verify master sigs module

tools/offline_impl.ml

@@ -1,11 +1,19 @@
 open Syntax
+open Crypto
 open Hash
 
 module Future_keys = struct
-  open Crypto
   open Api
 
-  let verify =
+  let verify offline_master_public_key
+      FutureKeysResponse.
+        {
+          future_denoms;
+          future_signkeys;
+          master_pub;
+          denom_secmod_public_key;
+          signkey_secmod_public_key;
+        } =
     let verify_future_denom ~sm_denom_pub
         FutureDenom.
           {
@@ -44,37 +52,35 @@ module Future_keys = struct
       verify sm_signkey_pub signkey_secmod_sig
         { exchange_pub; anchor_time; duration }
     in
-    fun our_master_public_key
+    let* () =
+      match master_pub = offline_master_public_key with
+      | false ->
+          Fmt.error
+            "master public key of the future key response does not match ours"
+      | true -> Ok ()
+    in
+    let* () =
+      list_iter
+        (verify_future_denom ~sm_denom_pub:denom_secmod_public_key)
+        future_denoms
+    in
+    let* () =
+      list_iter
+        (verify_future_signkey ~sm_signkey_pub:signkey_secmod_public_key)
+        future_signkeys
+    in
+    Ok ()
+
+  let make ~master_key
       FutureKeysResponse.
         {
           future_denoms;
           future_signkeys;
-          master_pub;
-          denom_secmod_public_key;
-          signkey_secmod_public_key;
-        }
-    ->
-      let* () =
-        match master_pub = our_master_public_key with
-        | false ->
-            Fmt.error
-              "master public key of the future key response does not match ours"
-        | true -> Ok ()
-      in
-      let* () =
-        list_iter
-          (verify_future_denom ~sm_denom_pub:denom_secmod_public_key)
-          future_denoms
-      in
-      let* () =
-        list_iter
-          (verify_future_signkey ~sm_signkey_pub:signkey_secmod_public_key)
-          future_signkeys
-      in
-      Ok ()
-
-  let make =
-    let denom_signature ~master_key
+          master_pub= _;
+          denom_secmod_public_key= _;
+          signkey_secmod_public_key= _;
+        } =
+    let denom_signature
         FutureDenom.
           {
             section_name= _;
@@ -113,7 +119,7 @@ module Future_keys = struct
       in
       DenomSignature.{ h_denom_pub; master_sig }
     in
-    let signkey_signature ~master_key
+    let signkey_signature
         FutureSignKey.
           { key; stamp_start; stamp_expire; stamp_end; signkey_secmod_sig= _ } =
       let master_sig =
@@ -129,21 +135,9 @@ module Future_keys = struct
       in
       SignKeySignature.{ key; master_sig }
     in
-    fun ~master_key
-      FutureKeysResponse.
-        {
-          future_denoms;
-          future_signkeys;
-          master_pub= _;
-          denom_secmod_public_key= _;
-          signkey_secmod_public_key= _;
-        }
-    ->
-      let denom_sigs = List.map (denom_signature ~master_key) future_denoms in
-      let signkey_sigs =
-        List.map (signkey_signature ~master_key) future_signkeys
-      in
-      MasterSignatures.{ denom_sigs; signkey_sigs }
+    let denom_sigs = List.map denom_signature future_denoms in
+    let signkey_sigs = List.map signkey_signature future_signkeys in
+    MasterSignatures.{ denom_sigs; signkey_sigs }
 end
 
 (* -- *)
@@ -155,7 +149,7 @@ let write_file fname content =
 
 let read_master_key_file filename =
   let* master_key = read_file filename in
-  Crypto.EddsaPrivateKey.of_octets master_key
+  EddsaPrivateKey.of_octets master_key
 
 let download ~output ~url =
   let open Bos in
@@ -197,7 +191,6 @@ let setup ~output ~output_pubkey =
   Ok ()
 
 let sign ~master_key ~input ~output =
-  let open Crypto in
   let* master_key = read_master_key_file master_key in
   let* input = read_file input in
   let master_pub = EddsaPrivateKey.pub_of_priv master_key in
@@ -214,7 +207,7 @@ let revoke_denom ~output ~master_key ~h_denom =
   let denom_revoke =
     let master_sig =
       let open Signatures.MasterDenominationKeyRevocation in
-      signf (Crypto.EddsaSignature.sign ~key) { h_denom_pub }
+      signf (EddsaSignature.sign ~key) { h_denom_pub }
     in
     Api.DenomRevocationSignature.{ master_sig }
   in
@@ -227,7 +220,7 @@ let revoke_signkey ~output ~master_key ~signkey =
   let signkey_revoke =
     let master_sig =
       let open Signatures.MasterSigningKeyRevocation in
-      signf (Crypto.EddsaSignature.sign ~key) { exchange_pub= signkey }
+      signf (EddsaSignature.sign ~key) { exchange_pub= signkey }
     in
     Api.SignkeyRevocationSignature.{ master_sig }
   in
@@ -238,7 +231,6 @@ let revoke_signkey ~output ~master_key ~signkey =
 let global_fees ~output ~master_key ~start_date ~end_date ~history_fee
     ~account_fee ~purse_fee ~history_expiration ~purse_account_limit
     ~purse_timeout =
-  let open Crypto in
   let* key = read_master_key_file master_key in
   let* purse_account_limit =
     match
@@ -282,7 +274,6 @@ let global_fees ~output ~master_key ~start_date ~end_date ~history_fee
 
 let enable_auditor ~output ~master_key ~auditor_url ~auditor_name ~auditor_pub
     ~validity_start =
-  let open Crypto in
   let* key = read_master_key_file master_key in
   let master_sig =
     let open Signatures.MasterAddAuditor in
@@ -302,7 +293,6 @@ let enable_auditor ~output ~master_key ~auditor_url ~auditor_name ~auditor_pub
   Ok ()
 
 let disable_auditor ~output ~master_key ~auditor_pub ~validity_end =
-  let open Crypto in
   let* key = read_master_key_file master_key in
   let master_sig =
     let open Signatures.MasterDelAuditor in
@@ -315,7 +305,6 @@ let disable_auditor ~output ~master_key ~auditor_pub ~validity_end =
 
 let wire_fee ~output ~master_key ~wire_method ~fee_start ~fee_end ~closing_fee
     ~wire_fee =
-  let open Crypto in
   let* key = read_master_key_file master_key in
   let master_sig_wire =
     let open Signatures.MasterWireFee in
@@ -345,7 +334,6 @@ let wire_fee ~output ~master_key ~wire_method ~fee_start ~fee_end ~closing_fee
 
 let drain ~output ~master_key ~debit_account_section ~credit_payto_uri ~wtid
     ~date ~amount =
-  let open Crypto in
   let* key = read_master_key_file master_key in
   let master_sig =
     let open Signatures.MasterDrainProfit in