Verify Signatures with Solana Libraries - Para Docs

You’re viewing the 2.0 (LTS) docs. View the current 3.0 version of this page.

Verify Ed25519 signatures to confirm that a message was signed by a specific Solana address. Essential for authentication and ensuring data integrity.

Verify Signatures

@solana/kit
@solana/web3.js
Anchor

import { useParaSolanaSigner } from '@getpara/react-sdk';
import { createSolanaRpc } from '@solana/kit';
import { getUtf8Encoder } from '@solana/codecs-strings';
import nacl from 'tweetnacl';
import bs58 from 'bs58';

const rpc = createSolanaRpc("https://api.mainnet-beta.solana.com");

function VerifySignature() {
  const { solanaSigner, isLoading } = useParaSolanaSigner({ rpc });

  const verifyMessage = async () => {
    if (!solanaSigner) return false;

    const message = "Hello, Solana!";
    const messageBytes = new Uint8Array(getUtf8Encoder().encode(message));

    const signatureResult = await solanaSigner.signMessages([
      { content: messageBytes, signatures: {} }
    ]);
    const signatureBytes = signatureResult[0][solanaSigner.address];

    const publicKeyBuffer = solanaSigner.sender;

    const isValid = nacl.sign.detached.verify(
      messageBytes,
      signatureBytes,
      publicKeyBuffer
    );

    return isValid;
  };

  return <button onClick={verifyMessage}>Sign & Verify Message</button>;
}

import { useParaSolana } from './hooks/useParaSolana';
import { PublicKey } from '@solana/web3.js';
import nacl from 'tweetnacl';
import bs58 from 'bs58';

function VerifySignature() {
  const { signer } = useParaSolana();

  const verifyMessage = async () => {
    if (!signer) {
      console.error("No signer available. Connect wallet first.");
      return;
    }

    const message = "Hello, Solana!";
    const messageBytes = new TextEncoder().encode(message);

    // Sign the message first
    const signature = await signer.signBytes(Buffer.from(messageBytes));
    const signatureBase58 = bs58.encode(signature);

    // Verify the signature
    try {
      const publicKeyBytes = new PublicKey(signer.address).toBytes();

      const isValid = nacl.sign.detached.verify(
        messageBytes,
        signature,
        publicKeyBytes
      );

      console.log("Message:", message);
      console.log("Signature:", signatureBase58);
      console.log("Signature valid:", isValid);
      console.log("Signer:", signer.address);

      return isValid;
    } catch (error) {
      console.error("Verification failed:", error);
      return false;
    }
  };

  return <button onClick={verifyMessage}>Sign & Verify Message</button>;
}

Verify signatures using the same approach as @solana/kit — the signer address is the public key:

import { useParaSolanaSigner } from "@getpara/react-sdk";
import { createSolanaRpc } from "@solana/kit";
import { getUtf8Encoder } from "@solana/codecs";
import nacl from "tweetnacl";
import bs58 from "bs58";

const rpc = createSolanaRpc("https://api.devnet.solana.com");

function SignAndVerify() {
  const { solanaSigner, isLoading } = useParaSolanaSigner({ rpc });

  const handleSignAndVerify = async () => {
    if (!solanaSigner) return;

    const message = getUtf8Encoder().encode("Verify me!");
    const [signatures] = await solanaSigner.signMessages([
      { content: message, signatures: {} },
    ]);
    const signatureBytes = signatures[solanaSigner.address];
    const publicKeyBytes = bs58.decode(solanaSigner.address);

    const isValid = nacl.sign.detached.verify(message, signatureBytes, publicKeyBytes);
    console.log("Signature valid:", isValid);
  };

  if (isLoading) return <p>Loading...</p>;
  return <button onClick={handleSignAndVerify}>Sign & Verify</button>;
}

Next Steps