nak/key.go

package main

import (
	"encoding/hex"
	"encoding/json"
	"fmt"
	"os"
	"strings"

	"github.com/btcsuite/btcd/btcec/v2"
	"github.com/btcsuite/btcd/btcec/v2/schnorr/musig2"
	"github.com/decred/dcrd/dcrec/secp256k1/v4"
	"github.com/nbd-wtf/go-nostr"
	"github.com/nbd-wtf/go-nostr/nip19"
	"github.com/nbd-wtf/go-nostr/nip49"
	"github.com/urfave/cli/v2"
)

var key = &cli.Command{
	Name:        "key",
	Usage:       "operations on secret keys: generate, derive, encrypt, decrypt.",
	Description: ``,
	Subcommands: []*cli.Command{
		generate,
		public,
		encrypt,
		decrypt,
		combine,
	},
}

var generate = &cli.Command{
	Name:        "generate",
	Usage:       "generates a secret key",
	Description: ``,
	Action: func(c *cli.Context) error {
		sec := nostr.GeneratePrivateKey()
		stdout(sec)
		return nil
	},
}

var public = &cli.Command{
	Name:        "public",
	Usage:       "computes a public key from a secret key",
	Description: ``,
	ArgsUsage:   "[secret]",
	Action: func(c *cli.Context) error {
		for sec := range getSecretKeysFromStdinLinesOrSlice(c, c.Args().Slice()) {
			pubkey, err := nostr.GetPublicKey(sec)
			if err != nil {
				lineProcessingError(c, "failed to derive public key: %s", err)
				continue
			}
			stdout(pubkey)
		}
		return nil
	},
}

var encrypt = &cli.Command{
	Name:        "encrypt",
	Usage:       "encrypts a secret key and prints an ncryptsec code",
	Description: `uses the NIP-49 standard.`,
	ArgsUsage:   "<secret> <password>",
	Flags: []cli.Flag{
		&cli.IntFlag{
			Name:        "logn",
			Usage:       "the bigger the number the harder it will be to bruteforce the password",
			Value:       16,
			DefaultText: "16",
		},
	},
	Action: func(c *cli.Context) error {
		keys := make([]string, 0, 1)
		var password string
		switch c.Args().Len() {
		case 1:
			password = c.Args().Get(0)
		case 2:
			keys = append(keys, c.Args().Get(0))
			password = c.Args().Get(1)
		}
		if password == "" {
			return fmt.Errorf("no password given")
		}
		for sec := range getSecretKeysFromStdinLinesOrSlice(c, keys) {
			ncryptsec, err := nip49.Encrypt(sec, password, uint8(c.Int("logn")), 0x02)
			if err != nil {
				lineProcessingError(c, "failed to encrypt: %s", err)
				continue
			}
			stdout(ncryptsec)
		}
		return nil
	},
}

var decrypt = &cli.Command{
	Name:        "decrypt",
	Usage:       "takes an ncrypsec and a password and decrypts it into an nsec",
	Description: `uses the NIP-49 standard.`,
	ArgsUsage:   "<ncryptsec-code> <password>",
	Action: func(c *cli.Context) error {
		var content string
		var password string
		switch c.Args().Len() {
		case 1:
			content = ""
			password = c.Args().Get(0)
		case 2:
			content = c.Args().Get(0)
			password = c.Args().Get(1)
		}
		if password == "" {
			return fmt.Errorf("no password given")
		}
		for ncryptsec := range getStdinLinesOrArgumentsFromSlice([]string{content}) {
			sec, err := nip49.Decrypt(ncryptsec, password)
			if err != nil {
				lineProcessingError(c, "failed to decrypt: %s", err)
				continue
			}
			nsec, _ := nip19.EncodePrivateKey(sec)
			stdout(nsec)
		}
		return nil
	},
}

var combine = &cli.Command{
	Name:  "combine",
	Usage: "combines two or more pubkeys using musig2",
	Description: `The public keys must have 33 bytes (66 characters hex), with the 02 or 03 prefix. It is common in Nostr to drop that first byte, so you'll have to derive the public keys again from the private keys in order to get it back.

However, if the intent is to check if two existing Nostr pubkeys match a given combined pubkey, then it might be sufficient to calculate the combined key for all the possible combinations of pubkeys in the input.`,
	ArgsUsage: "[pubkey...]",
	Action: func(c *cli.Context) error {
		type Combination struct {
			Variants []string `json:"input_variants"`
			Output   struct {
				XOnly   string `json:"x_only"`
				Variant string `json:"variant"`
			} `json:"combined_key"`
		}

		type Result struct {
			Keys         []string      `json:"keys"`
			Combinations []Combination `json:"combinations"`
		}

		result := Result{}

		result.Keys = c.Args().Slice()
		keyGroups := make([][]*btcec.PublicKey, 0, len(result.Keys))

		for i, keyhex := range result.Keys {
			keyb, err := hex.DecodeString(keyhex)
			if err != nil {
				return fmt.Errorf("error parsing key %s: %w", keyhex, err)
			}

			if len(keyb) == 32 /* we'll use both the 02 and the 03 prefix versions */ {
				group := make([]*btcec.PublicKey, 2)
				for i, prefix := range []byte{0x02, 0x03} {
					pubk, err := btcec.ParsePubKey(append([]byte{prefix}, keyb...))
					if err != nil {
						fmt.Fprintf(os.Stderr, "error parsing key %s: %s", keyhex, err)
						continue
					}
					group[i] = pubk
				}
				keyGroups = append(keyGroups, group)
			} else /* assume it's 33 */ {
				pubk, err := btcec.ParsePubKey(keyb)
				if err != nil {
					return fmt.Errorf("error parsing key %s: %w", keyhex, err)
				}
				keyGroups = append(keyGroups, []*btcec.PublicKey{pubk})

				// remove the leading byte from the output just so it is all uniform
				result.Keys[i] = result.Keys[i][2:]
			}
		}

		result.Combinations = make([]Combination, 0, 16)

		var fn func(prepend int, curr []int)
		fn = func(prepend int, curr []int) {
			curr = append([]int{prepend}, curr...)
			if len(curr) == len(keyGroups) {
				combi := Combination{
					Variants: make([]string, len(keyGroups)),
				}

				combining := make([]*btcec.PublicKey, len(keyGroups))
				for g, altKeys := range keyGroups {
					altKey := altKeys[curr[g]]
					variant := secp256k1.PubKeyFormatCompressedEven
					if altKey.Y().Bit(0) == 1 {
						variant = secp256k1.PubKeyFormatCompressedOdd
					}
					combi.Variants[g] = hex.EncodeToString([]byte{variant})
					combining[g] = altKey
				}

				agg, _, _, err := musig2.AggregateKeys(combining, true)
				if err != nil {
					fmt.Fprintf(os.Stderr, "error aggregating: %s", err)
					return
				}

				serialized := agg.FinalKey.SerializeCompressed()
				combi.Output.XOnly = hex.EncodeToString(serialized[1:])
				combi.Output.Variant = hex.EncodeToString(serialized[0:1])
				result.Combinations = append(result.Combinations, combi)
				return
			}

			fn(0, curr)
			if len(keyGroups[len(keyGroups)-len(curr)-1]) > 1 {
				fn(1, curr)
			}
		}

		fn(0, nil)
		if len(keyGroups[len(keyGroups)-1]) > 1 {
			fn(1, nil)
		}

		res, _ := json.MarshalIndent(result, "", "  ")
		fmt.Println(string(res))

		return nil
	},
}

func getSecretKeysFromStdinLinesOrSlice(c *cli.Context, keys []string) chan string {
	ch := make(chan string)
	go func() {
		for sec := range getStdinLinesOrArgumentsFromSlice(keys) {
			if sec == "" {
				continue
			}
			if strings.HasPrefix(sec, "nsec1") {
				_, data, err := nip19.Decode(sec)
				if err != nil {
					lineProcessingError(c, "invalid nsec code: %s", err)
					continue
				}
				sec = data.(string)
			}
			if !nostr.IsValid32ByteHex(sec) {
				lineProcessingError(c, "invalid hex key")
				continue
			}
			ch <- sec
		}
		close(ch)
	}()
	return ch
}