From 9ab61d6884a9ac26592723523ed2521c79c47a1a Mon Sep 17 00:00:00 2001 From: Rasmus Dahlberg Date: Tue, 3 Nov 2020 13:17:11 +0100 Subject: fixed signature verification and client get-sth --- verify.go | 36 ------------------------------------ 1 file changed, 36 deletions(-) delete mode 100644 verify.go (limited to 'verify.go') diff --git a/verify.go b/verify.go deleted file mode 100644 index 50bd923..0000000 --- a/verify.go +++ /dev/null @@ -1,36 +0,0 @@ -package stfe - -import ( - "fmt" - - "crypto/ed25519" - "crypto/tls" - "crypto/x509" -) - -func (sdi *SignedDebugInfoV1) Verify(scheme tls.SignatureScheme, publicKey, message []byte) error { - if scheme != tls.Ed25519 { - return fmt.Errorf("unsupported signature scheme: %v", scheme) - } - - // TODO: fix so that publicKey is already passed as crypto.PublicKey - k, err := x509.ParsePKIXPublicKey(publicKey) - if err != nil { - return fmt.Errorf("failed parsing public key: %v", err) - } - - switch t := k.(type) { - case ed25519.PublicKey: - vk := k.(ed25519.PublicKey) - if !ed25519.Verify(vk, message, sdi.Signature) { - return fmt.Errorf("invalid signature: PublicKey(%v) Message(%v) Signature(%v)", vk, message, sdi.Signature) - } - return nil - default: - return fmt.Errorf("Unsupported public key: %s", t) - } -} - -func (sth *SignedTreeHeadV1) Verify(scheme tls.SignatureScheme, publicKey []byte) error { - return fmt.Errorf("TODO: verify signature") -} -- cgit v1.2.3