swrup/mte
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

offline tool: verify signature

Browse source
This commit is contained in:
swrup 2025-12-06 19:18:53 +01:00
parent 325ca30fed
commit 054b443e7a
4 changed files with 83 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

6
tools/offline_impl.ml
View file

@ -45,10 +45,10 @@ let sign ~master_key ~input ~output =
let* input = read_file input in
let* master_key = read_file master_key in
let master_key = EddsaPrivateKey.of_octets master_key in
let* future_key_response = Api.decode Api.FutureKeysResponse.jsont input in
let* () = Offline_sig.verify_future_key_response future_key_response in
let* future_keys_response = Api.decode Api.FutureKeysResponse.jsont input in
let* () = Offline_sig.verify_future_keys_response future_keys_response in
let master_signatures =
Offline_sig.make_master_signatures ~master_key future_key_response
Offline_sig.make_master_signatures ~master_key future_keys_response
in
let* s = Api.encode Api.MasterSignatures.jsont master_signatures in
let* () = write_file output s in

64
tools/offline_sig.ml
View file

@ -77,6 +77,66 @@ let make_master_signatures ~master_key
let signkey_sigs = List.map (signkey_signature ~master_key) future_signkeys in
MasterSignatures.{ denom_sigs; signkey_sigs }
let verify_future_key_response _future_key_response =
(* TODO *)
(* - ** - *)
let verify_future_signkey ~sm_signkey_pub
FutureSignKey.
{ key; stamp_start; stamp_expire; stamp_end= _; signkey_secmod_sig } =
let exchange_pub = key in
let anchor_time = stamp_start in
let duration =
Timestamp.diff stamp_start stamp_expire |> Timestamp.of_span_exn
in
let open Api_sig.SigningKeyAnnouncementPS in
verify ~key:sm_signkey_pub signkey_secmod_sig
{ exchange_pub; anchor_time; duration }
let verify_future_denom ~sm_denom_pub
FutureDenom.
{
section_name;
value= _;
stamp_start;
stamp_expire_withdraw;
stamp_expire_deposit= _;
stamp_expire_legal= _;
denom_pub;
fee_withdraw= _;
fee_deposit= _;
fee_refresh= _;
fee_refund= _;
denom_secmod_sig;
} =
let h_denom_pub =
DenominationHash.hash (DenominationKey.to_octets denom_pub)
in
let h_section_name = Hash_64_cstr.hash section_name in
let anchor_time = stamp_start in
let duration_withdraw =
Timestamp.diff stamp_start stamp_expire_withdraw |> Timestamp.of_span_exn
in
let open Api_sig.DenominationKeyAnnouncementPS in
verify ~key:sm_denom_pub denom_secmod_sig
{ h_denom_pub; h_section_name; anchor_time; duration_withdraw }
let verify_future_keys_response
FutureKeysResponse.
{
future_denoms;
future_signkeys;
master_pub= _;
denom_secmod_public_key;
signkey_secmod_public_key;
} =
let open Syntax in
let* () =
list_iter
(verify_future_denom ~sm_denom_pub:denom_secmod_public_key)
future_denoms
in
let* () =
list_iter
(verify_future_signkey ~sm_signkey_pub:signkey_secmod_public_key)
future_signkeys
in
Ok ()