mirror of
https://github.com/affaan-m/ECC.git
synced 2026-09-18 07:37:59 +02:00
d29cf651c7
* fix(skills): move version into metadata and normalize to semver 29 skills declared `version` at the top level of their frontmatter. The schema reads it from `metadata`, so tooling that follows the schema either misses it or has to special-case the top level. Three motion skills also declared `version: 1.0`, which is not a valid semantic version; normalized to `1.0.0`. No behavioral change — frontmatter metadata only. * fix(skills): state activation triggers in skill descriptions 148 skills described what they cover but never named the situation that should trigger them. Since the description is what Claude matches against to decide whether to load a skill, a description without a trigger makes activation guesswork — the skill is either missed or loaded at the wrong time. Added a "Use when ..." clause to each, derived from the skill's own body (most already stated the trigger under "## When to Use" or in the opening line; that intent is now reflected in the frontmatter where it is actually read from). Descriptions were only appended to; no existing wording was removed. * fix(skills): sync activation triggers into the Codex skill mirror 10 of the skills whose descriptions changed are also mirrored under `.agents/skills/`, where the description was previously a verbatim copy. Left alone, the two surfaces would disagree about when the skill applies. Only the description line is synced; the Codex copies keep their reduced frontmatter, since that validator accepts only name, description, metadata, license, and allowed-tools. * fix(skills): correct three activation clauses from review - autonomous-loops: the clause pulled new loop work into a skill that its own body marks as a compatibility shim retained for one release. It now points at the canonical continuous-agent-loop instead. - continuous-learning: the description carried the v1 routing directive twice; collapsed to one. - homelab-pihole-dns: the clause fired on any broken home DNS. Narrowed to tasks that actually involve Pi-hole. * chore: retain current main lockfile --------- Co-authored-by: Çağrı Solakoğlu <cagri.solakoglu@vtcenerji.com> Co-authored-by: haelyra <49814733+haelyra@users.noreply.github.com>
104 lines
2.9 KiB
Markdown
104 lines
2.9 KiB
Markdown
---
|
|
name: nodejs-keccak256
|
|
description: Prevent Ethereum hashing bugs in JavaScript and TypeScript. Node's sha3-256 is NIST SHA3, not Ethereum Keccak-256, and silently breaks selectors, signatures, storage slots, and address derivation. Use when hashing for Ethereum in JavaScript or TypeScript, or when a selector, signature, storage slot, or derived address is wrong.
|
|
metadata:
|
|
version: "1.0.0"
|
|
origin: ECC direct-port adaptation
|
|
---
|
|
|
|
# Node.js Keccak-256
|
|
|
|
Ethereum uses Keccak-256, not the NIST-standardized SHA3 variant exposed by Node's `crypto.createHash('sha3-256')`.
|
|
|
|
## When to Use
|
|
|
|
- Computing Ethereum function selectors or event topics
|
|
- Building EIP-712, signature, Merkle, or storage-slot helpers in JS/TS
|
|
- Reviewing any code that hashes Ethereum data with Node crypto directly
|
|
|
|
## How It Works
|
|
|
|
The two algorithms produce different outputs for the same input, and Node will not warn you.
|
|
|
|
```javascript
|
|
import crypto from 'crypto';
|
|
import { keccak256, toUtf8Bytes } from 'ethers';
|
|
|
|
const data = 'hello';
|
|
const nistSha3 = crypto.createHash('sha3-256').update(data).digest('hex');
|
|
const keccak = keccak256(toUtf8Bytes(data)).slice(2);
|
|
|
|
console.log(nistSha3 === keccak); // false
|
|
```
|
|
|
|
## Examples
|
|
|
|
### ethers v6
|
|
|
|
```typescript
|
|
import { keccak256, toUtf8Bytes, solidityPackedKeccak256, id } from 'ethers';
|
|
|
|
const hash = keccak256(new Uint8Array([0x01, 0x02]));
|
|
const hash2 = keccak256(toUtf8Bytes('hello'));
|
|
const topic = id('Transfer(address,address,uint256)');
|
|
const packed = solidityPackedKeccak256(
|
|
['address', 'uint256'],
|
|
['0x742d35Cc6634C0532925a3b8D4C9B569890FaC1c', 100n],
|
|
);
|
|
```
|
|
|
|
### viem
|
|
|
|
```typescript
|
|
import { keccak256, toBytes } from 'viem';
|
|
|
|
const hash = keccak256(toBytes('hello'));
|
|
```
|
|
|
|
### web3.js
|
|
|
|
```javascript
|
|
const hash = web3.utils.keccak256('hello');
|
|
const packed = web3.utils.soliditySha3(
|
|
{ type: 'address', value: '0x742d35Cc6634C0532925a3b8D4C9B569890FaC1c' },
|
|
{ type: 'uint256', value: '100' },
|
|
);
|
|
```
|
|
|
|
### Common patterns
|
|
|
|
```typescript
|
|
import { id, keccak256, AbiCoder } from 'ethers';
|
|
|
|
const selector = id('transfer(address,uint256)').slice(0, 10);
|
|
const typeHash = keccak256(toUtf8Bytes('Transfer(address from,address to,uint256 value)'));
|
|
|
|
function getMappingSlot(key: string, mappingSlot: number): string {
|
|
return keccak256(
|
|
AbiCoder.defaultAbiCoder().encode(['address', 'uint256'], [key, mappingSlot]),
|
|
);
|
|
}
|
|
```
|
|
|
|
### Address from public key
|
|
|
|
```typescript
|
|
import { keccak256 } from 'ethers';
|
|
|
|
function pubkeyToAddress(pubkeyBytes: Uint8Array): string {
|
|
const hash = keccak256(pubkeyBytes.slice(1));
|
|
return '0x' + hash.slice(-40);
|
|
}
|
|
```
|
|
|
|
### Audit your codebase
|
|
|
|
```bash
|
|
grep -rn "createHash.*sha3" --include="*.ts" --include="*.js" --exclude-dir=node_modules .
|
|
grep -rn "keccak256" --include="*.ts" --include="*.js" . | grep -v node_modules
|
|
```
|
|
|
|
## Rule
|
|
|
|
For Ethereum contexts, never use `crypto.createHash('sha3-256')`. Use Keccak-aware helpers from `ethers`, `viem`, `web3`, or another explicit Keccak implementation.
|