src/crypto.ml

@@ -32,6 +32,7 @@ module EddsaPrivateKey = struct
 
   type t = priv
 
+  let pub_of_priv = pub_of_priv
   let to_octets t = priv_to_octets t
   let of_octets t = priv_of_octets t |> Result.get_ok
   let bin = Bin.map (Bin.bytes 32) of_octets to_octets

tools/offline.ml

@@ -12,6 +12,13 @@ let download ~base_url ~output =
   let wget = Cmd.(v "wget" % "-O" % output % uri) in
   OS.Cmd.run wget
 
+let setup ~output =
+  let output = Fpath.v output in
+  let () = Mirage_crypto_rng_unix.use_default () in
+  let priv, _pub = Mirage_crypto_ec.Ed25519.generate () in
+  let data = Mirage_crypto_ec.Ed25519.priv_to_octets priv in
+  Bos.OS.File.write output data
+
 let sign ~input ~output ~master_key =
   let open Syntax in
   let open Bos.OS in
@@ -31,6 +38,24 @@ let sign ~input ~output ~master_key =
 open Cmdliner
 open Cmdliner.Term.Syntax
 
+let setup_cmd =
+  let doc = "Generate offline master keys" in
+  let output =
+    let doc = "Output file for the generated private Eddsa key." in
+    Arg.(
+      value
+      & opt filepath "data/eddsa_master_offline"
+      & info [ "o"; "output" ] ~doc)
+  in
+  Cmd.make (Cmd.info "setup" ~version:"%%VERSION%%" ~doc)
+  @@
+  let+ output = output in
+  match setup ~output with
+  | Error (`Msg err) ->
+      Fmt.epr "Setup failure: %s@." err;
+      exit 1
+  | Ok () -> ()
+
 let download_cmd =
   let doc = "Downloads /management/keys/" in
   let man =
@@ -82,6 +107,7 @@ let sign_cmd =
       exit 1
   | Ok () -> ()
 
-let main () = Cmd.eval download_cmd
-let _main () = Cmd.eval sign_cmd
+let main () = Cmd.eval setup_cmd
+let _main () = Cmd.eval download_cmd
+let __main () = Cmd.eval sign_cmd
 let () = if !Sys.interactive then () else exit (main ())