future_keys.json

@@ -0,0 +1 @@
+{"future_denoms":[{"section_name":"kudo_1","value":"EUR:0.01","stamp_start":{"t_s":1764356753.7154291},"stamp_expire_withdraw":{"t_s":1795892753.7154291},"stamp_expire_deposit":{"t_s":1795892753.7154291},"stamp_expire_legal":{"t_s":1795892753.7154291},"denom_pub":{"cipher":"RSA","age_mask":0,"rsa_pub":"040002522NKSAQYZD012B42869VT8NDK6VRPEK58VMB9614ZYNDWGH0C34CX5865HBJTEQHRXVX6N55G644W235KCP7YPGAKJY5MGWA18TDFGTZVMQQ4CSAH7C47J48PFVKQHNY5SV07CX5B9V3651A2BVRJ27Z4QEFP12CTK3PYEN9A6P1A9PBJKDVDVMCQA6RCYK0EHYXVGP71EQ5MNZKAHE2RX694AZWFG0SNARY67RKBGDVNNKQWWCSR041A6M4HMNAXBC28K5N10P5AA1AMF33RVX6N0PCVGTMARRYW9YZ469GS02TJWF58WFPSXGQMN7M22XVCY17M3FCZFN2PRSD4VET0ZKSQMZD31J53187J7EZ4NK043D3ZKZ9RY03PZCJYXCN73KD4MX7S58VVY4KTCFQZ0000000004002==="},"fee_withdraw":"EUR:0.00","fee_deposit":"EUR:0.00","fee_refresh":"EUR:0.00","fee_refund":"EUR:0.00","denom_secmod_sig":"JXZY5CESM1KEWR63WQY82N8E58WN2G5R484PTCHXJD9J9WXDVFZKB8QR9FF8YD02PM93X1Y29FW9Z3EMN2Y7DJGWDTJWCAG3ZWCV80R="},{"section_name":"kudo_2","value":"EUR:0.02","stamp_start":{"t_s":1764356753.7550578},"stamp_expire_withdraw":{"t_s":1795892753.7550578},"stamp_expire_deposit":{"t_s":1795892753.7550578},"stamp_expire_legal":{"t_s":1795892753.7550578},"denom_pub":{"cipher":"RSA","age_mask":0,"rsa_pub":"0400025KTM91GTMNTB4ETARQWVHJB8KC9M3SKR894EFCRPN71X4F98HH56ECRSDH041P80YZ2GXGKRFZAAE1JKM7ARDE6TVJB08DXSKCKSTSHFQHAHDHBTZRT6VETF7W1FRJQ79B3EGC5Z4K6Z6T1ZZZ6CRXK8XJ9SBRVHJZCZCTEV6CPJT3C9R1DYK2HC2FAKYBGHB37W6D26G6QMKMW1T35HBTP4PCEQZFX9WD669CSS2MPSC6AQS22JY9Z5PSHCV4RC4FAPWFKKK8X8F2QXTG9M3725JY8RTGTF0J4Y1C0H10RNNYA9NJXAABV03F4J0MKZ854Z7KVZ29RJ3GVTZA6D7C9DQHV253BC3TSH49FXY23TK1GRRK1AHHVAR1QE95WVJG68ZXDXEEMJB7DX6H3T3EYER30000000004002==="},"fee_withdraw":"EUR:0.00","fee_deposit":"EUR:0.00","fee_refresh":"EUR:0.00","fee_refund":"EUR:0.00","denom_secmod_sig":"KCHYYANTMZNJQ73C8KF22NYSH7D34SNQ8ZQJSFHZYB32VC7JJ6DHWG71CPN1047JFX4TYJVBSB202QS39HM451TXNG1K3H0XHD4FY08="}],"future_signkeys":[{"key":"KNQEXXBEC5ERGH4EY2G3PCFBMPT89BD0XKZ7ZXSVC57DFJ4M9EJ0====","stamp_start":{"t_s":1764356753.7153544},"stamp_expire":{"t_s":1795892753.7153544},"stamp_end":{"t_s":1795892753.7153544},"signkey_secmod_sig":"YHNY93BT3KBTVE70ZVMBGNFN2YKEPQXAPR2G5YJVHXEYK7P3ZVKZQF43Q80JMPGZP5HGS46DANTZBHJ7DH8HNHPKB8BT8SJ7PD4DR2R="}],"master_pub":"SJ0NYND22VQP3MP7FM754RDX8HCKVWAXTHY9SQNBTPRJZ2SPM2S0====","denom_secmod_public_key":"HB5QVREEZT53JHYJQV1SCN7XR6XEEG7VH1E9E1CNFTJQZYKVXSPG====","signkey_secmod_public_key":"AEZCA4WKA5NS7ET5PBP10J75CTPXCYDA6DQD0Q66H9V4PERFBZE0===="}

master_signatures.json

@@ -0,0 +1 @@
+{"denom_sigs":[{"h_denom_pub":"2YHVTSJQ89Z3KEXZRBP8H7B0HAFDB9ARTY3G9FG6RJH1E1CWGC5XHBQ8KF0FA03E3QN1WJTHQ82EQH6W4KMTYVXGM44BBZ8QZRJYTN0=","master_sig":"77BVYM45Z6T66T3TGGDRZ20X8S9R5CFSKRAQQEYC3R8W8D6DS8EBVNCDCJNREXXZD7MCNFM3QMXQ51FYF2HZ9SFWSYVFKAYMYVWSA2R="},{"h_denom_pub":"W2MGGHS6PNS3GPCRNX6Z9380PJTM05FW50P8M2DPGSV7AGQ3RBGVM7VGBV3W86KH44PZRXMAXRHFRCQS82TVMBX8H8FXKNFMVWVKVQG=","master_sig":"DA849T2YH8FS9B3M399N0ZPTZT98JTSNNA7DZVJ0AC44YRTJ2BJW6VY4QKYYXS2S41CYZZ71958TSTGAAF1F81ZRMYQXDK2VV5JHP18="}],"signkey_sigs":[{"key":"KNQEXXBEC5ERGH4EY2G3PCFBMPT89BD0XKZ7ZXSVC57DFJ4M9EJ0====","master_sig":"K5AKPTJZEFC0CQ0BGWFZD5ZZKVMN5MW85TPE2RPDW5RJ9A3PFKE6ZZ1Z7EWEK0YEGB3YYH6VH0NKSNGVXR16NQB1GCX3YG0DJN97R18="}]}

src/amount.ml

@@ -92,6 +92,13 @@ let of_string =
 let jsont = Jsont.of_of_string ~kind:"Amount" of_string ~enc:to_string
 let currency_len = 12
 
+let pad_currency s =
+  let len = String.length s in
+  assert (len <= 11);
+  let b = Bytes.make 12 '\x00' in
+  Bytes.blit_string s 0 b 0 len;
+  Bytes.to_string b
+
 let bin =
   let open Bin in
   record (fun _value _fraction _currency ->
@@ -99,7 +106,7 @@ let bin =
       assert false)
   |+ field neint64 (fun t -> t.value)
   |+ field neint32 (fun t -> t.fraction)
-  |+ field (bytes currency_len) (fun t -> t.currency)
+  |+ field (bytes currency_len) (fun t -> pad_currency t.currency)
   |> sealr
 
 let bin_nbo =
@@ -107,5 +114,5 @@ let bin_nbo =
   record (fun _value _fraction _currency -> assert false)
   |+ field beint64 (fun t -> t.value)
   |+ field beint32 (fun t -> t.fraction)
-  |+ field (bytes currency_len) (fun t -> t.currency)
+  |+ field (bytes currency_len) (fun t -> pad_currency t.currency)
   |> sealr

src/api.ml

@@ -38,7 +38,7 @@ end = struct
   type t = B32.t
 
   let hash s =
-    let open Digestif.SHA256 in
+    let open Digestif.SHA512 in
     s |> digest_string |> to_raw_string
 
   let jsont = Jsont.of_of_string ~kind:"HashCode" B32.decode ~enc:B32.encode

src/bin_type.ml

@@ -120,7 +120,11 @@ module Hash_64 = struct
     | false -> Fmt.failwith "Hash.of_octets failure: data is not 64 bytes"
     | true -> Digestif.SHA512.of_raw_string s
 
-  let to_octets = Digestif.SHA512.to_raw_string
+  let to_octets v =
+    let s = Digestif.SHA512.to_raw_string v in
+    match String.length s = 64 with
+    | false -> Fmt.failwith "Hash.to_octets failure: data is not 64 bytes"
+    | true -> s
 
   let bin =
     let open Bin in

src/crypto.ml

@@ -113,17 +113,19 @@ module RsaPublicKey = struct
       String.sub src pos len |> rev_string len |> Z.of_bits
 
     let to_octets ({ n; e } : Mirage_crypto_pk.Rsa.pub) =
-      let n_len = Z.size n in
-      let e_len = Z.size e in
+      let n = Z.to_bits n in
+      let e = Z.to_bits e in
+      let n_len = String.length n in
+      let e_len = String.length e in
       let len = 4 + n_len + e_len in
       let b = Bytes.make len '\x00' in
       Bytes.set_uint16_be b 0 n_len;
       Bytes.set_uint16_be b 2 e_len;
-      let n = Z.to_bits n |> rev_string n_len in
-      let e = Z.to_bits e |> rev_string e_len in
+      let n = rev_string n_len n in
+      let e = rev_string e_len e in
       Bytes.blit_string n 0 b 4 n_len;
       Bytes.blit_string e 0 b (4 + n_len) e_len;
-      Bytes.unsafe_to_string b
+      Bytes.to_string b
 
     let of_octets =
       let check = function
@@ -131,8 +133,6 @@ module RsaPublicKey = struct
         | true -> Ok ()
       in
       fun s ->
-        Result.get_ok
-        @@
         let open Syntax in
         let len = String.length s in
         let* () = check (len >= 4) in
@@ -142,6 +142,11 @@ module RsaPublicKey = struct
         let n = z_of_bits_be s 4 n_len in
         let e = z_of_bits_be s (4 + n_len) e_len in
         Mirage_crypto_pk.Rsa.pub ~n ~e |> unwrap_err_msg
+
+    let of_octets s =
+      match of_octets s with
+      | Error e -> Fmt.failwith "RsaPublicKey.of_octets failure: %s@." e
+      | Ok v -> v
   end
 
   include Binary

tools/offline_signature.ml

@@ -25,11 +25,11 @@ let denom_signature ~master_key
     Crypto.RsaPublicKey.to_octets pub
   in
   let h_denom_pub = Api.HashCode.hash pub_octets in
+  let master = Crypto.EddsaPrivateKey.(pub_of_priv master_key) in
+  let denom_hash = Bin_type.DenominationHash.hash pub_octets in
   let master_sig =
-    let open Bin_type in
+    (*let open Bin_type in*)
     let open Bin_signature.DenominationKeyValidityPS in
-    let master = Crypto.EddsaPrivateKey.(pub_of_priv master_key) in
-    let denom_hash = DenominationHash.hash pub_octets in
     {
       master;
       start= stamp_start;