From cb41284eeadf7bfe57b34d7f7ecedf280babe1b5 Mon Sep 17 00:00:00 2001
From: contrun <uuuuuu@protonmail.com>
Date: Fri, 15 Dec 2023 09:14:50 +0800
Subject: [PATCH] add docs to convert openssl secp256r1 DER signature (#30)

---
 docs/secp256r1.md | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/docs/secp256r1.md b/docs/secp256r1.md
index 9801911..4b474b2 100644
--- a/docs/secp256r1.md
+++ b/docs/secp256r1.md
@@ -71,6 +71,23 @@ to save this message into file `message` and then run
 ```
 openssl dgst -sha256 -sign private.pem message > signature
 ```
-to save the signature into file `signature`
+to save the signature into file `signature`, which is in the [DER format](https://wiki.openssl.org/index.php/DER).
+
+Running the following command will output the R and S value of the signature
+```
+openssl asn1parse -dump -inform DER -in signature
+    0:d=0  hl=2 l=  68 cons: SEQUENCE          
+    2:d=1  hl=2 l=  32 prim: INTEGER           :63BFDC57257A6CF67393E4BF2AA0AF38F25FA04DEC3D1428B83F9F8CF4D8050F
+   36:d=1  hl=2 l=  32 prim: INTEGER           :274417CB0D9D625AB0BAB1C611E0C445081A31F682668C0ABFA01341E97708AF
+```
+
+We need to convert the signature to the 64-bytes form required by ckb-auth
+by concatenating the R and S value in the last two lines.
+
+Running the following command would save such signature to the file `signature.raw`
+
+```
+openssl asn1parse -dump -inform DER -in signature | awk -F: '/33 prim: INTEGER/ {print $NF}' |  xxd -r -p > signature.raw   
+```
 
 The final signature field of the ckb transaction should be this public key concatenated with the above signature.