rename

src/secmod.ml

@@ -2,24 +2,21 @@
    - key rotation
    - how many signkey to use?
      we just use 1 for now
-   - does the secmod's key as metadata/expiration date? *)
+   - does the secmod's own key as metadata/expiration date? *)
 open Syntax
-
-type eddsa_priv = Crypto.EddsaPrivateKey.t
-type eddsa_pub = Crypto.EddsaPublicKey.t
-type h_denom_pub = Bin_type.DenominationHash.t
+open Crypto
 
 type t = {
   lock: Miou.Mutex.t;
   sm_key_priv: eddsa_priv;
   sm_key_pub: eddsa_pub;
-  sk_ht: (eddsa_pub, Signkey.t) Hashtbl.t;
+  sk_ht: (eddsa_pub, Signkey_data.t) Hashtbl.t;
   sk_revoked_ht:
-    (eddsa_pub, Signkey.t * Bin_sig.MasterSigningKeyRevocation.t) Hashtbl.t;
-  dn_ht: (h_denom_pub, Denomination.t) Hashtbl.t;
+    (eddsa_pub, Signkey_data.t * Bin_sig.MasterSigningKeyRevocation.t) Hashtbl.t;
+  dn_ht: (denomination_hash, Denom_data.t) Hashtbl.t;
   dn_revoked_ht:
-    ( h_denom_pub,
-      Denomination.t * Bin_sig.MasterDenominationKeyRevocation.t )
+    ( denomination_hash,
+      Denom_data.t * Bin_sig.MasterDenominationKeyRevocation.t )
     Hashtbl.t;
 }
 
@@ -85,7 +82,7 @@ let revoke_denomination t h_denom_pub master_sig =
 let dir = Fpath.(v "data" / "secmod ")
 
 let db_lookup_signkey_data conn fname priv =
-  let pub = Crypto.EddsaPrivateKey.pub_of_priv priv in
+  let pub = EddsaPrivateKey.pub_of_priv priv in
   let* opt = Pg.lookup_signing_key conn pub in
   match opt with
   | None ->
@@ -97,15 +94,14 @@ let db_lookup_signkey_data conn fname priv =
       (* TODO master_sig *)
       let master_sig = None in
       let v =
-        Signkey.{ pub; priv; stamp_start; stamp_expire; stamp_end; master_sig }
+        Signkey_data.
+          { pub; priv; stamp_start; stamp_expire; stamp_end; master_sig }
       in
       Ok v
 
 let db_lookup_denom_data conn ~section_name priv =
-  let pub = Crypto.RsaPrivateKey.pub_of_priv priv in
-  let h_pub =
-    Bin_type.DenominationHash.hash (Crypto.RsaPublicKey.to_octets pub)
-  in
+  let pub = RsaPrivateKey.pub_of_priv priv in
+  let h_pub = Bin_type.DenominationHash.hash (RsaPublicKey.to_octets pub) in
   let* opt = Pg.lookup_denomination_key conn h_pub in
   match opt with
   | None ->
@@ -126,7 +122,7 @@ let db_lookup_denom_data conn ~section_name priv =
         age_mask ) ->
       let master_sig = None in
       let v =
-        Denomination.
+        Denom_data.
           {
             pub;
             priv;
@@ -161,14 +157,14 @@ let _store t =
     get_signkeys t
     |> List.mapi (fun i key ->
         let fname = Fpath.(dir / string_of_int i) in
-        (fname, key.Signkey.priv))
+        (fname, key.Signkey_data.priv))
     |> list_iter (fun (fname, key) -> Data_file.write_eddsa fname key)
   in
   let* () =
     get_denoms t
     |> List.mapi (fun i key ->
         let fname = Fpath.(dir / string_of_int i) in
-        (fname, key.Denomination.priv))
+        (fname, key.Denom_data.priv))
     |> list_iter (fun (fname, key) -> Data_file.write_rsa fname key)
   in
   Ok ()
@@ -206,17 +202,17 @@ let load conn =
   match (sm_key_priv, signkeys, denoms) with
   | None, None, None -> Ok None
   | Some sm_key_priv, Some signkeys, Some denoms ->
-      let sm_key_pub = Crypto.EddsaPrivateKey.pub_of_priv sm_key_priv in
+      let sm_key_pub = EddsaPrivateKey.pub_of_priv sm_key_priv in
       let lock = Miou.Mutex.create () in
       let sk_ht =
         signkeys
-        |> List.map (fun v -> (v.Signkey.pub, v))
+        |> List.map (fun v -> (v.Signkey_data.pub, v))
         |> List.to_seq
         |> Hashtbl.of_seq
       in
       let dn_ht =
         denoms
-        |> List.map (fun v -> (v.Denomination.h_pub, v))
+        |> List.map (fun v -> (v.Denom_data.h_pub, v))
         |> List.to_seq
         |> Hashtbl.of_seq
       in
@@ -235,19 +231,79 @@ let load conn =
            })
   | _, _, _ -> error_invalid_state
 
+let make_new_signkey () =
+  let stamp_start = Ptime_clock.now () |> Option.some in
+  let stamp_expire =
+    Timestamp.add_span_exn stamp_start
+      (Some Config.Exchange.signkey_legal_duration)
+  in
+  let stamp_end = stamp_expire in
+  let priv, pub = Mirage_crypto_ec.Ed25519.generate () in
+  let master_sig = None in
+  Signkey_data.{ pub; priv; stamp_start; stamp_expire; stamp_end; master_sig }
+
+let make_new_denom
+    Config.Coin.
+      {
+        section_name;
+        value;
+        duration_withdraw;
+        duration_spend;
+        duration_legal;
+        fee_withdraw;
+        fee_deposit;
+        fee_refresh;
+        fee_refund;
+        cipher;
+        rsa_keysize;
+        age_restricted= _;
+      } =
+  assert (cipher = `RSA);
+  let stamp_start = Ptime_clock.now () |> Option.some in
+  let stamp_expire_withdraw =
+    Timestamp.add_span_exn stamp_start (Some duration_withdraw)
+  in
+  let stamp_expire_deposit =
+    Timestamp.add_span_exn stamp_start (Some duration_spend)
+  in
+  let stamp_expire_legal =
+    Timestamp.add_span_exn stamp_start (Some duration_legal)
+  in
+  let priv, pub = RsaPrivateKey.generate ~bits:rsa_keysize () in
+  let h_pub = Bin_type.DenominationHash.hash (RsaPublicKey.to_octets pub) in
+  let master_sig = None in
+  Denom_data.
+    {
+      pub;
+      priv;
+      section_name;
+      value;
+      stamp_start;
+      stamp_expire_withdraw;
+      stamp_expire_deposit;
+      stamp_expire_legal;
+      fee_withdraw;
+      fee_deposit;
+      fee_refresh;
+      fee_refund;
+      age_mask= 0;
+      h_pub;
+      master_sig;
+    }
+
 let make_new () =
   let lock = Miou.Mutex.create () in
   let sm_key_priv, sm_key_pub = Mirage_crypto_ec.Ed25519.generate () in
   let sk_ht =
-    [ Signkey.make () ]
-    |> List.map (fun v -> (v.Signkey.pub, v))
+    [ make_new_signkey () ]
+    |> List.map (fun v -> (v.Signkey_data.pub, v))
     |> List.to_seq
     |> Hashtbl.of_seq
   in
   let dn_ht =
     Config.Coin.all_coins
-    |> List.map Denomination.make
-    |> List.map (fun v -> (v.Denomination.h_pub, v))
+    |> List.map make_new_denom
+    |> List.map (fun v -> (v.Denom_data.h_pub, v))
     |> List.to_seq
     |> Hashtbl.of_seq
   in