Name processing

description
Describes how to normalize and hash CORE ID names.

In place of human-readable names, CORE ID works purely with fixed length 256-bit cryptographic hashes. In order to derive the hash from a name while still preserving its hierarchal properties, a process called Namehash is used. For example, the namehash of 'alice.core' is 0x787192fc5378cc32aa956ddfdedbf26b24e8d78e40109add0eea2c1a012c3dec; this is the representation of names that is used exclusively inside CORE ID.

Before being hashed with namehash, names are first normalized, using a process called UTS-46 normalization. This ensures that upper- and lower-case names are treated equivalently, and that invalid characters are prohibited. Anything that hashes and resolves a name must first normalize it, to ensure that all users get a consistent view of CORE ID.

Normalising Names

Before a name can be converted to a node hash using Namehash, the name must first be normalized and checked for validity - for instance, converting fOO.core into foo.core, and prohibiting names containing forbidden characters such as underscores. It is crucial that all applications follow the same set of rules for normalization and validation, as otherwise two users entering the same name on different systems may resolve the same human-readable name into two different CORE ID names.

Applications using CORE ID and processing human-readable names must follow UTS46 for normalization and validation. Processing should be done with non-transitional rules, and with UseSTD3ASCIIRules=true.

Hashing Names

Namehash is a recursive process that can generate a unique hash for any valid domain name. Starting with the namehash of any domain - for example, 'alice.core' - it's possible to derive the namehash of any subdomain - for example 'iam.alice.core' - without having to know or handle the original human-readable name. It is this property that makes it possible for CORE ID to provide a hierarchal system, without having to deal with human-readable text strings internally.

Terminology

• domain - The complete, human-readable form of a name; eg, iam.alice.core.

• label - A single component of a domain - eg, iam, alice, or ethcore.

• label hash - the output of the keccak-256 function applied to a label; eg, keccak256(‘core’) = 0x4f5b812789fc606be1b3b16908db13fc7a9adf7ca72641f84d75b47069d3d7f0

• node - The output of the namehash function, used to uniquely identify a name in CORE ID.

Algorithm

First, a domain is divided into labels by splitting on periods (‘.’). So, ‘abc.wallet.core’ becomes the list [‘abc’, ‘wallet’, ‘core’].

The namehash function is then defined recursively as follows:

namehash([]) = 0x0000000000000000000000000000000000000000000000000000000000000000
namehash([label, …]) = keccak256(namehash(…), keccak256(label))

A sample implementation in Python is provided below.

def namehash(name):
  if name == '':
    return '\0' * 32
  else:
    label, _, remainder = name.partition('.')
    return sha3(namehash(remainder) + sha3(label))

Namehash is specified in EIP 137.