serai/coins/monero/src/wallet/extra.rs

use core::ops::BitXor;
use std::io::{self, Read, Write};

use zeroize::Zeroize;

use curve25519_dalek::edwards::EdwardsPoint;

use crate::serialize::{
  read_byte, read_bytes, read_varint, read_point, read_vec, write_byte, write_varint, write_point,
  write_vec,
};

#[derive(Clone, Copy, PartialEq, Eq, Debug, Zeroize)]
pub(crate) enum PaymentId {
  Unencrypted([u8; 32]),
  Encrypted([u8; 8]),
}

impl BitXor<[u8; 8]> for PaymentId {
  type Output = PaymentId;

  fn bitxor(self, bytes: [u8; 8]) -> PaymentId {
    match self {
      PaymentId::Unencrypted(_) => self,
      PaymentId::Encrypted(id) => {
        PaymentId::Encrypted((u64::from_le_bytes(id) ^ u64::from_le_bytes(bytes)).to_le_bytes())
      }
    }
  }
}

impl PaymentId {
  fn serialize<W: Write>(&self, w: &mut W) -> io::Result<()> {
    match self {
      PaymentId::Unencrypted(id) => {
        w.write_all(&[0])?;
        w.write_all(id)?;
      }
      PaymentId::Encrypted(id) => {
        w.write_all(&[1])?;
        w.write_all(id)?;
      }
    }
    Ok(())
  }

  fn deserialize<R: Read>(r: &mut R) -> io::Result<PaymentId> {
    Ok(match read_byte(r)? {
      0 => PaymentId::Unencrypted(read_bytes(r)?),
      1 => PaymentId::Encrypted(read_bytes(r)?),
      _ => Err(io::Error::new(io::ErrorKind::Other, "unknown payment ID type"))?,
    })
  }
}

#[derive(Clone, PartialEq, Eq, Debug, Zeroize)]
pub(crate) enum ExtraField {
  Padding(Vec<u8>),
  PublicKey(EdwardsPoint),
  PaymentId(PaymentId), // Technically Nonce, an arbitrary data field, yet solely used as PaymentId
  MergeMining(usize, [u8; 32]),
  PublicKeys(Vec<EdwardsPoint>),
}

impl ExtraField {
  fn serialize<W: Write>(&self, w: &mut W) -> io::Result<()> {
    match self {
      ExtraField::Padding(data) => {
        w.write_all(&[0])?;
        write_vec(write_byte, data, w)?;
      }
      ExtraField::PublicKey(key) => {
        w.write_all(&[1])?;
        w.write_all(&key.compress().to_bytes())?;
      }
      ExtraField::PaymentId(id) => {
        w.write_all(&[2])?;
        let mut buf = Vec::with_capacity(1 + 8);
        id.serialize(&mut buf)?;
        write_vec(write_byte, &buf, w)?;
      }
      ExtraField::MergeMining(height, merkle) => {
        w.write_all(&[3])?;
        write_varint(&u64::try_from(*height).unwrap(), w)?;
        w.write_all(merkle)?;
      }
      ExtraField::PublicKeys(keys) => {
        w.write_all(&[4])?;
        write_vec(write_point, keys, w)?;
      }
    }
    Ok(())
  }

  fn deserialize<R: Read>(r: &mut R) -> io::Result<ExtraField> {
    Ok(match read_byte(r)? {
      0 => {
        let res = read_vec(read_byte, r)?;
        if res.len() > 255 {
          Err(io::Error::new(io::ErrorKind::Other, "too long padding"))?;
        }
        ExtraField::Padding(res)
      }
      1 => ExtraField::PublicKey(read_point(r)?),
      2 => ExtraField::PaymentId(PaymentId::deserialize(r)?),
      3 => ExtraField::MergeMining(
        usize::try_from(read_varint(r)?)
          .map_err(|_| io::Error::new(io::ErrorKind::Other, "varint for height exceeds usize"))?,
        read_bytes(r)?,
      ),
      4 => ExtraField::PublicKeys(read_vec(read_point, r)?),
      _ => Err(io::Error::new(io::ErrorKind::Other, "unknown extra field"))?,
    })
  }
}

#[derive(Clone, PartialEq, Eq, Debug, Zeroize)]
pub(crate) struct Extra(Vec<ExtraField>);
impl Extra {
  pub(crate) fn keys(&self) -> Vec<EdwardsPoint> {
    let mut keys = Vec::with_capacity(2);
    for field in &self.0 {
      match field.clone() {
        ExtraField::PublicKey(key) => keys.push(key),
        ExtraField::PublicKeys(additional) => keys.extend(additional),
        _ => (),
      }
    }
    keys
  }

  pub(crate) fn payment_id(&self) -> Option<PaymentId> {
    for field in &self.0 {
      if let ExtraField::PaymentId(id) = field {
        return Some(*id);
      }
    }
    None
  }

  pub(crate) fn data(&self) -> Option<Vec<u8>> {
    for field in &self.0 {
      if let ExtraField::Padding(data) = field {
        return Some(data.clone());
      }
    }
    None
  }

  pub(crate) fn new(mut keys: Vec<EdwardsPoint>) -> Extra {
    let mut res = Extra(Vec::with_capacity(3));
    if !keys.is_empty() {
      res.push(ExtraField::PublicKey(keys[0]));
    }
    if keys.len() > 1 {
      res.push(ExtraField::PublicKeys(keys.drain(1 ..).collect()));
    }
    res
  }

  pub(crate) fn push(&mut self, field: ExtraField) {
    self.0.push(field);
  }

  pub(crate) fn fee_weight(outputs: usize) -> usize {
    // PublicKey, key, PublicKeys, length, additional keys, PaymentId, length, encrypted, ID
    33 + 2 + (outputs.saturating_sub(1) * 32) + 11
  }

  pub(crate) fn serialize<W: Write>(&self, w: &mut W) -> io::Result<()> {
    for field in &self.0 {
      field.serialize(w)?;
    }
    Ok(())
  }

  pub(crate) fn deserialize<R: Read>(r: &mut R) -> io::Result<Extra> {
    let mut res = Extra(vec![]);
    let mut field;
    while {
      field = ExtraField::deserialize(r);
      field.is_ok()
    } {
      res.0.push(field.unwrap());
    }
    Ok(res)
  }
}