Matt Hess
7f01cafc62
Crypto Backend Refactoring
──────────────────────────
- Delete src/ed25519.js — all scalar/point operations now route through
the crypto provider (WASM/FFI/JSI backends only)
- Remove duplicate JS BigInt implementations of scReduce32, scReduce64,
scalarAdd, scalarMul from scanning.js, carrot.js, and carrot-scanning.js;
delegate to Rust backend via crypto/index.js
- Remove debug/test exports from index.js (randomPoint, testDouble,
getBasePoint, isOnCurve, etc.) that were only used during development
- Rebuild WASM binary (476KB → 487KB) with updated Rust crate
Consolidated CryptoNote Scanner (cn_scan)
─────────────────────────────────────────
- New Rust module crates/salvium-crypto/src/cn_scan.rs replaces 5-12
individual FFI round-trips per output with a single native call:
view tag check → derive subaddress pubkey → subaddress map lookup →
amount decryption → commitment mask → key image generation
- FFI wrapper salvium_cn_scan_output in ffi.rs + C header declaration
- FFI backend scanCnOutput() with full subaddress map marshaling
(32-byte key + u32 major/minor LE per entry) and JSON result parsing
- JSI backend delegation via this.native.cnScanOutput()
- wallet-sync.js _scanCNOutput() tries native path first when available
(FFI/JSI), falls through to existing JS pipeline for WASM/JS backends
- Change pub(crate) visibility on subaddress.rs cn_subaddress_secret_key
- 8 Rust unit tests covering view tag, amount, commitment mask,
subaddress matching, and key image generation
- Verified identical results: WASM (JS fallback) and FFI (native cn_scan)
produce same 964 outputs at same chain height; FFI is 3x faster sync
(0.8s vs 2.5s) with 12x less heap (12MB vs 150MB)
RCT Batch Signature Verification
─────────────────────────────────
- New Rust module crates/salvium-crypto/src/rct_verify.rs — single-call
verification of all ring signatures in a transaction (CLSAG + TCLSAG),
avoiding N individual JS↔Rust boundary crossings
- Computes pre-MLSAG message hash matching C++ get_pre_mlsag_hash
- FFI export salvium_verify_rct_signatures with flat byte array interface
- FFI backend verifyRctSignatures() method
- JS backend stub returns null (validation.js handles JS fallback)
- validation.js: 200+ lines of RCT verification logic including
flattenKeyImages, packTclsagSigsFlat, packClsagSigsFlat helpers
Transaction Expansion
─────────────────────
- transaction.js: add expandTransaction() matching C++ expand_transaction_2
(copies key images from prefix inputs into TCLSAG/CLSAG signature structs)
- New test/expand-transaction.test.js (634 lines)
- New test/rct-verify-testnet.test.js (430 lines)
Mining Resilience
─────────────────
- salvium-miner main.rs: retry get_info and get_block_template up to 5
times with 2s delay for transient daemon errors
- full-testnet.js mineTo(): retry miner up to 3 times with 3s delay,
check for partial progress between attempts
Testnet Tooling
───────────────
- sync-only.js: CRYPTO_BACKEND env var for A/B testing (wasm vs ffi)
- full-testnet.js: daemon URL update (node12.whiskymine.io)
- Debug scripts for cn_scan development (debug-cn-scan/marshal/match/wasm)
- Android .gitignore and build-bundle.sh for mobile builds
46 lines
1.9 KiB
JavaScript
46 lines
1.9 KiB
JavaScript
import { setCryptoBackend, getCryptoBackend, generateKeyDerivation, deriveSubaddressPublicKey } from '../src/crypto/index.js';
|
|
import { loadWalletFromFile } from './test-helpers.js';
|
|
import { DaemonRPC } from '../src/rpc/daemon.js';
|
|
import { bytesToHex, hexToBytes } from '../src/address.js';
|
|
|
|
await setCryptoBackend('wasm');
|
|
const w = await loadWalletFromFile(process.env.HOME + '/testnet-wallet/wallet-a.json', 'testnet');
|
|
w.setDaemon(new DaemonRPC({ url: 'http://node12.whiskymine.io:29081' }));
|
|
const ws = w._ensureSync();
|
|
|
|
// Count calls to different stages
|
|
let totalCalls = 0, viewTagReject = 0, derivFail = 0, noSubaddr = 0, found = 0;
|
|
let nativeAttempt = 0, nativeNull = 0;
|
|
|
|
const origScan = ws._scanCNOutput.bind(ws);
|
|
ws._scanCNOutput = async function(output, outputIndex, tx, txHash, txPubKey, header, precomputedDerivation) {
|
|
totalCalls++;
|
|
|
|
// Replicate the logic to find where it fails
|
|
const outputPubKey = ws._extractOutputPubKey(output);
|
|
if (!outputPubKey) { return null; }
|
|
|
|
const derivation = precomputedDerivation || generateKeyDerivation(txPubKey, ws.keys.viewSecretKey);
|
|
if (!derivation) { derivFail++; return null; }
|
|
|
|
// Check if native scan path is taken
|
|
const backend = getCryptoBackend();
|
|
if (typeof backend.scanCnOutput === 'function') {
|
|
nativeAttempt++;
|
|
const r = backend.scanCnOutput(outputPubKey, derivation, outputIndex, output.viewTag,
|
|
tx.rct?.type ?? 0, undefined, undefined, ws.keys.spendSecretKey, ws.keys.viewSecretKey, ws.subaddresses);
|
|
if (r === null) nativeNull++;
|
|
}
|
|
|
|
// Call original
|
|
return origScan(output, outputIndex, tx, txHash, txPubKey, header, precomputedDerivation);
|
|
};
|
|
|
|
await w.syncWithDaemon();
|
|
const storage = w._ensureStorage();
|
|
|
|
console.log('Backend:', getCryptoBackend().name);
|
|
console.log('Total CN scans:', totalCalls);
|
|
console.log('Native attempts:', nativeAttempt, 'null:', nativeNull);
|
|
console.log('Storage outputs:', storage._outputs.size);
|