verify.go


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

package stfe

import (
	"fmt"

	"crypto/ed25519"
	"crypto/tls"
	"crypto/x509"
)

func (sdi *SignedDebugInfoV1) Verify(scheme tls.SignatureScheme, publicKey, message []byte) error {
	if scheme != tls.Ed25519 {
		return fmt.Errorf("unsupported signature scheme: %v", scheme)
	}

	// TODO: fix so that publicKey is already passed as crypto.PublicKey
	k, err := x509.ParsePKIXPublicKey(publicKey)
	if err != nil {
		return fmt.Errorf("failed parsing public key: %v", err)
	}

	switch t := k.(type) {
	case ed25519.PublicKey:
		vk := k.(ed25519.PublicKey)
		if !ed25519.Verify(vk, message, sdi.Signature) {
			return fmt.Errorf("invalid signature: PublicKey(%v) Message(%v) Signature(%v)", vk, message, sdi.Signature)
		}
		return nil
	default:
		return fmt.Errorf("Unsupported public key: %s", t)
	}
}

func (sth *SignedTreeHeadV1) Verify(scheme tls.SignatureScheme, publicKey []byte) error {
	return fmt.Errorf("TODO: verify signature")
}