## A lightweight and fast pure Python ECDSA
### Overview
We tried other Python libraries such as [python-ecdsa], [fast-ecdsa] and other less famous ones, but we didn't find anything that suited our needs. The first one was pure Python, but it was too slow. The second one mixed Python and C and it was really fast, but we were unable to use it in our current infrastructure, which required pure Python code.
For this reason, we decided to create something simple, compatible with OpenSSL and fast using elegant math such as Jacobian Coordinates to speed up the ECDSA. Starkbank-ECDSA is fully compatible with Python2 and Python3.
### Installation
To install StarkBank`s ECDSA-Python, run:
```sh
pip install starkbank-ecdsa
```
### Curves
We currently support `secp256k1`, but you can add more curves to the project. You just need to use the curve.add() function.
### Speed
We ran a test on a MAC Pro i7 2017. The libraries were run 100 times and the averages displayed bellow were obtained:
| Library | sign | verify |
| ------------------ |:-------------:| -------:|
| [python-ecdsa] | 121.3ms | 65.1ms |
| [fast-ecdsa] | 0.1ms | 0.2ms |
| starkbank-ecdsa | 4.1ms | 7.8ms |
Our pure Python code cannot compete with C based libraries, but it's `6x faster` to verify and `23x faster` to sign than other pure Python libraries.
### Sample Code
How to sign a json message for [Stark Bank]:
```python
from json import dumps
from ellipticcurve.ecdsa import Ecdsa
from ellipticcurve.privateKey import PrivateKey
# Generate privateKey from PEM string
privateKey = PrivateKey.fromPem("""
-----BEGIN EC PARAMETERS-----
BgUrgQQACg==
-----END EC PARAMETERS-----
-----BEGIN EC PRIVATE KEY-----
MHQCAQEEIODvZuS34wFbt0X53+P5EnSj6tMjfVK01dD1dgDH02RzoAcGBSuBBAAK
oUQDQgAE/nvHu/SQQaos9TUljQsUuKI15Zr5SabPrbwtbfT/408rkVVzq8vAisbB
RmpeRREXj5aog/Mq8RrdYy75W9q/Ig==
-----END EC PRIVATE KEY-----
""")
# Create message from json
message = dumps({
"transfers": [
{
"amount": 100000000,
"taxId": "594.739.480-42",
"name": "Daenerys Targaryen Stormborn",
"bankCode": "341",
"branchCode": "2201",
"accountNumber": "76543-8",
"tags": ["daenerys", "targaryen", "transfer-1-external-id"]
}
]
})
signature = Ecdsa.sign(message, privateKey)
# Generate Signature in base64. This result can be sent to Stark Bank in the request header as the Digital-Signature parameter.
print(signature.toBase64())
# To double check if the message matches the signature, do this:
publicKey = privateKey.publicKey()
print(Ecdsa.verify(message, signature, publicKey))
```
Simple use:
```python
from ellipticcurve.ecdsa import Ecdsa
from ellipticcurve.privateKey import PrivateKey
# Generate new Keys
privateKey = PrivateKey()
publicKey = privateKey.publicKey()
message = "My test message"
# Generate Signature
signature = Ecdsa.sign(message, privateKey)
# To verify if the signature is valid
print(Ecdsa.verify(message, signature, publicKey))
```
How to add more curves:
```python
from ellipticcurve import curve, PrivateKey, PublicKey
newCurve = curve.CurveFp(
name="frp256v1",
A=0xf1fd178c0b3ad58f10126de8ce42435b3961adbcabc8ca6de8fcf353d86e9c00,
B=0xee353fca5428a9300d4aba754a44c00fdfec0c9ae4b1a1803075ed967b7bb73f,
P=0xf1fd178c0b3ad58f10126de8ce42435b3961adbcabc8ca6de8fcf353d86e9c03,
N=0xf1fd178c0b3ad58f10126de8ce42435b53dc67e140d2bf941ffdd459c6d655e1,
Gx=0xb6b3d4c356c139eb31183d4749d423958c27d2dcaf98b70164c97a2dd98f5cff,
Gy=0x6142e0f7c8b204911f9271f0f3ecef8c2701c307e8e4c9e183115a1554062cfb,
oid=[1, 2, 250, 1, 223, 101, 256, 1]
)
curve.add(newCurve)
publicKeyPem = """-----BEGIN PUBLIC KEY-----
MFswFQYHKoZIzj0CAQYKKoF6AYFfZYIAAQNCAATeEFFYiQL+HmDYTf+QDmvQmWGD
dRJPqLj11do8okvkSxq2lwB6Ct4aITMlCyg3f1msafc/ROSN/Vgj69bDhZK6
-----END PUBLIC KEY-----"""
publicKey = PublicKey.fromPem(publicKeyPem)
print(publicKey.toPem())
```
How to generate compressed public key:
```python
from ellipticcurve import PrivateKey, PublicKey
privateKey = PrivateKey()
publicKey = privateKey.publicKey()
compressedPublicKey = publicKey.toCompressed()
print(compressedPublicKey)
```
How to recover a compressed public key:
```python
from ellipticcurve import PrivateKey, PublicKey
compressedPublicKey = "0252972572d465d016d4c501887b8df303eee3ed602c056b1eb09260dfa0da0ab2"
publicKey = PublicKey.fromCompressed(compressedPublicKey)
print(publicKey.toPem())
```
### OpenSSL
This library is compatible with OpenSSL, so you can use it to generate keys:
```
openssl ecparam -name secp256k1 -genkey -out privateKey.pem
openssl ec -in privateKey.pem -pubout -out publicKey.pem
```
Create a message.txt file and sign it:
```
openssl dgst -sha256 -sign privateKey.pem -out signatureDer.txt message.txt
```
To verify, do this:
```python
from ellipticcurve.ecdsa import Ecdsa
from ellipticcurve.signature import Signature
from ellipticcurve.publicKey import PublicKey
from ellipticcurve.utils.file import File
publicKeyPem = File.read("publicKey.pem")
signatureDer = File.read("signatureDer.txt", "rb")
message = File.read("message.txt")
publicKey = PublicKey.fromPem(publicKeyPem)
signature = Signature.fromDer(signatureDer)
print(Ecdsa.verify(message, signature, publicKey))
```
You can also verify it on terminal:
```
openssl dgst -sha256 -verify publicKey.pem -signature signatureDer.txt message.txt
```
NOTE: If you want to create a Digital Signature to use with [Stark Bank], you need to convert the binary signature to base64.
```
openssl base64 -in signatureDer.txt -out signatureBase64.txt
```
You can do the same with this library:
```python
from ellipticcurve.signature import Signature
from ellipticcurve.utils.file import File
signatureDer = File.read("signatureDer.txt", "rb")
signature = Signature.fromDer(signatureDer)
print(signature.toBase64())
```
### Run unit tests
```
python3 -m unittest discover
python2 -m unittest discover
```
[python-ecdsa]: https://github.com/warner/python-ecdsa
[fast-ecdsa]: https://github.com/AntonKueltz/fastecdsa
[Stark Bank]: https://starkbank.com
Raw data
{
"_id": null,
"home_page": "https://github.com/starkbank/ecdsa-python.git",
"name": "starkbank-ecdsa",
"maintainer": "",
"docs_url": null,
"requires_python": "",
"maintainer_email": "",
"keywords": "ecdsa,elliptic curve,elliptic,curve,stark bank,starkbank,cryptograph,secp256k1,prime256v1",
"author": "Stark Bank",
"author_email": "developers@starkbank.com",
"download_url": "https://files.pythonhosted.org/packages/a3/f8/a6091be6a60ed4df9ac806c89fbc5fe1a3416d0284f3ba70aa09a3419428/starkbank-ecdsa-2.2.0.tar.gz",
"platform": null,
"description": "## A lightweight and fast pure Python ECDSA\n\n### Overview\n\nWe tried other Python libraries such as [python-ecdsa], [fast-ecdsa] and other less famous ones, but we didn't find anything that suited our needs. The first one was pure Python, but it was too slow. The second one mixed Python and C and it was really fast, but we were unable to use it in our current infrastructure, which required pure Python code.\n\nFor this reason, we decided to create something simple, compatible with OpenSSL and fast using elegant math such as Jacobian Coordinates to speed up the ECDSA. Starkbank-ECDSA is fully compatible with Python2 and Python3.\n\n### Installation\n\nTo install StarkBank`s ECDSA-Python, run:\n\n```sh\npip install starkbank-ecdsa\n```\n\n### Curves\n\nWe currently support `secp256k1`, but you can add more curves to the project. You just need to use the curve.add() function.\n\n### Speed\n\nWe ran a test on a MAC Pro i7 2017. The libraries were run 100 times and the averages displayed bellow were obtained:\n\n| Library | sign | verify |\n| ------------------ |:-------------:| -------:|\n| [python-ecdsa] | 121.3ms | 65.1ms |\n| [fast-ecdsa] | 0.1ms | 0.2ms |\n| starkbank-ecdsa | 4.1ms | 7.8ms |\n\nOur pure Python code cannot compete with C based libraries, but it's `6x faster` to verify and `23x faster` to sign than other pure Python libraries.\n\n### Sample Code\n\nHow to sign a json message for [Stark Bank]:\n\n```python\nfrom json import dumps\nfrom ellipticcurve.ecdsa import Ecdsa\nfrom ellipticcurve.privateKey import PrivateKey\n\n\n# Generate privateKey from PEM string\nprivateKey = PrivateKey.fromPem(\"\"\"\n -----BEGIN EC PARAMETERS-----\n BgUrgQQACg==\n -----END EC PARAMETERS-----\n -----BEGIN EC PRIVATE KEY-----\n MHQCAQEEIODvZuS34wFbt0X53+P5EnSj6tMjfVK01dD1dgDH02RzoAcGBSuBBAAK\n oUQDQgAE/nvHu/SQQaos9TUljQsUuKI15Zr5SabPrbwtbfT/408rkVVzq8vAisbB\n RmpeRREXj5aog/Mq8RrdYy75W9q/Ig==\n -----END EC PRIVATE KEY-----\n\"\"\")\n\n# Create message from json\nmessage = dumps({\n \"transfers\": [\n {\n \"amount\": 100000000,\n \"taxId\": \"594.739.480-42\",\n \"name\": \"Daenerys Targaryen Stormborn\",\n \"bankCode\": \"341\",\n \"branchCode\": \"2201\",\n \"accountNumber\": \"76543-8\",\n \"tags\": [\"daenerys\", \"targaryen\", \"transfer-1-external-id\"]\n }\n ]\n})\n\nsignature = Ecdsa.sign(message, privateKey)\n\n# Generate Signature in base64. This result can be sent to Stark Bank in the request header as the Digital-Signature parameter.\nprint(signature.toBase64())\n\n# To double check if the message matches the signature, do this:\npublicKey = privateKey.publicKey()\n\nprint(Ecdsa.verify(message, signature, publicKey))\n\n```\n\nSimple use:\n\n```python\nfrom ellipticcurve.ecdsa import Ecdsa\nfrom ellipticcurve.privateKey import PrivateKey\n\n\n# Generate new Keys\nprivateKey = PrivateKey()\npublicKey = privateKey.publicKey()\n\nmessage = \"My test message\"\n\n# Generate Signature\nsignature = Ecdsa.sign(message, privateKey)\n\n# To verify if the signature is valid\nprint(Ecdsa.verify(message, signature, publicKey))\n\n```\n\nHow to add more curves:\n\n```python\nfrom ellipticcurve import curve, PrivateKey, PublicKey\n\nnewCurve = curve.CurveFp(\n name=\"frp256v1\",\n A=0xf1fd178c0b3ad58f10126de8ce42435b3961adbcabc8ca6de8fcf353d86e9c00,\n B=0xee353fca5428a9300d4aba754a44c00fdfec0c9ae4b1a1803075ed967b7bb73f,\n P=0xf1fd178c0b3ad58f10126de8ce42435b3961adbcabc8ca6de8fcf353d86e9c03,\n N=0xf1fd178c0b3ad58f10126de8ce42435b53dc67e140d2bf941ffdd459c6d655e1,\n Gx=0xb6b3d4c356c139eb31183d4749d423958c27d2dcaf98b70164c97a2dd98f5cff,\n Gy=0x6142e0f7c8b204911f9271f0f3ecef8c2701c307e8e4c9e183115a1554062cfb,\n oid=[1, 2, 250, 1, 223, 101, 256, 1]\n)\n\ncurve.add(newCurve)\n\npublicKeyPem = \"\"\"-----BEGIN PUBLIC KEY-----\nMFswFQYHKoZIzj0CAQYKKoF6AYFfZYIAAQNCAATeEFFYiQL+HmDYTf+QDmvQmWGD\ndRJPqLj11do8okvkSxq2lwB6Ct4aITMlCyg3f1msafc/ROSN/Vgj69bDhZK6\n-----END PUBLIC KEY-----\"\"\"\n\npublicKey = PublicKey.fromPem(publicKeyPem)\n\nprint(publicKey.toPem())\n```\n\nHow to generate compressed public key:\n\n```python\nfrom ellipticcurve import PrivateKey, PublicKey\n\nprivateKey = PrivateKey()\npublicKey = privateKey.publicKey()\ncompressedPublicKey = publicKey.toCompressed()\n\nprint(compressedPublicKey)\n```\n\nHow to recover a compressed public key:\n\n```python\nfrom ellipticcurve import PrivateKey, PublicKey\n\ncompressedPublicKey = \"0252972572d465d016d4c501887b8df303eee3ed602c056b1eb09260dfa0da0ab2\"\npublicKey = PublicKey.fromCompressed(compressedPublicKey)\n\nprint(publicKey.toPem())\n```\n\n### OpenSSL\n\nThis library is compatible with OpenSSL, so you can use it to generate keys:\n\n```\nopenssl ecparam -name secp256k1 -genkey -out privateKey.pem\nopenssl ec -in privateKey.pem -pubout -out publicKey.pem\n```\n\nCreate a message.txt file and sign it:\n\n```\nopenssl dgst -sha256 -sign privateKey.pem -out signatureDer.txt message.txt\n```\n\nTo verify, do this:\n\n```python\nfrom ellipticcurve.ecdsa import Ecdsa\nfrom ellipticcurve.signature import Signature\nfrom ellipticcurve.publicKey import PublicKey\nfrom ellipticcurve.utils.file import File\n\n\npublicKeyPem = File.read(\"publicKey.pem\")\nsignatureDer = File.read(\"signatureDer.txt\", \"rb\")\nmessage = File.read(\"message.txt\")\n\npublicKey = PublicKey.fromPem(publicKeyPem)\nsignature = Signature.fromDer(signatureDer)\n\nprint(Ecdsa.verify(message, signature, publicKey))\n\n```\n\nYou can also verify it on terminal:\n\n```\nopenssl dgst -sha256 -verify publicKey.pem -signature signatureDer.txt message.txt\n```\n\nNOTE: If you want to create a Digital Signature to use with [Stark Bank], you need to convert the binary signature to base64.\n\n```\nopenssl base64 -in signatureDer.txt -out signatureBase64.txt\n```\n\nYou can do the same with this library:\n \n```python\nfrom ellipticcurve.signature import Signature\nfrom ellipticcurve.utils.file import File\n\n\nsignatureDer = File.read(\"signatureDer.txt\", \"rb\")\n\nsignature = Signature.fromDer(signatureDer)\n\nprint(signature.toBase64())\n```\n\n### Run unit tests\n\n```\npython3 -m unittest discover\npython2 -m unittest discover\n```\n\n\n[python-ecdsa]: https://github.com/warner/python-ecdsa\n[fast-ecdsa]: https://github.com/AntonKueltz/fastecdsa\n[Stark Bank]: https://starkbank.com\n\n\n",
"bugtrack_url": null,
"license": "MIT License",
"summary": "A lightweight and fast pure python ECDSA library",
"version": "2.2.0",
"split_keywords": [
"ecdsa",
"elliptic curve",
"elliptic",
"curve",
"stark bank",
"starkbank",
"cryptograph",
"secp256k1",
"prime256v1"
],
"urls": [
{
"comment_text": "",
"digests": {
"md5": "fcd50b5306a3fe6763c6ea99f71e00d3",
"sha256": "9399c3371b899d4a235b68a1ed7919d202fbf024bd2c863ae8ebdad343c2a63a"
},
"downloads": -1,
"filename": "starkbank-ecdsa-2.2.0.tar.gz",
"has_sig": false,
"md5_digest": "fcd50b5306a3fe6763c6ea99f71e00d3",
"packagetype": "sdist",
"python_version": "source",
"requires_python": null,
"size": 14690,
"upload_time": "2022-10-24T18:36:05",
"upload_time_iso_8601": "2022-10-24T18:36:05.270270Z",
"url": "https://files.pythonhosted.org/packages/a3/f8/a6091be6a60ed4df9ac806c89fbc5fe1a3416d0284f3ba70aa09a3419428/starkbank-ecdsa-2.2.0.tar.gz",
"yanked": false,
"yanked_reason": null
}
],
"upload_time": "2022-10-24 18:36:05",
"github": true,
"gitlab": false,
"bitbucket": false,
"github_user": "starkbank",
"github_project": "ecdsa-python.git",
"lcname": "starkbank-ecdsa"
}
JSON
