BC_API ec_secret create_nonce(ec_secret secret, hash_digest hash) { std::reverse(hash.begin(), hash.end()); init.init(); hash_digest K {{ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }}; hash_digest V {{ 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01 }}; K = hmac_sha256_hash(V + byte_array<1>{{0x00}} + secret + hash, K); V = hmac_sha256_hash(V, K); K = hmac_sha256_hash(V + byte_array<1>{{0x01}} + secret + hash, K); V = hmac_sha256_hash(V, K); while (true) { V = hmac_sha256_hash(V, K); if (verify_private_key(V)) return V; K = hmac_sha256_hash(V + byte_array<1>{{0x00}}, K); V = hmac_sha256_hash(V, K); } }
ec_secret create_nonce(ec_secret secret, hash_digest hash, unsigned index) { init.init(); hash_digest K {{ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }}; hash_digest V {{ 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01 }}; K = hmac_sha256_hash(build_data({V, to_byte(0x00), secret, hash}), K); V = hmac_sha256_hash(V, K); K = hmac_sha256_hash(build_data({V, to_byte(0x01), secret, hash}), K); V = hmac_sha256_hash(V, K); while (true) { V = hmac_sha256_hash(V, K); if (0 == index) return V; --index; K = hmac_sha256_hash(build_data({V, to_byte(0x00)}), K); V = hmac_sha256_hash(V, K); } }