Crypto api ed25519

CHANGELOG.md

@@ -8,8 +8,11 @@ and this project adheres to
 
 ### Added
 
-- cosmwasm-crypto: Add new crypto-related crate. Add `secp256k1_verify`, ECDSA
-  secp256k1 signature verification scheme for Cosmos signature formats. ([#780])
+- cosmwasm-crypto: Add `ed25519_verify`, EdDSA ed25519 signature verification
+  scheme for Tendermint signature and public key formats. ([#771])
+- cosmwasm-crypto: New crypto-related crate. Add `secp256k1_verify`, ECDSA
+  secp256k1 signature verification scheme for Cosmos signature and public key
+  formats. ([#780])
 - cosmwasm-vm: Add PinnedMemoryCache. ([#696])
 - cosmwasm-vm: The new `Cache::analyze` provides a static analyzis of the Wasm
   bytecode. This is used to tell the caller if the contract exposes IBC entry

README.md

@@ -141,6 +141,11 @@ extern "C" {
     /// greater than 1 in case of error.
     fn secp256k1_verify(message_hash_ptr: u32, signature_ptr: u32, public_key_ptr: u32) -> u32;
 
+    /// verifies a message against a signature with a public key, using the
+    /// ed25519 EdDSA scheme.
+    /// Returns 1 on verification success and 0 on failure.
+    fn ed25519_verify(message_ptr: u32, signature_ptr: u32, public_key_ptr: u32) -> u32;
+
     /// Executes a query on the chain (import). Not to be confused with the
     /// query export, which queries the state of the contract.
     fn query_chain(request: u32) -> u32;

contracts/crypto-verify/schema/query_msg.json

@@ -3,12 +3,13 @@
   "title": "QueryMsg",
   "anyOf": [
     {
+      "description": "Cosmos format (secp256k1 verification scheme).",
       "type": "object",
       "required": [
-        "verify_signature"
+        "verify_cosmos_signature"
       ],
       "properties": {
-        "verify_signature": {
+        "verify_cosmos_signature": {
           "type": "object",
           "required": [
             "message",
@@ -44,6 +45,49 @@
         }
       }
     },
+    {
+      "description": "Tendermint format (ed25519 verification scheme).",
+      "type": "object",
+      "required": [
+        "verify_tendermint_signature"
+      ],
+      "properties": {
+        "verify_tendermint_signature": {
+          "type": "object",
+          "required": [
+            "message",
+            "public_key",
+            "signature"
+          ],
+          "properties": {
+            "message": {
+              "description": "Message to verify.",
+              "allOf": [
+                {
+                  "$ref": "#/definitions/Binary"
+                }
+              ]
+            },
+            "public_key": {
+              "description": "Serialized public key. Tendermint format (32 bytes).",
+              "allOf": [
+                {
+                  "$ref": "#/definitions/Binary"
+                }
+              ]
+            },
+            "signature": {
+              "description": "Serialized signature. Tendermint format (64 bytes).",
+              "allOf": [
+                {
+                  "$ref": "#/definitions/Binary"
+                }
+              ]
+            }
+          }
+        }
+      }
+    },
     {
       "description": "Returns a list of supported verification schemes. No pagination - this is a short list.",
       "type": "object",