| 1 | import { BN_EIGHT, bnToU8a, u8aConcat, u8aToBn } from '@polkadot/util';
|
| 2 | import { BN_LE_32_OPTS, BN_LE_512_OPTS, BN_LE_OPTS } from '../../bn.js';
|
| 3 | import { hmacShaAsU8a } from '../../hmac/index.js';
|
| 4 | export function ledgerDerivePrivate(xprv, index) {
|
| 5 | const kl = xprv.subarray(0, 32);
|
| 6 | const kr = xprv.subarray(32, 64);
|
| 7 | const cc = xprv.subarray(64, 96);
|
| 8 | const data = u8aConcat([0], kl, kr, bnToU8a(index, BN_LE_32_OPTS));
|
| 9 | const z = hmacShaAsU8a(cc, data, 512);
|
| 10 | data[0] = 0x01;
|
| 11 | return u8aConcat(bnToU8a(u8aToBn(kl, BN_LE_OPTS).iadd(u8aToBn(z.subarray(0, 28), BN_LE_OPTS).imul(BN_EIGHT)), BN_LE_512_OPTS).subarray(0, 32), bnToU8a(u8aToBn(kr, BN_LE_OPTS).iadd(u8aToBn(z.subarray(32, 64), BN_LE_OPTS)), BN_LE_512_OPTS).subarray(0, 32), hmacShaAsU8a(cc, data, 512).subarray(32, 64));
|
| 12 | }
|