offline tool: verify signature

This commit is contained in:
swrup 2025-12-06 19:18:53 +01:00
parent 325ca30fed
commit 5001cc35c3
4 changed files with 93 additions and 15 deletions

View file

@ -44,7 +44,9 @@ end) : sig
type t
val sign : key:Crypto.EddsaPrivateKey.t -> r -> t
val verify : key:Crypto.EddsaPublicKey.t -> t -> r -> bool
(* Ok () on verification success *)
val verify : key:Crypto.EddsaPublicKey.t -> t -> r -> (unit, string) result
val jsont : t Jsont.t
end = struct
open Crypto
@ -54,7 +56,13 @@ end = struct
let bin = R.bin
let sign ~key r = EddsaSignature.sign ~key (Bin.to_string bin r)
let verify ~key t r = EddsaSignature.verify ~key t ~msg:(Bin.to_string bin r)
let verify ~key t r =
let b = EddsaSignature.verify ~key t ~msg:(Bin.to_string bin r) in
match b with
| false -> Error "signature verification failure"
| true -> Ok ()
let jsont = EddsaSignature.jsont
end

View file

@ -1,7 +1,7 @@
open Api
open Devices
let mk_future_denom ~key
let mk_future_denom ~sm_denom_priv
({
pub;
priv= _;
@ -31,7 +31,8 @@ let mk_future_denom ~key
let duration_withdraw =
Timestamp.diff stamp_start stamp_expire_withdraw |> Timestamp.of_span_exn
in
sign ~key { h_denom_pub; h_section_name; anchor_time; duration_withdraw }
sign ~key:sm_denom_priv
{ h_denom_pub; h_section_name; anchor_time; duration_withdraw }
in
FutureDenom.
{
@ -49,7 +50,7 @@ let mk_future_denom ~key
denom_secmod_sig;
}
let mk_future_signkey ~key
let mk_future_signkey ~sm_signkey_priv
({ pub; priv= _; stamp_start; stamp_expire; stamp_end; master_sig= _ } :
Signkey.t) =
let signkey_secmod_sig =
@ -59,7 +60,7 @@ let mk_future_signkey ~key
let duration =
Timestamp.diff stamp_start stamp_expire |> Timestamp.of_span_exn
in
sign ~key { exchange_pub; anchor_time; duration }
sign ~key:sm_signkey_priv { exchange_pub; anchor_time; duration }
in
FutureSignKey.
{ key= pub; stamp_start; stamp_expire; stamp_end; signkey_secmod_sig }
@ -70,15 +71,14 @@ let mk_future_keys_response (secmod_signkey : Secmod_signkey.t)
secmod_denom.keys
|> List.filter (fun k -> Option.is_none k.Denomination.master_sig)
|> List.map (fun denom ->
let key = secmod_denom.sm_key.Signkey.priv in
mk_future_denom ~key denom)
mk_future_denom ~sm_denom_priv:secmod_denom.sm_key.Signkey.priv denom)
in
let future_signkeys =
secmod_signkey.keys
|> List.filter (fun k -> Option.is_none k.Signkey.master_sig)
|> List.map (fun signkey ->
let key = secmod_denom.sm_key.Signkey.priv in
mk_future_signkey ~key signkey)
mk_future_signkey ~sm_signkey_priv:secmod_signkey.sm_key.Signkey.priv
signkey)
in
let master_pub = Config.Exchange.master_public_key in
let denom_secmod_public_key = secmod_denom.sm_key.pub in