+ wip type binary signature

src/api.ml

@@ -90,7 +90,26 @@ module RsaDenominationKey = struct
     |> Jsont.Object.finish
 end
 
-(* Clause Schnorr cipher is not supported *)
+(* ! Clause Schnorr cipher is not supported *)
+module CSDenominationKey = struct
+  type t = {
+    age_mask: int;
+    cs_pub: B32.t;
+  }
+
+  (* TODO B32.jsont *)
+  let b32_jsont = Jsont.of_of_string ~kind:"B32" B32.decode ~enc:B32.encode
+
+  let jsont =
+    let make age_mask cs_pub = { age_mask; cs_pub } in
+    let age_mask v = v.age_mask in
+    let cs_pub v = v.cs_pub in
+    Jsont.Object.map ~kind:"CSDenominationKey" make
+    |> Jsont.Object.mem "age_mask" Jsont.int ~enc:age_mask
+    |> Jsont.Object.mem "cs_pub" b32_jsont ~enc:cs_pub
+    |> Jsont.Object.finish
+end
+
 module DenominationKey = struct
   type t = Rsa of RsaDenominationKey.t
   (*| CS of CSDenominationKey.t*)
@@ -105,7 +124,7 @@ module DenominationKey = struct
   let jsont =
     let open Jsont.Object in
     let rsa = Case.map "RSA" RsaDenominationKey.jsont ~dec:of_rsa in
-    let cs = Case.map "CS" RsaDenominationKey.jsont ~dec:of_cs in
+    let cs = Case.map "CS" CSDenominationKey.jsont ~dec:of_cs in
     let enc_case = function Rsa v -> Case.value rsa v in
     let cases = Case.[ make rsa; make cs ] in
     map ~kind:"DenominationKey" Fun.id
@@ -154,7 +173,7 @@ module FutureDenom = struct
     fee_deposit: Amount.t;
     fee_refresh: Amount.t;
     fee_refund: Amount.t;
-    denom_secmod_sig: EddsaSignature.t;
+    denom_secmod_sig: Bin_signature.DenominationKeyAnnouncementPS.Sig.t;
   }
 
   let jsont =
@@ -201,7 +220,9 @@ module FutureDenom = struct
     |> mem "fee_deposit" Amount.jsont ~enc:fee_deposit
     |> mem "fee_refresh" Amount.jsont ~enc:fee_refresh
     |> mem "fee_refund" Amount.jsont ~enc:fee_refund
-    |> mem "denom_secmod_sig" EddsaSignature.jsont ~enc:denom_secmod_sig
+    |> mem "denom_secmod_sig"
+         Bin_signature.DenominationKeyAnnouncementPS.Sig.jsont
+         ~enc:denom_secmod_sig
     |> finish
 end
 

src/bin_signature.ml

@@ -88,7 +88,7 @@ module DenominationKeyAnnouncementPS = struct
   (* TODO taler_signatures purpose
      we use TALER_SIGNATURE_SM_RSA_DENOMINATION_KEY instead here *)
   (* purpose.purpose = TALER_SIGNATURE_SM_DENOMINATION_KEY *)
-  type t = {
+  type r = {
     h_denom_pub: DenominationHash.t;
     h_section_name: Hash_64_cstr.t;
     anchor_time: TimeAbsoluteNBO.t;
@@ -107,6 +107,24 @@ module DenominationKeyAnnouncementPS = struct
     |+ field TimeAbsoluteNBO.bin (fun t -> t.anchor_time)
     |+ field TimeRelativeNBO.bin (fun t -> t.duration_withdraw)
     |> sealr
+
+  module type SIG = sig
+    type t
+
+    val sign : (string -> string) -> r -> t
+    val verify : (string -> msg:string -> bool) -> t -> r -> bool
+    val jsont : t Jsont.t
+  end
+
+  module Sig : SIG = struct
+    type t = string
+
+    let sign f r = f @@ Bin.to_string bin r
+    let verify f s r = f s ~msg:(Bin.to_string bin r)
+
+    (* TODO B32.jsont, for others types too *)
+    let jsont = Jsont.string
+  end
 end
 
 module SigningKeyAnnouncementPS = struct

src/crypto.ml

@@ -52,6 +52,7 @@ module EddsaSignature : sig
   type t
 
   val sign : key:Mirage_crypto_ec.Ed25519.priv -> string -> t
+  val sign_as_string : key:Mirage_crypto_ec.Ed25519.priv -> string -> string
   val of_b32 : string -> (t, string) result
   val to_b32 : t -> string
   val to_octets : t -> string
@@ -81,6 +82,8 @@ end = struct
     (* mirage_crypto: "The result is the concatenation of r and s, as specified in RFC 8032." *)
     Mirage_crypto_ec.Ed25519.sign ~key s
 
+  let sign_as_string ~key s = sign ~key s
+
   let check_size t =
     match String.length t = 64 with
     | false -> Error "EddsaSignature: invalid string length"

src/management.ml

@@ -31,8 +31,8 @@ let mk_future_denom denom_key_signf
     let duration_withdraw =
       Timestamp.diff stamp_start stamp_expire_withdraw |> Timestamp.of_span_exn
     in
-    let ps = { h_denom_pub; h_section_name; anchor_time; duration_withdraw } in
+    Sig.sign denom_key_signf
-    ps |> Bin.to_string bin |> denom_key_signf
+      { h_denom_pub; h_section_name; anchor_time; duration_withdraw }
   in
   FutureDenom.
     {
@@ -60,8 +60,9 @@ let mk_future_signkey signkey_signf
     let duration =
       Timestamp.diff stamp_start stamp_expire |> Timestamp.of_span_exn
     in
-    let ps = { exchange_pub; anchor_time; duration } in
+    { exchange_pub; anchor_time; duration }
-    ps |> Bin.to_string bin |> signkey_signf
+    |> Bin.to_string bin
+    |> signkey_signf
   in
   FutureSignKey.
     { key= pub; stamp_start; stamp_expire; stamp_end; signkey_secmod_sig }
@@ -73,7 +74,8 @@ let mk_future_keys_response (secmod_signkey : Secmod_signkey.t)
     |> List.filter (fun k -> Option.is_none k.Denomination.master_sig)
     |> List.map (fun denom ->
         let signf s =
-          Crypto.EddsaSignature.sign ~key:secmod_denom.sm_key.Signkey.priv s
+          Crypto.EddsaSignature.sign_as_string
+            ~key:secmod_denom.sm_key.Signkey.priv s
         in
         mk_future_denom signf denom)
   in

test/test.ml

@@ -15,11 +15,13 @@ let () =
   in
   ()
 
+let get_ok = function Error e -> failwith e | Ok v -> v
+
 let () =
   let open Api in
   let check jsont s =
-    let encode v = encode jsont v |> Result.get_ok in
+    let encode v = encode jsont v |> get_ok in
-    let decode v = decode jsont v |> Result.get_ok in
+    let decode v = decode jsont v |> get_ok in
     let ts = decode s in
     let s' = encode ts in
     let ts' = decode s' in
@@ -35,13 +37,14 @@ let () =
   check_bad Timestamp.jsont {|{"t_s": "123456780"}|};
   check_bad Timestamp.jsont {|{"t_s": "agagou"}|};
 
-  (* TODO use a valid rsa_pub value *)
+  (* CS not implemented *)
-  (*
+  check_bad DenominationKey.jsont
-  check DenominationKey.jsont
-    {|{"cipher": "RSA", "age_mask": 18, "rsa_pub": "agagouh"}|};
-  check DenominationKey.jsont
     {|{"cipher": "CS", "age_mask": 18, "cs_pub": "ouhagag"}|};
-    *)
+
+  (* TODO test with a valid rsa_pub value *)
+  (* TODO handle "rsa pub_of_octets failure" correctly *)
+  (* check_bad DenominationKey.jsont
+    {|{"cipher": "RSA", "age_mask": 18, "rsa_pub": "agagouh"}|}; *)
   ()
 
 let () =