unikernel/duniverse/mirage-crypto/mirage/unikernel.ml

@@ -0,0 +1,25 @@
+let start () =
+  Logs.info (fun m -> m "using Fortuna, entropy sources: %a"
+                Fmt.(list ~sep:(any ", ") Mirage_crypto_rng.Entropy.pp_source)
+                (Mirage_crypto_rng.Entropy.sources ())) ;
+  Logs.info (fun m -> m "64 byte random:@ %a" (Ohex.pp_hexdump ())
+                (Mirage_crypto_rng.generate 64)) ;
+  let n = Bytes.(unsafe_to_string (create 32)) in
+  let key = Mirage_crypto.Chacha20.of_secret n
+  and nonce = Bytes.(unsafe_to_string (create 12))
+  in
+  Logs.info (fun m -> m "Chacha20/Poly1305 of 32*0, key 32*0, nonce 12*0: %a"
+                (Ohex.pp_hexdump ())
+                (Mirage_crypto.Chacha20.authenticate_encrypt ~key ~nonce n));
+  let key = Mirage_crypto_pk.Rsa.generate ~bits:4096 () in
+  let signature =
+    Mirage_crypto_pk.Rsa.PKCS1.sign ~hash:`SHA256 ~key (`Message n)
+  in
+  let verified =
+    let key = Mirage_crypto_pk.Rsa.pub_of_priv key in
+    let hashp = function `SHA256 -> true | _ -> false in
+    Mirage_crypto_pk.Rsa.PKCS1.verify ~hashp ~key ~signature (`Message n)
+  in
+  Logs.info (fun m -> m "Generated a RSA key of %d bits (sign + verify %B)"
+                (Mirage_crypto_pk.Rsa.priv_bits key) verified);
+  Lwt.return_unit