swrup/mte
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

add signkey revoke

Browse source 
(untested)
This commit is contained in:
swrup 2025-12-11 03:19:37 +01:00
parent 472463e68b
commit 399a977c2d
7 changed files with 77 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

21
src/secmod_signkey.ml
View file

@ -4,10 +4,14 @@
we just use 1 for now *)
open Syntax
type exchange_pub = Crypto.EddsaPublicKey.t
type t = {
lock: Miou.Mutex.t;
sm_key: Signkey.t;
signkey_ht: (Crypto.EddsaPublicKey.t, Signkey.t) Hashtbl.t;
signkey_ht: (exchange_pub, Signkey.t) Hashtbl.t;
revoked_ht:
(exchange_pub, Signkey.t * Bin_sig.MasterSigningKeyRevocation.t) Hashtbl.t;
}
let get_sm_key t = t.sm_key
@ -31,6 +35,15 @@ let add_master_signatures conn t l =
Ok ())
l
let revoke_signkey t exchange_pub master_sig =
Miou.Mutex.protect t.lock @@ fun () ->
match Hashtbl.find_opt t.signkey_ht exchange_pub with
| None -> Error "secmod_denom failure: denomination hash not found."
| Some signkey ->
Hashtbl.remove t.signkey_ht exchange_pub;
Hashtbl.replace t.revoked_ht exchange_pub (signkey, master_sig);
Ok ()
let dir = Fpath.(v "data" / "secmod_signkey")
let _store_secmod_data t =
@ -65,7 +78,8 @@ let load conn =
|> List.to_seq
|> Hashtbl.of_seq
in
Ok (Some { lock; sm_key; signkey_ht })
let revoked_ht = Hashtbl.create 0xff in
Ok (Some { lock; sm_key; signkey_ht; revoked_ht })
| _, _ -> error_invalid_state
let make_new () =
@ -78,7 +92,8 @@ let make_new () =
|> List.to_seq
|> Hashtbl.of_seq
in
{ lock; sm_key; signkey_ht }
let revoked_ht = Hashtbl.create 0xff in
{ lock; sm_key; signkey_ht; revoked_ht }
let init conn =
match load conn with