History

shrec 3a86fcef1e Harden ABI and finish bindings validation		2026-03-23 02:30:44 +00:00
..
lib	Harden ABI and finish bindings validation	2026-03-23 02:30:44 +00:00
tests	Harden ABI and finish bindings validation	2026-03-23 02:30:44 +00:00
README.md	Harden ABI and finish bindings validation	2026-03-23 02:30:44 +00:00
ufsecp.gemspec	fix: schnorr parity, CFL hardening, MIT license (#48 )	2026-02-27 19:45:10 +04:00
ultrafast_secp256k1.gemspec	feat(bindings): add 12-language binding suite + CI workflow	2026-02-18 13:55:27 +04:00

README.md

ufsecp -- Ruby

Ruby FFI binding for UltrafastSecp256k1 -- high-performance secp256k1 elliptic curve cryptography.

Features

ECDSA -- sign, verify, recover, DER serialization (RFC 6979)
Schnorr -- BIP-340 sign/verify
ECDH -- compressed, x-only, raw shared secret
BIP-32 -- HD key derivation (master/derive/path/privkey/pubkey)
Taproot -- output key tweaking, verification (BIP-341)
Addresses -- P2PKH, P2WPKH, P2TR
WIF -- encode/decode
Hashing -- SHA-256 (hardware-accelerated), HASH160, tagged hash
Key tweaking -- negate, add, multiply
Ethereum -- Keccak-256, EIP-55 addresses, EIP-155 sign, ecrecover
BIP-39 -- mnemonic generation, validation, seed derivation
Multi-coin wallet -- 7-coin address dispatch (BTC/LTC/DOGE/DASH/ETH/BCH/TRX)
Batch verification -- ECDSA + Schnorr batch verify with invalid identification
MuSig2 -- BIP-327 multi-signatures (key agg, nonce gen, partial sign, aggregate)
FROST -- threshold signatures (keygen, sign, aggregate, verify)
Adaptor signatures -- Schnorr + ECDSA adaptor pre-sign, adapt, extract
Pedersen commitments -- commit, verify, sum balance, switch commitments
ZK proofs -- knowledge proof, DLEQ proof, Bulletproof range proof
Multi-scalar multiplication -- Shamir's trick, MSM
Pubkey arithmetic -- add, negate, combine N keys
SHA-512 -- full SHA-512 hash
Message signing -- BIP-137 Bitcoin message sign/verify

Install

gem 'ufsecp'

Requires libufsecp.so / ufsecp.dll / libufsecp.dylib on the library path.

Quick Start

require 'ufsecp'

ctx = Ufsecp::Context.new

privkey = "\x00" * 31 + "\x01"
pubkey = ctx.pubkey_create(privkey)
msg_hash = Ufsecp.sha256("hello")
sig = ctx.ecdsa_sign(msg_hash, privkey)
valid = ctx.ecdsa_verify(msg_hash, sig, pubkey)

ctx.destroy

ECDSA Recovery

sig, recid = ctx.ecdsa_sign_recoverable(msg_hash, privkey)
recovered = ctx.ecdsa_recover(msg_hash, sig, recid)

Taproot (BIP-341)

output_key, parity = ctx.taproot_output_key(xonly_pub)
tweaked = ctx.taproot_tweak_seckey(privkey)
valid = ctx.taproot_verify(output_key, parity, xonly_pub)

Architecture Note

The C ABI layer uses the fast (variable-time) implementation for maximum throughput. A constant-time (CT) layer with identical mathematical operations is available via the C++ headers for applications requiring timing-attack resistance.

Performance Tuning

When building the native library from source, you can tune scalar multiplication (k*P) performance via the GLV window width:

cmake -S . -B build -DSECP256K1_GLV_WINDOW_WIDTH=6

Window	Default On	Tradeoff
w=4	ESP32, WASM	Smaller tables, more point additions
w=5	x86-64, ARM64, RISC-V	Balanced (default)
w=6	--	Larger tables, fewer additions

See docs/PERFORMANCE_GUIDE.md for detailed benchmarks and per-platform tuning advice.

Smoke Validation

bash libs/UltrafastSecp256k1/scripts/validate_bindings.sh

License

MIT