I know that in the Ethereum protocol, users submit transaction by cryptographically 'signing' their transactions using their private key to prove to the miners that they do own that key but without revealing it to the network. How is this done? I was doing some research and I stumbled upon such topics as RSA and homomorphic encryption but how could I build a javascript function that challenged and verified such a signature from a key pair?


I figured this out after extensive research. You are right, Ethereum uses ECDSA! There are a few good npm libraries that help with this right now, one is eccrypto and the other is ethereumjs-util.


There is a 'tests' folder in that repo that shows examples of how to implement the functions named 'hashPersonalMessage', 'ecsign' and 'ecrecover'. Using these functions you can pick a public address X and send a challenge to its owner who knows the private key. The owner can sign your challenge message with their key, send it back to you, and then you can recover the public key using the signature. At that point you can fetch the public address of the public key and compare it to X to make sure its the same. If it is and if your challenge was truly secret/random, then you can be sure that the person who signed must have signed it with the private key.


There are public key encryption schemes other than RSA. One is ECDSA. See an example with bitcoin https://github.com/bitcoinjs/bitcoinjs-message

ETH is also using the same but I couldn't find a straightforward example.


I had the same problem and made a tutorial on how to sign, verify, encrypt and decrypt data with javascript and solidity. See here

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.