open Crypto
open Bin_type
open Api

let denom_signature ~master_key
    FutureDenom.
      {
        section_name= _;
        value;
        stamp_start;
        stamp_expire_withdraw;
        stamp_expire_deposit;
        stamp_expire_legal;
        denom_pub;
        fee_withdraw;
        fee_deposit;
        fee_refresh;
        fee_refund= _;
        (* TODO check sigs *)
        denom_secmod_sig= _;
      } =
  let octets = DenominationKey.to_octets denom_pub in
  let h_denom_pub = HashCode.hash octets in
  let master_sig =
    let open Bin_signature.DenominationKeyValidityPS in
    let master = EddsaPrivateKey.(pub_of_priv master_key) in
    let denom_hash = DenominationHash.hash octets in
    sign ~key:master_key
      {
        master;
        start= stamp_start;
        expire_withdraw= stamp_expire_withdraw;
        expire_spend= stamp_expire_deposit;
        expire_legal= stamp_expire_legal;
        value;
        fee_withdraw;
        fee_deposit;
        fee_refresh;
        denom_hash;
      }
  in
  DenomSignature.{ h_denom_pub; master_sig }

let signkey_signature ~master_key
    FutureSignKey.
      {
        key;
        stamp_start;
        stamp_expire;
        stamp_end;
        (* TODO check sigs *)
        signkey_secmod_sig= _;
      } =
  let master_sig =
    let open Bin_signature.ExchangeSigningKeyValidityPS in
    sign ~key:master_key
      {
        start= stamp_start;
        expire= stamp_expire;
        end_= stamp_end;
        signkey_pub= key;
      }
  in
  SignKeySignature.{ key; master_sig }

let make_master_signatures ~master_key
    FutureKeysResponse.
      {
        future_denoms;
        future_signkeys;
        (* TODO check sigs *)
        master_pub= _;
        denom_secmod_public_key= _;
        signkey_secmod_public_key= _;
      } =
  let denom_sigs = List.map (denom_signature ~master_key) future_denoms in
  let signkey_sigs = List.map (signkey_signature ~master_key) future_signkeys in
  MasterSignatures.{ denom_sigs; signkey_sigs }

let verify_future_key_response _future_key_response =
  (* TODO *)
  Ok ()