vano 03c1263cdb feat: complete all 12 binding APIs + 9 READMEs + fix package naming

Bindings:
- Java: +22 JNI functions + 3 helper classes (RecoverableSignature, WifDecoded, TaprootOutputKeyResult)
- Swift: +20 functions (DER, recovery, ECDH, tagged_hash, BIP-32, taproot)
- React Native: +15 functions
- Python: +3 functions (ctx_clone, last_error, last_error_msg)
- Rust: +2 functions (last_error, last_error_msg)
- Dart: +1 function (ctx_clone)

Documentation:
- 9 new binding READMEs: c_api, dart, go, java, php, python, ruby, rust, swift
- 3 existing READMEs fixed: nodejs, csharp, react-native (CT/fast architecture note)
- Fix incorrect package names across all docs:
  libsecp256k1-fast* -> libufsecp* (apt, rpm, arch, pkg-config, CMake)
  secp256k1-fast-cpu -> fastsecp256k1 (linker flags, CMake targets)
- Fix INDUSTRIAL_ROADMAP_WORKING.md link -> ROADMAP.md in README
- Rename RPM spec: libsecp256k1-fast.spec -> libufsecp.spec
- Fix debian/control, debian/changelog, arch/PKGBUILD package names
- Fix secp256k1-fast.pc.in linker flag
- Fix .github/workflows/packaging.yml comment

Selftest:
- Add selftest report structs (selftest.hpp)
- Refactor tally() in selftest.cpp

2026-02-25 00:04:31 +04:00

1.9 KiB

Raw Blame History

ufsecp — Python

Python ctypes binding for UltrafastSecp256k1 — high-performance secp256k1 elliptic curve cryptography.

Features

ECDSA — sign, verify, recover, DER serialization (RFC 6979)
Schnorr — BIP-340 sign/verify
ECDH — compressed, x-only, raw shared secret
BIP-32 — HD key derivation (master/derive/path/privkey/pubkey)
Taproot — output key tweaking, verification (BIP-341)
Addresses — P2PKH, P2WPKH, P2TR
WIF — encode/decode
Hashing — SHA-256 (hardware-accelerated), HASH160, tagged hash
Key tweaking — negate, add, multiply

Install

pip install ufsecp

Requires the native libufsecp.so / ufsecp.dll / libufsecp.dylib alongside the package or set UFSECP_LIB env var.

Quick Start

from ufsecp import Ufsecp

with Ufsecp() as ctx:
    privkey = bytes(31) + b'\x01'
    pubkey = ctx.pubkey_create(privkey)
    msg_hash = ctx.sha256(b'hello')
    sig = ctx.ecdsa_sign(msg_hash, privkey)
    valid = ctx.ecdsa_verify(msg_hash, sig, pubkey)

ECDSA Recovery

rs = ctx.ecdsa_sign_recoverable(msg_hash, privkey)
recovered = ctx.ecdsa_recover(msg_hash, rs.signature, rs.recovery_id)

BIP-32 HD Derivation

master = ctx.bip32_master(seed)
child = ctx.bip32_derive_path(master, "m/44'/0'/0'/0/0")
child_priv = ctx.bip32_privkey(child)
child_pub = ctx.bip32_pubkey(child)

Taproot (BIP-341)

tok = ctx.taproot_output_key(xonly_pub)
tweaked = ctx.taproot_tweak_seckey(privkey)
valid = ctx.taproot_verify(tok.output_key_x, tok.parity, xonly_pub)

Architecture Note

The C ABI layer uses the fast (variable-time) implementation for maximum throughput. A constant-time (CT) layer with identical mathematical operations is available via the C++ headers for applications requiring timing-attack resistance.

License

MIT

1.9 KiB Raw Blame History