mirror of
https://source.quilibrium.com/quilibrium/ceremonyclient.git
synced 2024-12-27 09:05:18 +00:00
94 lines
2.4 KiB
Go
94 lines
2.4 KiB
Go
package protobufs
|
|
|
|
import (
|
|
"crypto"
|
|
"crypto/rand"
|
|
"encoding/binary"
|
|
|
|
"github.com/cloudflare/circl/sign/ed448"
|
|
"github.com/pkg/errors"
|
|
"golang.org/x/crypto/sha3"
|
|
)
|
|
|
|
func (j *CeremonyLobbyJoin) VerifySignature() error {
|
|
b := binary.BigEndian.AppendUint64([]byte("join"), j.FrameNumber)
|
|
b = append(b, j.IdentityKey.KeyValue...)
|
|
b = append(b, j.SignedPreKey.KeyValue...)
|
|
b = append(b, j.PeerId...)
|
|
|
|
if !ed448.Verify(
|
|
j.PublicKeySignatureEd448.PublicKey.KeyValue,
|
|
b,
|
|
j.PublicKeySignatureEd448.Signature,
|
|
"",
|
|
) {
|
|
return errors.Wrap(errors.New("invalid signature"), "sign with prover key")
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (j *CeremonyLobbyJoin) SignWithProverKey(
|
|
signer crypto.Signer,
|
|
) ([]byte, error) {
|
|
b := binary.BigEndian.AppendUint64([]byte("join"), j.FrameNumber)
|
|
b = append(b, j.IdentityKey.KeyValue...)
|
|
b = append(b, j.SignedPreKey.KeyValue...)
|
|
b = append(b, j.PeerId...)
|
|
|
|
// Non edwards signing variants need support to specify hash, edwards variants
|
|
// demand Hash(0) because it does SHA512 under the hood.
|
|
sig, err := signer.Sign(rand.Reader, b, crypto.Hash(0))
|
|
return sig, errors.Wrap(err, "sign with prover key")
|
|
}
|
|
|
|
func (t *CeremonyTranscriptShare) VerifySignature() error {
|
|
hash := sha3.New256()
|
|
|
|
for _, g1 := range t.AdditiveG1Powers {
|
|
if _, err := hash.Write(g1.KeyValue); err != nil {
|
|
return errors.Wrap(err, "verify signature")
|
|
}
|
|
}
|
|
|
|
for _, g2 := range t.AdditiveG2Powers {
|
|
if _, err := hash.Write(g2.KeyValue); err != nil {
|
|
return errors.Wrap(err, "verify signature")
|
|
}
|
|
}
|
|
|
|
if _, err := hash.Write(t.AdditiveG1_256Witness.KeyValue); err != nil {
|
|
return errors.Wrap(err, "verify signature")
|
|
}
|
|
|
|
return errors.Wrap(
|
|
t.ProverSignature.Verify(hash.Sum(nil)),
|
|
"verify signature",
|
|
)
|
|
}
|
|
|
|
func (t *CeremonyTranscriptShare) SignWithProverKey(
|
|
signer crypto.Signer,
|
|
) ([]byte, error) {
|
|
hash := sha3.New256()
|
|
|
|
for _, g1 := range t.AdditiveG1Powers {
|
|
if _, err := hash.Write(g1.KeyValue); err != nil {
|
|
return nil, errors.Wrap(err, "sign with prover key")
|
|
}
|
|
}
|
|
|
|
for _, g2 := range t.AdditiveG2Powers {
|
|
if _, err := hash.Write(g2.KeyValue); err != nil {
|
|
return nil, errors.Wrap(err, "sign with prover key")
|
|
}
|
|
}
|
|
|
|
if _, err := hash.Write(t.AdditiveG1_256Witness.KeyValue); err != nil {
|
|
return nil, errors.Wrap(err, "sign with prover key")
|
|
}
|
|
|
|
signature, err := signer.Sign(rand.Reader, hash.Sum(nil), crypto.Hash(0))
|
|
return signature, errors.Wrap(err, "sign with prover key")
|
|
}
|