256k1.h:175
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_seckey_tweak_add(const secp256k1_context *ctx, unsigned char *seckey, const unsigned char *tweak32) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Tweak a secret key by adding tweak to it.
Definition: secp256k1.c:696
SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_tweak_mul(const secp256k1_context *ctx, secp256k1_pubkey *pubkey, const unsigned char *tweak32) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Tweak a public key by multiplying it by a tweak value.
Definition: secp256k1.c:756
SECP256K1_API int secp256k1_ecdsa_signature_serialize_compact(const secp256k1_context *ctx, unsigned char *output64, const secp256k1_ecdsa_signature *sig) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)
Serialize an ECDSA signature in compact (64 byte) format.
Definition: secp256k1.c:444
Opaque data structure that holds a parsed ECDSA signature.
Definition: secp256k1.h:75
unsigned char data[64]
Definition: secp256k1.h:76
Opaque data structure that holds a parsed and valid public key.
Definition: secp256k1.h:62
unsigned char data[64]
Definition: secp256k1.h:63