+ secmod_eddsa

This commit is contained in:
swrup 2026-02-20 08:24:22 +01:00
parent 355efa8b0f
commit d370717a59
3 changed files with 199 additions and 62 deletions

View file

@ -1,10 +1,10 @@
open Parse_config
let config_filename = "mte.conf"
(* TODO config : rm *)
let secrets_dir = Fpath.v "secrets"
let secmod_dir = Fpath.(secrets_dir / "secmod")
(* TODO config *)
let secmod_eddsa_dir = Fpath.(secrets_dir / "secmod_eddsa")
let config_data =
@ -190,7 +190,9 @@ module Exchange_secmod_rsa = struct
let lookahead_sign = get "lookahead_sign" |> duration
let overlap_duration = get "overlap_duration" |> duration
(* not relevant: sm_priv_key key_dir unixpath *)
let duration = get "duration" |> duration
let sm_priv_key = get "sm_priv_key"
let key_dir = get "key_dir"
end
module Exchange_secmod_eddsa = struct
@ -201,27 +203,8 @@ module Exchange_secmod_eddsa = struct
let lookahead_sign = get "lookahead_sign" |> duration
let overlap_duration = get "overlap_duration" |> duration
let duration = get "duration" |> duration
(* TODO config
LOOKAHEAD_SIGN
How long do we generate denomination and signing keys ahead of time?
OVERLAP_DURATION
How much should validity periods for coins overlap? Should be long enough to avoid problems with wallets picking one key and then due to network latency another key being valid. The DURATION_WITHDRAW period must be longer than this value.
DURATION
For how long should EdDSA keys be valid for signing?
SM_PRIV_KEY
Where should the security module store its long-term private key?
KEY_DIR
Where should the security module store the private keys it manages?
UNIXPATH
On which path should the security module listen for signing requests?
*)
let sm_priv_key = get "sm_priv_key"
let key_dir = get "key_dir"
end
(* -- *)