This commit is contained in:
swrup 2026-02-21 22:11:13 +01:00
parent 77d10ee93c
commit 8c474052cc
5 changed files with 86 additions and 99 deletions

View file

@ -5,7 +5,15 @@ module Future_keys = struct
open Crypto
open Api
let verify =
let verify offline_master_public_key
FutureKeysResponse.
{
future_denoms;
future_signkeys;
master_pub;
denom_secmod_public_key;
signkey_secmod_public_key;
} =
let verify_future_denom ~sm_denom_pub
FutureDenom.
{
@ -44,37 +52,35 @@ module Future_keys = struct
verify sm_signkey_pub signkey_secmod_sig
{ exchange_pub; anchor_time; duration }
in
fun our_master_public_key
let* () =
match master_pub = offline_master_public_key with
| false ->
Fmt.error
"master public key of the future key response does not match ours"
| true -> Ok ()
in
let* () =
list_iter
(verify_future_denom ~sm_denom_pub:denom_secmod_public_key)
future_denoms
in
let* () =
list_iter
(verify_future_signkey ~sm_signkey_pub:signkey_secmod_public_key)
future_signkeys
in
Ok ()
let make ~master_key
FutureKeysResponse.
{
future_denoms;
future_signkeys;
master_pub;
denom_secmod_public_key;
signkey_secmod_public_key;
}
->
let* () =
match master_pub = our_master_public_key with
| false ->
Fmt.error
"master public key of the future key response does not match ours"
| true -> Ok ()
in
let* () =
list_iter
(verify_future_denom ~sm_denom_pub:denom_secmod_public_key)
future_denoms
in
let* () =
list_iter
(verify_future_signkey ~sm_signkey_pub:signkey_secmod_public_key)
future_signkeys
in
Ok ()
let make =
let denom_signature ~master_key
master_pub= _;
denom_secmod_public_key= _;
signkey_secmod_public_key= _;
} =
let denom_signature
FutureDenom.
{
section_name= _;
@ -113,7 +119,7 @@ module Future_keys = struct
in
DenomSignature.{ h_denom_pub; master_sig }
in
let signkey_signature ~master_key
let signkey_signature
FutureSignKey.
{ key; stamp_start; stamp_expire; stamp_end; signkey_secmod_sig= _ } =
let master_sig =
@ -129,21 +135,9 @@ module Future_keys = struct
in
SignKeySignature.{ key; master_sig }
in
fun ~master_key
FutureKeysResponse.
{
future_denoms;
future_signkeys;
master_pub= _;
denom_secmod_public_key= _;
signkey_secmod_public_key= _;
}
->
let denom_sigs = List.map (denom_signature ~master_key) future_denoms in
let signkey_sigs =
List.map (signkey_signature ~master_key) future_signkeys
in
MasterSignatures.{ denom_sigs; signkey_sigs }
let denom_sigs = List.map denom_signature future_denoms in
let signkey_sigs = List.map signkey_signature future_signkeys in
MasterSignatures.{ denom_sigs; signkey_sigs }
end
(* -- *)