From 6f9c05ec51d772e4de2ceab21a77c1aec79bf2ee Mon Sep 17 00:00:00 2001
From: swrup <swrup@protonmail.com>
Date: Fri, 28 Nov 2025 14:00:11 +0100
Subject: [PATCH]

---
 src/crypto.ml    |  1 +
 tools/offline.ml | 26 ++++++++++++++++++++++++++
 2 files changed, 27 insertions(+)

diff --git a/src/crypto.ml b/src/crypto.ml
index b6e99c94..1e2f7e2c 100644
--- a/src/crypto.ml
+++ b/src/crypto.ml
@@ -32,6 +32,7 @@ module EddsaPrivateKey = struct
 
   type t = priv
 
+  let pub_of_priv = pub_of_priv
   let to_octets t = priv_to_octets t
   let of_octets t = priv_of_octets t |> Result.get_ok
   let bin = Bin.map (Bin.bytes 32) of_octets to_octets
diff --git a/tools/offline.ml b/tools/offline.ml
index c127e643..dd790fab 100644
--- a/tools/offline.ml
+++ b/tools/offline.ml
@@ -12,6 +12,13 @@ let download ~base_url ~output =
   let wget = Cmd.(v "wget" % "-O" % output % uri) in
   OS.Cmd.run wget
 
+let setup ~output =
+  let output = Fpath.v output in
+  let () = Mirage_crypto_rng_unix.use_default () in
+  let priv, _pub = Mirage_crypto_ec.Ed25519.generate () in
+  let data = Mirage_crypto_ec.Ed25519.priv_to_octets priv in
+  Bos.OS.File.write output data
+
 let sign ~input ~output ~master_key =
   let open Syntax in
   let open Bos.OS in
@@ -31,6 +38,24 @@ let sign ~input ~output ~master_key =
 open Cmdliner
 open Cmdliner.Term.Syntax
 
+let setup_cmd =
+  let doc = "Generate offline master keys" in
+  let output =
+    let doc = "Output file for the generated private Eddsa key." in
+    Arg.(
+      value
+      & opt filepath "data/eddsa_master_offline"
+      & info [ "o"; "output" ] ~doc)
+  in
+  Cmd.make (Cmd.info "setup" ~version:"%%VERSION%%" ~doc)
+  @@
+  let+ output = output in
+  match setup ~output with
+  | Error (`Msg err) ->
+      Fmt.epr "Setup failure: %s@." err;
+      exit 1
+  | Ok () -> ()
+
 let download_cmd =
   let doc = "Downloads /management/keys/" in
   let man =
@@ -82,6 +107,7 @@ let sign_cmd =
       exit 1
   | Ok () -> ()
 
+let __main () = Cmd.eval setup_cmd
 let main () = Cmd.eval download_cmd
 let _main () = Cmd.eval sign_cmd
 let () = if !Sys.interactive then () else exit (main ())