feat(crypto): Bound Signatures

dist/ethers.js

@@ -6801,6 +6801,23 @@ class Signature {
         }
         return result;
     }
+    /**
+     * Returns the bound signature, binding `v`
+     *
+     * Bound signatures are valid for ecrecover but may be invalid for transactions.
+     * They are used for ERC-XXXX signature compression.
+     */
+    bind(v = 27) {
+        if (this.#v === v) {
+            return this;
+        }
+        const s = BN_N - BigInt(this._s);
+        const bound = new Signature(_guard$3, this.r, toUint256(s), v);
+        if (this.networkV) {
+            bound.#networkV = this.networkV;
+        }
+        return bound;
+    }
     /**
      *  Returns a new identical [[Signature]].
      */
@@ -7126,7 +7143,7 @@ class SigningKey {
     static recoverPublicKey(digest, signature) {
         assertArgument(dataLength(digest) === 32, "invalid digest length", "digest", digest);
         const sig = Signature.from(signature);
-        let secpSig = secp256k1.Signature.fromCompact(getBytesCopy(concat([sig.r, sig.s])));
+        let secpSig = secp256k1.Signature.fromCompact(getBytesCopy(concat([sig.r, sig._s])));
         secpSig = secpSig.addRecoveryBit(sig.yParity);
         const pubKey = secpSig.recoverPublicKey(getBytesCopy(digest));
         assertArgument(pubKey != null, "invalid signature for digest", "signature", signature);

dist/ethers.umd.js

@@ -6807,6 +6807,23 @@ const __$G = (typeof globalThis !== 'undefined' ? globalThis: typeof window !==
             }
             return result;
         }
+        /**
+         * Returns the bound signature, binding `v`
+         *
+         * Bound signatures are valid for ecrecover but may be invalid for transactions.
+         * They are used for ERC-XXXX signature compression.
+         */
+        bind(v = 27) {
+            if (this.#v === v) {
+                return this;
+            }
+            const s = BN_N - BigInt(this._s);
+            const bound = new Signature(_guard$3, this.r, toUint256(s), v);
+            if (this.networkV) {
+                bound.#networkV = this.networkV;
+            }
+            return bound;
+        }
         /**
          *  Returns a new identical [[Signature]].
          */
@@ -7132,7 +7149,7 @@ const __$G = (typeof globalThis !== 'undefined' ? globalThis: typeof window !==
         static recoverPublicKey(digest, signature) {
             assertArgument(dataLength(digest) === 32, "invalid digest length", "digest", digest);
             const sig = Signature.from(signature);
-            let secpSig = secp256k1.Signature.fromCompact(getBytesCopy(concat([sig.r, sig.s])));
+            let secpSig = secp256k1.Signature.fromCompact(getBytesCopy(concat([sig.r, sig._s])));
             secpSig = secpSig.addRecoveryBit(sig.yParity);
             const pubKey = secpSig.recoverPublicKey(getBytesCopy(digest));
             assertArgument(pubKey != null, "invalid signature for digest", "signature", signature);

lib.commonjs/crypto/signature.d.ts

@@ -111,6 +111,13 @@ export declare class Signature {
      *  developers should never require this.
      */
     getCanonical(): Signature;
+    /**
+     * Returns the bound signature, binding `v`
+     *
+     * Bound signatures are valid for ecrecover but may be invalid for transactions.
+     * They are used for ERC-XXXX signature compression.
+     */
+    bind(v?: 27 | 28): Signature;
     /**
      *  Returns a new identical [[Signature]].
      */