rename

.jjconflict-side-0/test/auditor_public_key

@@ -0,0 +1 @@
+A17JXR3E6J4CXDPYT7S1H25PGJ3ABS26TQ38654QCX0TB59RPMF0

.jjconflict-side-0/test/dune

@@ -0,0 +1,9 @@
+(test
+ (name test)
+ (modules test)
+ (libraries mte fmt))
+
+(test
+ (name test_crypto)
+ (modules test_crypto)
+ (libraries mte fmt))

.jjconflict-side-0/test/offline_management.sh

@@ -0,0 +1,58 @@
+#!/bin/bash
+
+set -e
+
+a="/tmp/a.json"
+b="/tmp/b.json"
+
+url="http://localhost:3434"
+auditor_pub=$(<"./test/auditor_public_key")
+master_key="./default/master_offline_private_key"
+zero_euro="EUR:0.0"
+
+offline_tool() {
+   dune exec offline -- "$@" > /dev/null
+}
+
+offline_tool download --output $a --url $url"/management/keys"
+offline_tool sign \
+--master_key $master_key \
+--input $a \
+--output $b
+offline_tool upload --input $b --url $url"/management/keys"
+echo "[OK] /management/keys"
+
+offline_tool enable-auditor \
+--master_key $master_key \
+--output $b \
+--auditor_url "auditor.example.com" \
+--auditor_name "auditor example" \
+--auditor_pub $auditor_pub \
+--validity_start 0
+offline_tool upload --input $b --url $url"/management/auditors"
+echo "[OK] /management/auditors"
+
+offline_tool wire-fee \
+--master_key $master_key \
+--output $b \
+--wire_method "xxx" \
+--fee_start 0 \
+--fee_end 99999999 \
+--closing_fee $zero_euro \
+--wire_fee $zero_euro
+offline_tool upload --input $b --url $url"/management/wire-fee"
+echo "[OK] /management/wire-fee"
+
+offline_tool global-fees \
+--master_key $master_key \
+--output $b \
+--start_date 0 \
+--end_date 99999999 \
+--history_fee $zero_euro \
+--account_fee $zero_euro \
+--purse_fee $zero_euro \
+--history_expiration 9999999 \
+--purse_account_limit 1 \
+--purse_timeout 9999999
+offline_tool upload --input $b --url $url"/management/global-fees"
+echo "[OK] /management/global-fees"

.jjconflict-side-0/test/test.ml

@@ -0,0 +1,110 @@
+let () = Mirage_crypto_rng_unix.use_default ()
+
+let () =
+  let priv = Mirage_crypto_pk.Rsa.generate ~bits:2048 () in
+  let pub = Mirage_crypto_pk.Rsa.pub_of_priv priv in
+  let () =
+    let open Crypto.RsaPrivateKey in
+    let priv' = priv |> to_octets |> of_octets |> Result.get_ok in
+    assert (to_octets priv = to_octets priv')
+  in
+  let () =
+    let open Crypto.RsaPublicKey in
+    let pub' = pub |> to_octets |> of_octets |> Result.get_ok in
+    assert (to_octets pub = to_octets pub')
+  in
+  ()
+
+let () =
+  let open Api in
+  let check jsont s =
+    let encode v = encode jsont v |> Result.get_ok in
+    let decode v = decode jsont v |> Result.get_ok in
+    let ts = decode s in
+    let s' = encode ts in
+    let ts' = decode s' in
+    let s'' = encode ts' in
+    assert (String.equal s' s'')
+  in
+  let check_bad jsont s =
+    let decode = decode jsont in
+    assert (Result.is_error (decode s))
+  in
+  check Timestamp.jsont {|{"t_s": 123456780}|};
+  check Timestamp.jsont {|{"t_s": "never"}|};
+  check_bad Timestamp.jsont {|{"t_s": "123456780"}|};
+  check_bad Timestamp.jsont {|{"t_s": "agagou"}|};
+
+  (* CS not implemented *)
+  check_bad DenominationKey.jsont
+    {|{"cipher": "CS", "age_mask": 18, "cs_pub": "ouhagag"}|};
+
+  (* TODO test with a valid rsa_pub value *)
+  (* TODO handle "rsa pub_of_octets failure" correctly *)
+  (* check_bad DenominationKey.jsont
+    {|{"cipher": "RSA", "age_mask": 18, "rsa_pub": "agagouh"}|}; *)
+  ()
+
+let () =
+  let open Amount in
+  let v =
+    make ~sign:(Some Sign_plus) ~currency:"EUR" ~value:(Int64.of_int 25)
+      ~fraction:(Int32.of_int 678)
+    |> Result.get_ok
+  in
+  let s = to_string v in
+  let v' = of_string s |> Result.get_ok in
+  assert (v = v');
+  let r = of_string {|~EUR:4.9|} in
+  assert (Result.is_error r);
+  let r = of_string {|+EUR:4.99999999999999999999999|} in
+  assert (Result.is_error r);
+  ()
+
+let () =
+  let open Headers_lib.If_none_match in
+  let ok_l =
+    [
+      "*";
+      "\"foo\"";
+      "W/\"foo\"";
+      "\"foo\", \"bar\"";
+      " , W/\"x\" , W/\"y\" , \"z\"";
+      ",  \"one\" ,  \"two\"  ,  \"three\"";
+      "W/\"a\" , ";
+      "W/\"a\"   ,   \"b\"";
+    ]
+  in
+  let bad_l =
+    [
+      "";
+      "foo";
+      "W/foo";
+      "W/\"unterminated";
+      "\"foo\", W/";
+      "* , \"bar\"";
+      "\"a\" \"b\"";
+      "W/\"a\" W/\"b\"";
+      "\"fo\x7Fo\"";
+      "  W/\"a\"";
+      "W/\"a\"  ";
+    ]
+  in
+  let check_ok input = assert (Result.is_ok (parse input)) in
+  let check_bad input = assert (Result.is_error (parse input)) in
+  List.iter check_ok ok_l;
+  List.iter check_bad bad_l;
+
+  ()
+
+let () =
+  let round_trip s =
+    let s' = s |> B32.encode |> B32.decode |> Result.get_ok in
+    assert (s = s')
+  in
+  let s = String.init 0xff Char.chr in
+  round_trip s;
+  let s_l = List.init 0x0f (fun i -> String.init i Char.chr) in
+  List.iter round_trip s_l;
+
+  ()

.jjconflict-side-0/test/test_crypto.ml

@@ -0,0 +1,110 @@
+(* Test vectors taken from GNUnet:
+   https://git.gnunet.org/gnunet/gnunet/file/src/cli/util/crypto-test-vectors.json.html *)
+
+let encode = B32.encode
+let decode s = B32.decode s |> Result.get_ok
+
+let () =
+  (* hash *)
+  let input = "91JPRV3F5GG4EKJNDSJQ8" in
+  let expected =
+    "D0R24RZ1TPASVQ2NY56CT8AJDYZE9ZGDB0GVZ05E9D4YGZQW2RC5YFPQ0Q86EPW836DY7VYQTNFFJT3ZR2K508F4JVS5JNJKYN2MMFR"
+  in
+  let output =
+    input |> decode |> Hash.H64.hash |> Hash.H64.to_octets |> encode
+  in
+  assert (output = expected);
+
+  ()
+
+let () =
+  (* eddsa_key_derivation *)
+  let pub = "3M9KK1WSNM1RTY5P72HKFA264V4B7MVHVJ08Y90CV06DYHV8XPP0" in
+  let priv = "8QC2VNF8443S5KPNKMB4XMV58BTHWAKZ7SVW5WG3KRB37567XS90" in
+  let pub' =
+    let open Crypto in
+    priv
+    |> decode
+    |> EddsaPrivateKey.of_octets
+    |> Result.get_ok
+    |> EddsaPrivateKey.pub_of_priv
+    |> EddsaPublicKey.to_octets
+    |> encode
+  in
+  assert (pub = pub');
+
+  ()
+
+let () =
+  (* eddsa_signing *)
+  let priv = "5077XJR9AMH4T97ACKFBVBJD0KFENHPV66B2Y1JBSKXBJKNZJ4E0" in
+  let pub = "6E2F03JJ8AEDANTTZZ4SBZDFEEZSF8A9DVGTS6VFBCVZQYQ46RRG" in
+  let data = "00000300000000000000" in
+  let sig_ =
+    "XCNJGJ96WPDH60YVMH6C74NGQSGJE3BC1TYMGX6BHY5DMZZZKTB373QTXJ507K5EBSG9YS2EYKHCX3ATRQ6P5MY9MXC4ZB1XSZ2X23G"
+  in
+  let open Crypto in
+  let msg = decode data in
+  let eddsa_priv =
+    priv |> decode |> EddsaPrivateKey.of_octets |> Result.get_ok
+  in
+  let sig_' =
+    EddsaSignature.sign ~key:eddsa_priv msg
+    |> EddsaSignature.to_octets
+    |> encode
+  in
+  assert (sig_ = sig_');
+  let eddsa_pub = pub |> decode |> EddsaPublicKey.of_octets |> Result.get_ok in
+  let eddsa_sig = sig_ |> decode |> EddsaSignature.of_octets |> Result.get_ok in
+  let () =
+    EddsaSignature.verify ~key:eddsa_pub eddsa_sig ~msg |> Result.get_ok
+  in
+
+  ()
+
+let () =
+  (* kdf *)
+  let salt = "94KPT83PCNS7J83KC5P78Y8" in
+  let ikm = "94KPT83MD1JJ0WV5CDS6AX10D5Q70XBM41NPAY90DNGQ8SBJD5GPR" in
+  let ctx =
+    "94KPT83141HPYVKMCNW78833D1TPWTSC41GPRWVF41NPWVVQDRG62WS04XMPWSKF4WG6JVH0EHM6A82J8S1G"
+  in
+  let out_len = 64 in
+  let out =
+    "GTMR4QT05Z9WF5HKVG0WK9RPXGHSMHJNW377G9GJXCA8B0FEKPF4D27RJMSJZYWSQNTBJ5EYVV7ZW18B48Z0JVJJ80RHB706Y96Q358"
+  in
+
+  let xts = salt |> decode in
+  let ikm = ikm |> decode in
+  let ctx = ctx |> decode in
+  let okm = Crypto.FDH_RSA.Kdf.kdf ~xts ~ikm ~ctx ~len:out_len in
+  let okm = okm |> encode in
+  assert (okm = out);
+
+  ()
+
+let () =
+  (* rsa_blind_signing *)
+  (* rsa_private_key data is given in gcrypt sexpr format.. *)
+  let message_hash =
+    "XKQMJ4CNTXBFE1V2WR6JS063J7PZQE4XMB5JH3RS5X0THQ1JQSQ69Y7KDBC9TYRJEZH48MEPY2SF4QHQ4VHXC0YQX5935MQEGP0AX6R"
+  in
+  let rsa_public_key =
+    "040000YRN1NVJ68RS6RJF52PGRCQG19ZKWQPSTJX2G7ZDCKSZFE2VW3HHA81YF5C639JHJF5TX8YTEE2FW2WQCG1PTKNBSPPJEJGA032CN3E8QZ27VWY0K6JFT8ZSYWRH2SKDMXW56A4QKY46JJBWJ6T0ZRVBW6S1HTHXVE2RW8MXRW5T801077MDY13N5F8Z1JZVKBJ06TK3S0YPEDBXK0VEHRHEQJ5X5XYKR4KQTFAZNBMKXY8836VCHBXTK4YNX6AJ1CK29SMJH3Z3QRM16A2TNQGFR0HSMV446BF7FMT2E379ZAT5ST4G3BM2NWZYW545S2SW5MG5S6M88XZZ7SKFD48YVXNZ205GGSEYJPVBMR76WG4ZG30WBCPC1N54XE12RMAG81D8C09WG22PKGGDHYXX68N04002"
+  in
+  let blinding_key_secret =
+    "3SWF49XZPHQMENTSBZQR7Z0B8ZSZ2JRARE79Q4VXZMQ7W6QABXMG"
+  in
+  let blinded_message =
+    "3KHKZJZ30ABB4E56MA2V0EQWGCWH0QQG9P2ZHYHR186C5HZXJMM4N9WXAQTKS94QSV9Y17GGNXN5MB1PZZFG7Q0FY88QPKKRG4MYCPSMTZK5W59R0MJVNJ4P4AQM96TDG5W7RV8GSNR1QQZ1GNHW3CX6D6ZRTMXB2NKB5SSYTDJS79F5ZFBRZ4HVED9JBBPWSR79KVV5QQ4APBGHBCKGMF9NJJS53A1BVYHDEVYAGFYF2SNEP827ZP50FKJ5GKGV8NQ15ESEZ69AT7GJG0T3TZVENY2YN9CVR98W3BKEZ53J7VTANARG8SJS8AMJQ7S23P5HRJ7XE9KTNRNXKH49MXV9JHHYE5535N7AGWEKR47SBCGNF44Z7XJ9RV5BQV12ZRJKN4HBZQHDNCMH3QKX9Z6G64"
+  in
+  let open Crypto in
+  let msg = message_hash |> decode in
+  let pub =
+    rsa_public_key |> decode |> RsaPublicKey.of_octets |> Result.get_ok
+  in
+  let bks = blinding_key_secret |> decode in
+  let s = FDH_RSA.rsa_blind pub ~bks ~msg |> encode in
+  assert (s = blinded_message);
+
+  ()