Question: cannot match public key with that from Whisper and Donna about curve255js

[pohutukawa]

It might be worth looking at this repo instead, if you're interested in Curve25519 implementations:
https://github.com/meganz/jodid25519

Michele, Ron and I have put things together there to make a bit more comprehensive implementation available with a bit nicer API and documentation. So the code in jodid25519 is based on this curve255js code.

Having said that, I've recently switched towards using TweetNaCl.js:
https://github.com/dchest/tweetnacl-js

It's had more eyes on it, the implementation is faster, and it's also more constant time in execution (which is important for cryptography implementations).

Hope that helps.

[franslundberg]

Thank you very much! I will try jodid25519.

/ Frans
On Sep 22, 2015 1:24 AM, "Guy Kloss" [email protected] wrote:

It might be worth looking at this repo instead, if you're interested in
Curve25519 implementations:
https://github.com/meganz/jodid25519

Michele, Ron and I have put things together there to make a bit more
comprehensive implementation available with a bit nicer API and
documentation. So the code in jodid25519 is based on this curve255js code.

Having said that, I've recently switched towards using TweetNaCl.js:
https://github.com/dchest/tweetnacl-js

It's had more eyes on it, the implementation is faster, and it's also more
constant time in execution (which is important for cryptography
implementations).

Hope that helps.

—
Reply to this email directly or view it on GitHub
#4 (comment).

[JackZielke]

I know this is years old but in case anyone else is wondering how to use this library to talk to other libraries the trick is in the byte order.

Private and public keys are represented by arrays of 16-bit values, starting from the least significant ones:

Code is from curve255js/test/test-curve25519-quick.js and comments from curve255js/test/test-curve25519.coffee

hex2ibh = function(x) {
  x = new Array(64 + 1 - x.length).join("0") + x; // # Pad with '0' at the front
  return x.split(/(..)/).reverse().join("");      // Invert bytes
};

I was playing with an hta in a VM and I had to replace .split(/(..)/) with .match(/..?/g) but the concept is the same. Reverse the pairs of hex bytes before making the array.

Use hex2ibh to reverse the byte order, then c255lhexdecode to convert the hex string to an array of 16-bit integers for curve25519 to consume. Use c255lhexencode to convert back to hex and hex2ibh once more to reverse the byte order for displaying.

> console.log(hex2ibh(c255lhexencode(curve25519(c255lhexdecode(hex2ibh("a0e7cb1a31ef588cf7c0a7d537a1a02d72d47667a7964f1d8e35f904e95f3d65"))))));
8b61c39e39eed90fc4c1cec39a4bea0db61dfbaa3753c1cd38df8a570a67a241

That worked for the example provided. It also works for the test vectors in rfc7748.

Alice's private key, a:
77076d0a7318a57d3c16c17251b26645df4c2f87ebc0992ab177fba51db92c2a
Alice's public key, X25519(a, 9):
8520f0098930a754748b7ddcb43ef75a0dbf3a0d26381af4eba4a98eaa9b4e6a
Bob's private key, b:
5dab087e624a8a4b79e17f8b83800ee66f3bb1292618b6fd1c2f8b27ff88e0eb
Bob's public key, X25519(b, 9):
de9edb7d7b7dc1b4d35b61c2ece435373f8343c85b78674dadfc7e146f882b4f
Their shared secret, K:
4a5d9d5ba4ce2de1728e3bf480350f25e07e21c947d19e3376f09b3c1e161742

> console.log(hex2ibh(c255lhexencode(curve25519(c255lhexdecode(hex2ibh("77076d0a7318a57d3c16c17251b26645df4c2f87ebc0992ab177fba51db92c2a")),c255lhexdecode(hex2ibh("de9edb7d7b7dc1b4d35b61c2ece435373f8343c85b78674dadfc7e146f882b4f"))))));
4a5d9d5ba4ce2de1728e3bf480350f25e07e21c947d19e3376f09b3c1e161742