1const chai = require("chai");
 2
 3const eddsa = require("../src/eddsa.js");
 4const babyJub = require("../src/babyjub.js");
 5
 6const assert = chai.assert;
 7
 8const utils = require("ffjavascript").utils;
 9
10describe("EdDSA js test", function () {
11
12    this.timeout(100000);
13
14    it("Sign (using Mimc7) a single 10 bytes from 0 to 9", () => {
15        const msgBuf = Buffer.from("00010203040506070809", "hex");
16        const msg = utils.leBuff2int(msgBuf);
17
18        //  const prvKey = crypto.randomBytes(32);
19
20        const prvKey = Buffer.from("0001020304050607080900010203040506070809000102030405060708090001", "hex");
21
22        const pubKey = eddsa.prv2pub(prvKey);
23
24        assert.equal(pubKey[0].toString(),
25            "13277427435165878497778222415993513565335242147425444199013288855685581939618");
26        assert.equal(pubKey[1].toString(),
27            "13622229784656158136036771217484571176836296686641868549125388198837476602820");
28
29        const pPubKey = babyJub.packPoint(pubKey);
30
31        const signature = eddsa.signMiMC(prvKey, msg);
32        assert.equal(signature.R8[0].toString(),
33            "11384336176656855268977457483345535180380036354188103142384839473266348197733");
34        assert.equal(signature.R8[1].toString(),
35            "15383486972088797283337779941324724402501462225528836549661220478783371668959");
36        assert.equal(signature.S.toString(),
37            "2523202440825208709475937830811065542425109372212752003460238913256192595070");
38
39        const pSignature = eddsa.packSignature(signature);
40        assert.equal(pSignature.toString("hex"), ""+
41            "dfedb4315d3f2eb4de2d3c510d7a987dcab67089c8ace06308827bf5bcbe02a2"+
42            "7ed40dab29bf993c928e789d007387998901a24913d44fddb64b1f21fc149405");
43
44        const uSignature = eddsa.unpackSignature(pSignature);
45        assert(eddsa.verifyMiMC(msg, uSignature, pubKey));
46
47    });
48
49    it("Sign (using Poseidon) a single 10 bytes from 0 to 9", () => {
50        const msgBuf = Buffer.from("00010203040506070809", "hex");
51        const msg = utils.leBuff2int(msgBuf);
52
53        const prvKey = Buffer.from("0001020304050607080900010203040506070809000102030405060708090001", "hex");
54
55        const pubKey = eddsa.prv2pub(prvKey);
56
57        assert.equal(pubKey[0].toString(),
58            "13277427435165878497778222415993513565335242147425444199013288855685581939618");
59        assert.equal(pubKey[1].toString(),
60            "13622229784656158136036771217484571176836296686641868549125388198837476602820");
61
62        const pPubKey = babyJub.packPoint(pubKey);
63
64        const signature = eddsa.signPoseidon(prvKey, msg);
65        assert.equal(signature.R8[0].toString(),
66            "11384336176656855268977457483345535180380036354188103142384839473266348197733");
67        assert.equal(signature.R8[1].toString(),
68            "15383486972088797283337779941324724402501462225528836549661220478783371668959");
69        assert.equal(signature.S.toString(),
70            "1398758333392199195742243841591064350253744445503462896781493968760929513778");
71
72        const pSignature = eddsa.packSignature(signature);
73        assert.equal(pSignature.toString("hex"), ""+
74            "dfedb4315d3f2eb4de2d3c510d7a987dcab67089c8ace06308827bf5bcbe02a2"+
75            "32f16b0f2f4c4e1169aa59685637e1429b6581a9531d058d65f4ab224eab1703");
76
77        const uSignature = eddsa.unpackSignature(pSignature);
78        assert(eddsa.verifyPoseidon(msg, uSignature, pubKey));
79
80    });
81});