231 lines
10 KiB
C
231 lines
10 KiB
C
#ifdef HAVE_ETH2
|
|
|
|
#include <string.h>
|
|
#include "eth_plugin_internal.h"
|
|
#include "eth_plugin_handler.h"
|
|
#include "shared_context.h"
|
|
#include "common_utils.h"
|
|
|
|
void getEth2PublicKey(uint32_t *bip32Path, uint8_t bip32PathLength, uint8_t *out);
|
|
|
|
#define WITHDRAWAL_KEY_PATH_1 12381
|
|
#define WITHDRAWAL_KEY_PATH_2 3600
|
|
#define WITHDRAWAL_KEY_PATH_4 0
|
|
|
|
#define ETH2_DEPOSIT_PUBKEY_OFFSET 0x80
|
|
#define ETH2_WITHDRAWAL_CREDENTIALS_OFFSET 0xE0
|
|
#define ETH2_SIGNATURE_OFFSET 0x120
|
|
#define ETH2_DEPOSIT_PUBKEY_LENGTH 0x30
|
|
#define ETH2_WITHDRAWAL_CREDENTIALS_LENGTH 0x20
|
|
#define ETH2_SIGNATURE_LENGTH 0x60
|
|
|
|
static const uint8_t deposit_contract_address[] = {0x00, 0x00, 0x00, 0x00, 0x21, 0x9a, 0xb5,
|
|
0x40, 0x35, 0x6c, 0xbb, 0x83, 0x9c, 0xbe,
|
|
0x05, 0x30, 0x3d, 0x77, 0x05, 0xfa};
|
|
|
|
// Highest index for withdrawal derivation path.
|
|
#define INDEX_MAX 65536 // 2 ^ 16 : arbitrary value to protect from path attacks.
|
|
|
|
typedef struct eth2_deposit_parameters_t {
|
|
uint8_t valid;
|
|
char deposit_address[ETH2_DEPOSIT_PUBKEY_LENGTH];
|
|
} eth2_deposit_parameters_t;
|
|
|
|
void eth2_plugin_call(int message, void *parameters) {
|
|
switch (message) {
|
|
case ETH_PLUGIN_INIT_CONTRACT: {
|
|
ethPluginInitContract_t *msg = (ethPluginInitContract_t *) parameters;
|
|
eth2_deposit_parameters_t *context = (eth2_deposit_parameters_t *) msg->pluginContext;
|
|
if (memcmp(deposit_contract_address,
|
|
msg->pluginSharedRO->txContent->destination,
|
|
sizeof(deposit_contract_address)) != 0) {
|
|
PRINTF("eth2plugin: failed to check deposit contract\n");
|
|
context->valid = 0;
|
|
msg->result = ETH_PLUGIN_RESULT_ERROR;
|
|
} else {
|
|
context->valid = 1;
|
|
msg->result = ETH_PLUGIN_RESULT_OK;
|
|
}
|
|
} break;
|
|
|
|
case ETH_PLUGIN_PROVIDE_PARAMETER: {
|
|
ethPluginProvideParameter_t *msg = (ethPluginProvideParameter_t *) parameters;
|
|
eth2_deposit_parameters_t *context = (eth2_deposit_parameters_t *) msg->pluginContext;
|
|
uint32_t index;
|
|
PRINTF("eth2 plugin provide parameter %d %.*H\n",
|
|
msg->parameterOffset,
|
|
32,
|
|
msg->parameter);
|
|
switch (msg->parameterOffset) {
|
|
case 4 + (32 * 0): // pubkey offset
|
|
case 4 + (32 * 1): // withdrawal credentials offset
|
|
case 4 + (32 * 2): // signature offset
|
|
case 4 + (32 * 4): // deposit pubkey length
|
|
case 4 + (32 * 7): // withdrawal credentials length
|
|
case 4 + (32 * 9): // signature length
|
|
{
|
|
uint32_t check = 0;
|
|
switch (msg->parameterOffset) {
|
|
case 4 + (32 * 0):
|
|
check = ETH2_DEPOSIT_PUBKEY_OFFSET;
|
|
break;
|
|
case 4 + (32 * 1):
|
|
check = ETH2_WITHDRAWAL_CREDENTIALS_OFFSET;
|
|
break;
|
|
case 4 + (32 * 2):
|
|
check = ETH2_SIGNATURE_OFFSET;
|
|
break;
|
|
case 4 + (32 * 4):
|
|
check = ETH2_DEPOSIT_PUBKEY_LENGTH;
|
|
break;
|
|
case 4 + (32 * 7):
|
|
check = ETH2_WITHDRAWAL_CREDENTIALS_LENGTH;
|
|
break;
|
|
case 4 + (32 * 9):
|
|
check = ETH2_SIGNATURE_LENGTH;
|
|
break;
|
|
default:
|
|
break;
|
|
}
|
|
index = U4BE(msg->parameter, 32 - 4);
|
|
if (index != check) {
|
|
PRINTF("eth2 plugin parameter check %d failed, expected %d got %d\n",
|
|
msg->parameterOffset,
|
|
check,
|
|
index);
|
|
context->valid = 0;
|
|
}
|
|
msg->result = ETH_PLUGIN_RESULT_OK;
|
|
} break;
|
|
|
|
case 4 + (32 * 5): // deposit pubkey 1
|
|
{
|
|
// Copy the first 32 bytes.
|
|
memcpy(context->deposit_address,
|
|
msg->parameter,
|
|
sizeof(context->deposit_address));
|
|
msg->result = ETH_PLUGIN_RESULT_OK;
|
|
break;
|
|
}
|
|
case 4 + (32 * 6): // deposit pubkey 2
|
|
{
|
|
// Copy the last 16 bytes.
|
|
memcpy(context->deposit_address + 32,
|
|
msg->parameter,
|
|
sizeof(context->deposit_address) - 32);
|
|
|
|
// Use a temporary buffer to store the string representation.
|
|
char tmp[ETH2_DEPOSIT_PUBKEY_LENGTH];
|
|
if (!getEthDisplayableAddress((uint8_t *) context->deposit_address,
|
|
tmp,
|
|
sizeof(tmp),
|
|
msg->pluginSharedRW->sha3,
|
|
chainConfig->chainId)) {
|
|
msg->result = ETH_PLUGIN_RESULT_ERROR;
|
|
return;
|
|
}
|
|
|
|
// Copy back the string to the global variable.
|
|
strlcpy(context->deposit_address, tmp, ETH2_DEPOSIT_PUBKEY_LENGTH);
|
|
msg->result = ETH_PLUGIN_RESULT_OK;
|
|
break;
|
|
}
|
|
case 4 + (32 * 3): // deposit data root
|
|
case 4 + (32 * 10): // signature
|
|
case 4 + (32 * 11):
|
|
case 4 + (32 * 12):
|
|
msg->result = ETH_PLUGIN_RESULT_OK;
|
|
break;
|
|
|
|
case 4 + (32 * 8): // withdrawal credentials
|
|
{
|
|
uint8_t tmp[48];
|
|
uint32_t withdrawalKeyPath[4];
|
|
withdrawalKeyPath[0] = WITHDRAWAL_KEY_PATH_1;
|
|
withdrawalKeyPath[1] = WITHDRAWAL_KEY_PATH_2;
|
|
if (eth2WithdrawalIndex > INDEX_MAX) {
|
|
PRINTF("eth2 plugin: withdrawal index is too big\n");
|
|
PRINTF("Got %u which is higher than INDEX_MAX (%u)\n",
|
|
eth2WithdrawalIndex,
|
|
INDEX_MAX);
|
|
msg->result = ETH_PLUGIN_RESULT_ERROR;
|
|
context->valid = 0;
|
|
}
|
|
withdrawalKeyPath[2] = eth2WithdrawalIndex;
|
|
withdrawalKeyPath[3] = WITHDRAWAL_KEY_PATH_4;
|
|
getEth2PublicKey(withdrawalKeyPath, 4, tmp);
|
|
PRINTF("eth2 plugin computed withdrawal public key %.*H\n", 48, tmp);
|
|
cx_hash_sha256(tmp, 48, tmp, 32);
|
|
tmp[0] = 0;
|
|
if (memcmp(tmp, msg->parameter, 32) != 0) {
|
|
PRINTF("eth2 plugin invalid withdrawal credentials\n");
|
|
PRINTF("Got %.*H\n", 32, msg->parameter);
|
|
PRINTF("Expected %.*H\n", 32, tmp);
|
|
msg->result = ETH_PLUGIN_RESULT_ERROR;
|
|
context->valid = 0;
|
|
} else {
|
|
msg->result = ETH_PLUGIN_RESULT_OK;
|
|
}
|
|
} break;
|
|
|
|
default:
|
|
PRINTF("Unhandled parameter offset\n");
|
|
break;
|
|
}
|
|
} break;
|
|
|
|
case ETH_PLUGIN_FINALIZE: {
|
|
ethPluginFinalize_t *msg = (ethPluginFinalize_t *) parameters;
|
|
eth2_deposit_parameters_t *context = (eth2_deposit_parameters_t *) msg->pluginContext;
|
|
PRINTF("eth2 plugin finalize\n");
|
|
if (context->valid) {
|
|
msg->numScreens = 2;
|
|
msg->uiType = ETH_UI_TYPE_GENERIC;
|
|
msg->result = ETH_PLUGIN_RESULT_OK;
|
|
} else {
|
|
msg->result = ETH_PLUGIN_RESULT_FALLBACK;
|
|
}
|
|
} break;
|
|
|
|
case ETH_PLUGIN_QUERY_CONTRACT_ID: {
|
|
ethQueryContractID_t *msg = (ethQueryContractID_t *) parameters;
|
|
strlcpy(msg->name, "ETH2", msg->nameLength);
|
|
strlcpy(msg->version, "Deposit", msg->versionLength);
|
|
msg->result = ETH_PLUGIN_RESULT_OK;
|
|
} break;
|
|
|
|
case ETH_PLUGIN_QUERY_CONTRACT_UI: {
|
|
ethQueryContractUI_t *msg = (ethQueryContractUI_t *) parameters;
|
|
eth2_deposit_parameters_t *context = (eth2_deposit_parameters_t *) msg->pluginContext;
|
|
switch (msg->screenIndex) {
|
|
case 0: { // Amount screen
|
|
uint8_t decimals = WEI_TO_ETHER;
|
|
char *ticker = chainConfig->coinName;
|
|
strlcpy(msg->title, "Amount", msg->titleLength);
|
|
if (!amountToString(tmpContent.txContent.value.value,
|
|
tmpContent.txContent.value.length,
|
|
decimals,
|
|
ticker,
|
|
msg->msg,
|
|
100)) {
|
|
THROW(EXCEPTION_OVERFLOW);
|
|
}
|
|
msg->result = ETH_PLUGIN_RESULT_OK;
|
|
} break;
|
|
case 1: { // Deposit pubkey screen
|
|
strlcpy(msg->title, "Validator", msg->titleLength);
|
|
strlcpy(msg->msg, context->deposit_address, msg->msgLength);
|
|
msg->result = ETH_PLUGIN_RESULT_OK;
|
|
} break;
|
|
default:
|
|
break;
|
|
}
|
|
} break;
|
|
|
|
default:
|
|
PRINTF("Unhandled message %d\n", message);
|
|
}
|
|
}
|
|
|
|
#endif
|