add proof verification to sigsum-debug

1 files changed, 27 insertions, 1 deletions

diff --git a/cmd/sigsum-debug/leaf/inclusion/inclusion.go b/cmd/sigsum-debug/leaf/inclusion/inclusion.go
index f9aeb68..e70b3eb 100644
--- a/cmd/sigsum-debug/leaf/inclusion/inclusion.go
+++ b/cmd/sigsum-debug/leaf/inclusion/inclusion.go
@@ -1,9 +1,35 @@
 package inclusion
 
 import (
+	"bytes"
 	"fmt"
+
+	"git.sigsum.org/sigsum-go/internal/fmtio"
+	"git.sigsum.org/sigsum-go/pkg/types"
 )
 
 func Main(args []string, optLeafHash, optRootHash string, optTreeSize uint64) error {
-	return fmt.Errorf("TODO")
+	if len(args) != 0 {
+		return fmt.Errorf("trailing arguments: %v", args)
+	}
+	b, err := fmtio.BytesFromStdin()
+	if err != nil {
+		return fmt.Errorf("read: %w", err)
+	}
+	var proof types.InclusionProof
+	if err := proof.FromASCII(bytes.NewBuffer(b), optTreeSize); err != nil {
+		return fmt.Errorf("parse proof: %w", err)
+	}
+	leafHash, err := fmtio.HashFromHex(optLeafHash)
+	if err != nil {
+		return fmt.Errorf("parse leaf hash: %w", err)
+	}
+	rootHash, err := fmtio.HashFromHex(optRootHash)
+	if err != nil {
+		return fmt.Errorf("parse root hash: %w", err)
+	}
+	if err := proof.Verify(&leafHash, &rootHash); err != nil {
+		return fmt.Errorf("verify: %w", err)
+	}
+	return nil
 }