safe-global / safe-eth-py / 26815066786

94%

Build Type

push

github

Committed by web-flow

Commit Message

Support secp256r1 / passkey owner signatures (v == 2) (#2513)

* Improve docs for signatures

* feat: support secp256r1 / passkey owner signatures (v == 2)

Implements Safe 1.5 secp256r1 (RIP-7212 / EIP-7951) owner signatures, the
`v == 2` case in `checkNSignatures`.

- Add pure-Python P-256 ECDSA verification (`safe_eth/safe/p256.py`), no new
  dependencies. Validation only; all inputs are public.
- Add `SafeSignatureType.SECP256R1` and a `from_v(v == 2)` branch.
- Add `SafeSignatureP256` / `SafeSignatureP256Async`: parse the fixed 128-byte
  dynamic part (sig_r || sig_s || qx || qy), check
  `owner == keccak256(qx || qy)[12:]` and verify the signature off-chain.
- Handle `v == 2` in `parse_signature` (consume the dynamic bytes, fixing
  iterator desync) and `export_signatures` (cumulative offsets).
- Tests with RFC 6979 known-answer vectors.

Coverage Stats

242 of 252 new or added lines in 4 files covered. (96.03%)

2 existing lines in 1 file now uncovered.

10611 of 11271 relevant lines covered (94.14%)

3.77 hits per line