wip: ethereum sign message

Author: sdqede

templates/chain-template/package.json

@@ -38,6 +38,7 @@
     "chain-registry": "1.62.3",
     "dayjs": "1.11.11",
     "interchain-kit": "0.3.36",
+    "keccak256": "^1.0.6",
     "next": "^13",
     "node-gzip": "^1.1.2",
     "react": "18.2.0",
@@ -46,6 +47,7 @@
     "react-dropzone": "^14.2.3",
     "react-icons": "5.2.1",
     "react-markdown": "9.0.1",
+    "secp256k1": "^5.0.1",
     "zustand": "4.5.2"
   },
   "devDependencies": {

templates/chain-template/pages/api/verify-signature.ts

@@ -1,12 +1,14 @@
 import type { NextApiRequest, NextApiResponse } from 'next';
 import { verifyADR36Amino } from '@keplr-wallet/cosmos';
 import { decode } from 'bech32';
+import { createHash } from 'crypto';
 
 type RequestBody = {
   message: string;
   signature: string;
   publicKey: string;
   signer: string;
+  chainType?: string;
 }
 
 type ResponseData = {
@@ -29,7 +31,7 @@ export default function handler(
     });
   }
 
-  const { message, signature, publicKey, signer } = req.body as RequestBody;
+  const { message, signature, publicKey, signer, chainType } = req.body as RequestBody;
 
   if (!message || !signature || !publicKey || !signer) {
     return res.status(400).json({
@@ -62,18 +64,26 @@ export default function handler(
       console.warn('No timestamp found in message, skipping timestamp validation');
     }
 
-    // Convert base64 public key to Uint8Array
-    const pubKeyBytes = new Uint8Array(Buffer.from(publicKey, 'base64'));
-    // Convert base64 signature to Uint8Array
-    const signatureBytes = new Uint8Array(Buffer.from(signature, 'base64'));
+    let isValid: boolean;
 
-    const isValid = verifyADR36Amino(
-      decode(signer).prefix,
-      signer,
-      message,
-      pubKeyBytes,
-      signatureBytes
-    );
+    if (chainType === 'eip155') {
+      // Verify Ethereum personal_sign signature
+      isValid = verifyEthereumSignature(message, signature, signer);
+    } else {
+      // Verify Cosmos signature (default behavior)
+      // Convert base64 public key to Uint8Array
+      const pubKeyBytes = new Uint8Array(Buffer.from(publicKey, 'base64'));
+      // Convert base64 signature to Uint8Array
+      const signatureBytes = new Uint8Array(Buffer.from(signature, 'base64'));
+
+      isValid = verifyADR36Amino(
+        decode(signer).prefix,
+        signer,
+        message,
+        pubKeyBytes,
+        signatureBytes
+      );
+    }
 
     if (isValid) {
       return res.status(200).json({
@@ -95,6 +105,55 @@ export default function handler(
   }
 }
 
+function verifyEthereumSignature(message: string, signature: string, expectedAddress: string): boolean {
+  try {
+    const secp256k1 = require('secp256k1');
+    const { keccak256 } = require('keccak');
+
+    // Ethereum personal sign message format
+    const prefix = '\x19Ethereum Signed Message:\n';
+    const prefixedMessage = prefix + message.length + message;
+    
+    // Hash the prefixed message
+    const messageHash = keccak256(Buffer.from(prefixedMessage, 'utf8'));
+    
+    // Remove 0x prefix if present and convert to buffer
+    const sigHex = signature.startsWith('0x') ? signature.slice(2) : signature;
+    const sigBuffer = Buffer.from(sigHex, 'hex');
+    
+    if (sigBuffer.length !== 65) {
+      throw new Error('Invalid signature length');
+    }
+    
+    // Extract r, s, v from signature
+    const r = sigBuffer.slice(0, 32);
+    const s = sigBuffer.slice(32, 64);
+    let v = sigBuffer[64];
+    
+    // Handle recovery id
+    if (v < 27) {
+      v += 27;
+    }
+    const recoveryId = v - 27;
+    
+    // Combine r and s for secp256k1
+    const signature65 = new Uint8Array([...r, ...s]);
+    
+    // Recover public key
+    const publicKey = secp256k1.ecdsaRecover(signature65, recoveryId, new Uint8Array(messageHash));
+    
+    // Convert public key to address
+    const publicKeyHash = keccak256(publicKey.slice(1)); // Remove the 0x04 prefix
+    const address = '0x' + publicKeyHash.slice(-20).toString('hex');
+    
+    // Compare with expected address (case insensitive)
+    return address.toLowerCase() === expectedAddress.toLowerCase();
+    
+  } catch (error) {
+    console.error('Error verifying Ethereum signature:', error);
+    return false;
+  }
+}
 
 function extractTimestampFromMessage(message: string): string | null {
   // "Please sign this message to complete login authentication.\nTimestamp: 2023-04-30T12:34:56.789Z\nNonce: abc123"

templates/chain-template/pages/sign-message.tsx

@@ -3,14 +3,15 @@ import { Container, Button, Stack, Text, useTheme } from '@interchain-ui/react';
 import { useChain } from '@interchain-kit/react';
 import { useChainStore } from '@/contexts';
 import { useToast } from '@/hooks';
-import { CosmosWallet, ExtensionWallet } from '@interchain-kit/core';
+import { CosmosWallet, ExtensionWallet, EthereumWallet } from '@interchain-kit/core';
 
 export default function SignMessage() {
   const [message, setMessage] = useState('');
   const [loading, setLoading] = useState(false);
   const [signingIn, setSigningIn] = useState(false);
   const { selectedChain } = useChainStore();
   const { address, wallet, chain } = useChain(selectedChain);
+  console.log('chainType', chain.chainType); // cosmos or eip155
   const { toast } = useToast();
   const { theme } = useTheme();
 
@@ -54,20 +55,44 @@ export default function SignMessage() {
 
     if (!(wallet instanceof ExtensionWallet)) {
       console.log('wallet', wallet, chain.chainType);
-      return
+      // return
     }
 
     try {
       setSigningIn(true);
-      const cosmosWallet = wallet.getWalletOfType(CosmosWallet)
-
-      // Sign the message
-      const result = await cosmosWallet!.signArbitrary(chain.chainId, address, message);
-
-      // Get the public key
-      const account = await wallet?.getAccount(chain.chainId);
-      if (!account?.pubkey) {
-        throw new Error('Failed to get public key');
+      let result: { signature: string };
+      let publicKey: string;
+
+      if (chain.chainType === 'eip155') {
+        // Handle Ethereum chains
+        const ethereumWallet = wallet.getWalletOfType(EthereumWallet);
+        if (!ethereumWallet) {
+          throw new Error('Ethereum wallet not found');
+        }
+
+        // Sign the message using personal_sign
+        const signature = await ethereumWallet.signMessage(message);
+        result = { signature };
+
+        // For Ethereum, we'll derive the public key from the signature during verification
+        // So we pass the address as publicKey for now
+        publicKey = address;
+      } else {
+        // Handle Cosmos chains
+        const cosmosWallet = wallet.getWalletOfType(CosmosWallet);
+        if (!cosmosWallet) {
+          throw new Error('Cosmos wallet not found');
+        }
+
+        // Sign the message
+        result = await cosmosWallet.signArbitrary(chain.chainId, address, message);
+
+        // Get the public key
+        const account = await wallet?.getAccount(chain.chainId);
+        if (!account?.pubkey) {
+          throw new Error('Failed to get public key');
+        }
+        publicKey = Buffer.from(account.pubkey).toString('base64');
       }
 
       // Submit to API directly
@@ -79,8 +104,9 @@ export default function SignMessage() {
         body: JSON.stringify({
           message,
           signature: result.signature,
-          publicKey: Buffer.from(account.pubkey).toString('base64'),
-          signer: address
+          publicKey,
+          signer: address,
+          chainType: chain.chainType
         }),
       });
 

templates/chain-template/yarn.lock

@@ -614,6 +614,7 @@ __metadata:
     eslint-config-next: "npm:13.0.5"
     generate-lockfile: "npm:0.0.12"
     interchain-kit: "npm:0.3.36"
+    keccak256: "npm:^1.0.6"
     next: "npm:^13"
     node-gzip: "npm:^1.1.2"
     react: "npm:18.2.0"
@@ -622,6 +623,7 @@ __metadata:
     react-dropzone: "npm:^14.2.3"
     react-icons: "npm:5.2.1"
     react-markdown: "npm:9.0.1"
+    secp256k1: "npm:^5.0.1"
     starshipjs: "npm:^2.4.1"
     typescript: "npm:4.9.3"
     yaml-loader: "npm:^0.8.1"
@@ -5296,6 +5298,21 @@ __metadata:
   languageName: node
   linkType: hard
 
+"elliptic@npm:^6.5.7":
+  version: 6.6.1
+  resolution: "elliptic@npm:6.6.1"
+  dependencies:
+    bn.js: "npm:^4.11.9"
+    brorand: "npm:^1.1.0"
+    hash.js: "npm:^1.0.0"
+    hmac-drbg: "npm:^1.0.1"
+    inherits: "npm:^2.0.4"
+    minimalistic-assert: "npm:^1.0.1"
+    minimalistic-crypto-utils: "npm:^1.0.1"
+  checksum: 10c0/8b24ef782eec8b472053793ea1e91ae6bee41afffdfcb78a81c0a53b191e715cbe1292aa07165958a9bbe675bd0955142560b1a007ffce7d6c765bcaf951a867
+  languageName: node
+  linkType: hard
+
 "emoji-regex@npm:^8.0.0":
   version: 8.0.0
   resolution: "emoji-regex@npm:8.0.0"
@@ -7145,6 +7162,29 @@ __metadata:
   languageName: node
   linkType: hard
 
+"keccak256@npm:^1.0.6":
+  version: 1.0.6
+  resolution: "keccak256@npm:1.0.6"
+  dependencies:
+    bn.js: "npm:^5.2.0"
+    buffer: "npm:^6.0.3"
+    keccak: "npm:^3.0.2"
+  checksum: 10c0/2a3f1e281ffd65bcbbae2ee8d62e27f0336efe6f16b7ed9932ad642ed398da62ccbc3d38dcdf43bd2fad9885f02df501dc77a900c358644df296396ed194056f
+  languageName: node
+  linkType: hard
+
+"keccak@npm:^3.0.2":
+  version: 3.0.4
+  resolution: "keccak@npm:3.0.4"
+  dependencies:
+    node-addon-api: "npm:^2.0.0"
+    node-gyp: "npm:latest"
+    node-gyp-build: "npm:^4.2.0"
+    readable-stream: "npm:^3.6.0"
+  checksum: 10c0/153525c1c1f770beadb8f8897dec2f1d2dcbee11d063fe5f61957a5b236bfd3d2a111ae2727e443aa6a848df5edb98b9ef237c78d56df49087b0ca8a232ca9cd
+  languageName: node
+  linkType: hard
+
 "keypress@npm:0.1.x":
   version: 0.1.0
   resolution: "keypress@npm:0.1.0"
@@ -8085,6 +8125,24 @@ __metadata:
   languageName: node
   linkType: hard
 
+"node-addon-api@npm:^2.0.0":
+  version: 2.0.2
+  resolution: "node-addon-api@npm:2.0.2"
+  dependencies:
+    node-gyp: "npm:latest"
+  checksum: 10c0/ade6c097ba829fa4aee1ca340117bb7f8f29fdae7b777e343a9d5cbd548481d1f0894b7b907d23ce615c70d932e8f96154caed95c3fa935cfe8cf87546510f64
+  languageName: node
+  linkType: hard
+
+"node-addon-api@npm:^5.0.0":
+  version: 5.1.0
+  resolution: "node-addon-api@npm:5.1.0"
+  dependencies:
+    node-gyp: "npm:latest"
+  checksum: 10c0/0eb269786124ba6fad9df8007a149e03c199b3e5a3038125dfb3e747c2d5113d406a4e33f4de1ea600aa2339be1f137d55eba1a73ee34e5fff06c52a5c296d1d
+  languageName: node
+  linkType: hard
+
 "node-addon-api@npm:^7.0.0":
   version: 7.1.0
   resolution: "node-addon-api@npm:7.1.0"
@@ -8122,6 +8180,17 @@ __metadata:
   languageName: node
   linkType: hard
 
+"node-gyp-build@npm:^4.2.0":
+  version: 4.8.4
+  resolution: "node-gyp-build@npm:4.8.4"
+  bin:
+    node-gyp-build: bin.js
+    node-gyp-build-optional: optional.js
+    node-gyp-build-test: build-test.js
+  checksum: 10c0/444e189907ece2081fe60e75368784f7782cfddb554b60123743dfb89509df89f1f29c03bbfa16b3a3e0be3f48799a4783f487da6203245fa5bed239ba7407e1
+  languageName: node
+  linkType: hard
+
 "node-gyp@npm:latest":
   version: 10.1.0
   resolution: "node-gyp@npm:10.1.0"
@@ -9124,6 +9193,18 @@ __metadata:
   languageName: node
   linkType: hard
 
+"secp256k1@npm:^5.0.1":
+  version: 5.0.1
+  resolution: "secp256k1@npm:5.0.1"
+  dependencies:
+    elliptic: "npm:^6.5.7"
+    node-addon-api: "npm:^5.0.0"
+    node-gyp: "npm:latest"
+    node-gyp-build: "npm:^4.2.0"
+  checksum: 10c0/ea977fcd3a21ee10439a546774d4f3f474f065a561fc2247f65cb2a64f09628732fd606c0a62316858abd7c07b41f5aa09c37773537f233590b4cf94d752dbe7
+  languageName: node
+  linkType: hard
+
 "semver@npm:^6.3.1":
   version: 6.3.1
   resolution: "semver@npm:6.3.1"