Question

我正在与EIP712签署订单，当我对uint256进行签名时，我实现了恢复数据的目的，一旦我使用uint256 []，它就会恢复到错误的地址。

有人可以帮忙吗？

以下是创建签名（web3js）的javascript方面：

var domain = [
  { name: "name", type: "string" },
  { name: "version", type: "string" },
  { name: "chainId", type: "uint256" },
  { name: "verifyingContract", type: "address" },
  { name: "salt", type: "bytes32" }
];
var sellOrders = [
  { name: "id", type: "uint256[]" },
  { name: "tokenId", type: "uint256[]" },
  { name: "price", type: "uint256[]" },
  { name: "proto", type: "uint256[]" },
  { name: "purity", type: "uint256[]" },
  { name: "seller", type: "address" }
];
const domainData = {
  name: "app",
  version: "1",
  chainId: 3,
  verifyingContract: cardExchangeContract,
  salt: "0xa222082684812afae4e093416fff16bc218b569abe4db590b6a058e1f2c1cd3e"
};
var message = {
  id: [1],
  tokenId: [1],
  price: [1],
  proto: [1],
  purity: [1],
  seller: address
};
var data = JSON.stringify({
  types: {
      EIP712Domain: domain,
      SellOrders: sellOrders,
  },
  domain: domainData,
  primaryType: "SellOrders",
  message: message
});
window.web3.currentProvider.sendAsync({
  method: "eth_signTypedData_v4",
  params: [address, data],
  from: address
}, function(error, result) {
  if (error) { 
    errorCallback(); 
  } else {
    const signature = result.result.substring(2);
    const r = "0x" + signature.substring(0, 64);
    const s = "0x" + signature.substring(64, 128);
    const v = parseInt(signature.substring(128, 130), 16);
    successCallback(signature, r, s, v);
  }
});

这是事物坚固性的一面：

string private constant domain = "EIP712Domain(string name,string version,uint256 chainId,address verifyingContract,bytes32 salt)";
bytes32 public constant domainTypeHash = keccak256(abi.encodePacked(domain));
string private constant sellOrdersType = "SellOrders(uint256[] id,uint256[] tokenId,uint256[] price,uint256[] proto,uint256[] purity,address seller)";
bytes32 public constant sellOrdersTypeHash = keccak256(abi.encodePacked(sellOrdersType));
uint256 constant chainId = 3;
bytes32 constant salt = 0xa222082684812afae4e093416fff16bc218b569abe4db590b6a058e1f2c1cd3e;
bytes32 private domainSeparator;

struct SellOrders {
    uint256[] id;
    uint256[] tokenId;
    uint256[] price;
    uint256[] proto;
    uint256[] purity;
    address payable seller;
}

constructor() public {
    domainSeparator = keccak256(abi.encode(
        domainTypeHash,
        keccak256("app"),
        keccak256("1"), // version
        chainId,
        this,
        salt
    ));
}

function recover(uint256[] calldata id, uint256[] calldata tokenId, uint256[] calldata price, uint256[] calldata proto, uint256[] calldata purity, address seller, uint8 v, bytes32 r, bytes32 s) external view returns (address) {
    return _recover(id, tokenId, price, proto, purity, seller, v, r, s);
}
function _recover(uint256[] memory id, uint256[] memory tokenId, uint256[] memory price, uint256[] memory proto, uint256[] memory purity, address seller, uint8 v, bytes32 r, bytes32 s) private view returns (address) {
    return ecrecover(hashSellOrders(id, tokenId, price, proto, purity, seller), v, r, s);
}
function hashSellOrders(uint256[] memory id, uint256[] memory tokenId, uint256[] memory price, uint256[] memory proto, uint256[] memory purity, address seller) private view returns (bytes32){
    return keccak256(abi.encodePacked(
       "\x19\x01",
       domainSeparator,
       keccak256(abi.encode(
            sellOrdersTypeHash,
            id,
            tokenId,
            price,
            proto,
            purity,
            seller
        ))
    ));
}

当我将sellOrders属性更改为uint256而不是uint256[]并提供uint256s而不是数组时，它可以按预期工作，并且可以恢复正确的地址。当我将其设置为uint256[]并提供数组时，它会恢复到错误的地址。

编辑/添加

使用uint256（无数组）时实际有效的代码段：

JavaScript（web3js / Metamask）：

var sellOrders = [
  { name: "id", type: "uint256" },
  { name: "tokenId", type: "uint256" },
  { name: "price", type: "uint256" },
  { name: "proto", type: "uint256" },
  { name: "purity", type: "uint256" },
  { name: "seller", type: "address" }
];

var message = {
  id: 1,
  tokenId: 1,
  price: 1,
  proto: 1,
  purity: 1,
  seller: address
};

固体：

string private constant sellOrdersType = "SellOrders(uint256 id,uint256 tokenId,uint256 price,uint256 proto,uint256 purity,address seller)";

struct SellOrders {
    uint256 id;
    uint256 tokenId;
    uint256 price;
    uint256 proto;
    uint256 purity;
    address payable seller;
}

function recover(uint256 id, uint256 tokenId, uint256 price, uint256 proto, uint256 purity, address seller, uint8 v, bytes32 r, bytes32 s) external view returns (address) {
    return _recover(id, tokenId, price, proto, purity, seller, v, r, s);
}
function _recover(uint256 id, uint256 tokenId, uint256 price, uint256 proto, uint256 purity, address seller, uint8 v, bytes32 r, bytes32 s) private view returns (address) {
    return ecrecover(hashSellOrders(id, tokenId, price, proto, purity, seller), v, r, s);
}
function hashSellOrders(uint256 id, uint256 tokenId, uint256 price, uint256 proto, uint256 purity, address seller) private view returns (bytes32){
    return keccak256(abi.encodePacked(
       "\x19\x01",
       domainSeparator,
       keccak256(abi.encode(
            sellOrdersTypeHash,
            id,
            tokenId,
            price,
            proto,
            purity,
            seller
        ))
    ));
}

添加了2 我的上一个研究使我想到了https://github.com/MetaMask/eth-sig-util/blob/master/index.js#L70-L78 Metamask在客户端上实现编码/哈希的方式，但是我仍然无法在solidity合同中重现此错误以便正确地恢复它。

Answer 1

来自https://github.com/ethereum/EIPs/blob/master/EIPS/eip-712.md#definition-of-encodedata：

数组值被编码为其内容的串联keccak256的{{1}}哈希（即encodeData的编码与包含五个类型为{的成员的结构的编码相同） {1}}。

所以我认为这应该可行（完全未经测试）：

SomeType[5]

Solidity和Web3js：对uint256进行签名的EIP712可以对uint256 []进行签名

1 个答案: