npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2024 – Pkg Stats / Ryan Hefner

dashphrase

v1.4.0

Published

Dash HD Wallet Recovery Phrase generator. Secure, lightweight, BIP-39-compatible Base2048 mnemonic word lists. Works in Node, Bundlers, and Browsers.

Downloads

21

Readme

DashPhrase.js

Secure HD Wallet Recovery Phrase Generator for that works in Node, Bundlers, and Browsers.

BIP-39-compatible
uses the standard "mnemonic" dictionary for Base2048 words

Lightweight. Zero dependencies. 20kb (17kb min, 7.4kb gz) ~150 LoC.
(most of the package weight is due to the base2048 word list)

Features & Use Cases

  • [x] CLI
  • [x] Base2048 (BIP-0039 compliant)
  • [x] Easy to retype on different devices
  • [x] Create many, distinct seeds from a single recovery phrase
  • [x] Keys for AES Encryption & Decryption
  • [x] Air Gap security
  • [x] Cryptocurrency wallets

| Target Entropy | Number of Words | Total Bits | | -------------- | ----------------------: | :------------------------------------- | | 128-bit | 12 words @ 11 bits each | = 132 bits (128 bits + 4-bit checksum) | | 160-bit | 15 words @ 11 bits each | = 165 bits (160 bits + 5-bit checksum) | | 192-bit | 18 words @ 11 bits each | = 198 bits (192 bits + 6-bit checksum) | | 224-bit | 21 words @ 11 bits each | = 231 bits (224 bits + 7-bit checksum) | | 256-bit | 24 words @ 11 bits each | = 264 bits (256 bits + 8-bit checksum) |

Install

CLI

See dashphrase-cli:

Node, Bun, & Bundlers

npm install --save [email protected]
"use strict";

let DashPhrase = require("dashphrase");

Browsers

<script src="https://unpkg.com/[email protected]/dashphrase.js"></script>
<script type="module">
  "use strict";

  let DashPhrase = window.DashPhrase;
  // ...
</script>

Usage

let recoveryPhrase = await DashPhrase.generate(128);
// cat swing flag economy
// stadium alone churn speed
// unique patch report train

let seedBytes = await DashPhrase.toSeed(recoveryPhrase);
// Uint8Array[64] (suitable for use with importKey for AES, etc)

let fooSeedBytes = await DashPhrase.toSeed(recoveryPhrase, "foo");
// Uint8Array[64] (a completely different seed, determined by "foo")

Values to use for Testing, Demos, Development, and Debugging:

DashPhrase.ZOOMONIC;
DashPhrase.ZECRET;
DashPhrase.ZEED;
DashPhrase.CATMONIC;

Test Fixtures

Zoomonic

The canonical DASH Recovery Phrase (mnemonic), Secret Salt, & Seed test values are:

zoo zoo zoo zoo zoo zoo zoo zoo zoo zoo zoo wrong

That's eleven (11) 'zoo's and one (1) 'wrong'.

If we decode that, we get the "input entropy".
For extra entropy / projection, we can also use a "secret salt".
If we run the appropriate Key Derivation on those we the "seed".
Described as JSON:

With secret salt:

{
  "inputEntropy": "ffffffffffffffffffffffffffffffff",
  "recoveryPhrase": "zoo zoo zoo zoo zoo zoo zoo zoo zoo zoo zoo wrong",
  "secretSalt": "TREZOR",
  "seed": "ac27495480225222079d7be181583751e86f571027b0497b5b5d11218e0a8a13332572917f0f8e5a589620c6f15b11c61dee327651a14c34e18231052e48c069"
}

Empty secret salt:

{
  "inputEntropy": "ffffffffffffffffffffffffffffffff",
  "recoveryPhrase": "zoo zoo zoo zoo zoo zoo zoo zoo zoo zoo zoo wrong",
  "secretSalt": "",
  "seed": "b6a6d8921942dd9806607ebc2750416b289adea669198769f2e15ed926c3aa92bf88ece232317b4ea463e84b0fcd3b53577812ee449ccc448eb45e6f544e25b6"
}

Catmonic

Or, for the times you need something that looks random:

cat swing flag economy stadium alone churn speed unique patch report train

API

  • generate
    • encode
  • verify (checksum)
    • decode
  • toSeed
  • base2048.includes
  • Errors
    • E_UNKNOWN_WORD
    • E_BAD_CHECKSUM
  • CATMONIC
  • ZOOMONIC
  • ZECRET
  • ZEED

DashPhrase.generate(bitlen)

Generate a "Base2048" recovery phrase.
(each word represents 11 bits of entropy)

await DashPhrase.generate(bitLen); // *128*, 160, 192, 224, or 256

DashPhrase.encode(bytes)

Encode an array of 16, 20, 24, 28, or 32 bytes (typically a Uint8Array) into a recovery phrase using the Base2048 word list dictionary.

let bytes = Uint8Array.from([0, 255, 0, 255, 0, 255, 0, 255, 0, 255, 0, 255]);

await DashPhrase.encode(bytes);
// "abstract way divert acid useless legend advance theme youth"

DashPhrase.verify(recoveryPhrase)

We all make mistakes. Especially typos.

Running the checksum can't guarantee that the recovery phrase is correct, but most typos - such as brocolli instead of broccoli - will cause it to fail, so that's a start.
(although this does check the checksum as well)

let recoveryPhrase = "often delay margin arch ...";
await DashPhrase.verify(recoveryPhrase); // true
let recoveryPhrase = "often delay margin arch TYPO";
await DashPhrase.verify(recoveryPhrase).catch(function (err) {
  // checksum failed?
  throw err;
});

DashPhrase.decode(words, { verify: true })

Decode an string of space-delimited words from the Base2048 dictionary into a Uint8Array.

This will throw an error if any non-Base2048-compatible words are used, or if the checksum does not match.

let words = "abstract way divert acid useless legend advance theme youth";

let entropy = await DashPhrase.decode(words);
// Uint8Array[12] <0, 255, 0, 255, 0, 255, 0, 255, 0, 255, 0, 255>

DashPhrase.toSeed(recoveryPhrase, saltPassword, { verify: true })

Generate a private key seed (generically useful as an encryption key) based on the recovery phrase (mnemonic) and some other string - whether a salt, a password, another recovery phrase or secret, or an id of some kind.

await DashPhrase.toSeed(recoveryPhrase, saltPassword || ""); // Uint8Array[64]

If you'd like to skip the word and checksum checks, pass { verify: false }.

DashPhrase.base2048.includes(word)

Check if a given word exists in the base2048 dictionary.

DashPhrase.base2048.includes("broccoli"); // true
DashPhrase.base2048.includes("brocolli"); // false

Get all misspelled words

"hammer spoon brocolli zoo".split(" ").filter(function (word) {
  return word && !DashPhrase.base2048.includes(word);
});
// [ "brocolli" ]

Errors

  • E_UNKNOWN_WORD - at least one the given words is not in the word list
  • E_BAD_CHECKSUM - words were good, but checksum failed

DashPhrase.CATMONIC

A secondary Recovery Phrase Mnemonic for documentation, examples, testing, etc.
(use when you need something that appears more random)

cat swing flag economy stadium alone churn speed unique patch report train

TREZOR

deb5f45449e615feff5640f2e49f933ff51895de3b4381832b3139941c57b59205a42480c52175b6efcffaa58a2503887c1e8b363a707256bdd2b587b46541f5

(included in canonical test vector, chosen for being friendly & pleasant)
(and still fits in 80 characters)
(and everybody loves cats)
(except me)

DashPhrase.ZOOMONIC

The Recovery Phrase Mnemonic to use for documentation, examples, testing, etc.

zoo zoo zoo zoo zoo zoo zoo zoo zoo zoo zoo wrong

(chosen for being easy to remember, and funny - the checksum is "wrong")

DashPhrase.ZECRET

The Secret Salt to use for documentation examples, testing & debugging, etc.

TREZOR

DashPhrase.ZEED

The Seed to use for documentation examples, testing & debugging, etc.

ac27495480225222079d7be181583751e86f571027b0497b5b5d11218e0a8a13332572917f0f8e5a589620c6f15b11c61dee327651a14c34e18231052e48c069

Compatibility Testing

npm run test

LICENSE

Copyright 2023 Dash Incubator
(forked from therootcompany/passphrase.js, re-license as MIT with permission)
Copyright 2021 AJ ONeal (MPL-2.0 License)
Copyright 2021 Root, LLC (MPL-2.0 License)