aboutsummaryrefslogtreecommitdiff
path: root/cmd/sigsum-debug/leaf/leaf.go
diff options
context:
space:
mode:
authorRasmus Dahlberg <rasmus@mullvad.net>2022-04-23 18:19:25 +0200
committerRasmus Dahlberg <rasmus@mullvad.net>2022-04-23 18:29:31 +0200
commit047500ae23a12469ce3e458c6a58a642716041b7 (patch)
treedd8ab39910e623ff756532bd892fb2f8d2e5fef6 /cmd/sigsum-debug/leaf/leaf.go
parent4fc0ff2ec2f48519ee245d6d7edee1921cb3b8bc (diff)
add drafty tool named sigsum-debug
Meant to be used for debugging and tests only. Replaces cmd/tmp/* in log-go, expect for the DNS command which is redundant. Use `dig -t txt $domain_hint` to debug domain hints.
Diffstat (limited to 'cmd/sigsum-debug/leaf/leaf.go')
-rw-r--r--cmd/sigsum-debug/leaf/leaf.go119
1 files changed, 119 insertions, 0 deletions
diff --git a/cmd/sigsum-debug/leaf/leaf.go b/cmd/sigsum-debug/leaf/leaf.go
new file mode 100644
index 0000000..97de37e
--- /dev/null
+++ b/cmd/sigsum-debug/leaf/leaf.go
@@ -0,0 +1,119 @@
+package leaf
+
+import (
+ "flag"
+ "fmt"
+ "log"
+
+ "git.sigsum.org/sigsum-go/cmd/sigsum-debug/leaf/hash"
+ "git.sigsum.org/sigsum-go/cmd/sigsum-debug/leaf/inclusion"
+ "git.sigsum.org/sigsum-go/cmd/sigsum-debug/leaf/sign"
+ "git.sigsum.org/sigsum-go/cmd/sigsum-debug/leaf/verify"
+ "git.sigsum.org/sigsum-go/internal/options"
+)
+
+const usage = `
+sigsum-debug leaf signs, verifies, and hashes Merkle tree leaves.
+
+Usage:
+
+ sigsum-debug leaf help
+ Outputs a usage message
+
+ sigsum-debug leaf sign -k PRIVATE_KEY -h SHARD_HINT
+ Reads data from stdin and outputs a signature
+
+ sigsum-debug leaf verify -k PUBLIC_KEY -s SIGNATURE -h SHARD_HINT
+ Reads data from stdin and verifies its signature
+
+ sigsum-debug leaf hash -k KEY_HASH -s SIGNATURE -h SHARD_HINT
+ Reads data from stdin and outputs a leaf hash
+
+ sigsum-debug leaf inclusion -l LEAF_HASH -n TREE_SIZE -r ROOT_HASH
+ Reads an inclusion proof from stdin and verifies it
+
+`
+
+var (
+ optPrivateKey, optPublicKey, optKeyHash, optLeafHash, optRootHash, optSignature string
+ optShardHint, optTreeSize uint64
+)
+
+func Main(args []string) error {
+ var err error
+
+ opt := options.New(args, func() { log.Printf(usage[1:]) }, setOptions)
+ err = checkOptions(opt.Name())
+ if err == nil {
+ switch opt.Name() {
+ case "help":
+ opt.Usage()
+ case "sign":
+ err = sign.Main(opt.Args(), optPrivateKey, optShardHint)
+ case "verify":
+ err = verify.Main(opt.Args(), optPublicKey, optSignature, optShardHint)
+ case "hash":
+ err = hash.Main(opt.Args(), optKeyHash, optSignature, optShardHint)
+ case "inclusion":
+ err = inclusion.Main(opt.Args(), optLeafHash, optRootHash, optTreeSize)
+ default:
+ err = fmt.Errorf("invalid command %q, try \"help\"", opt.Name())
+ }
+ }
+ if err != nil {
+ format := " %s: %w"
+ if len(opt.Name()) == 0 {
+ format = "%s: %w"
+ }
+ err = fmt.Errorf(format, opt.Name(), err)
+ }
+
+ return err
+}
+
+func setOptions(fs *flag.FlagSet) {
+ switch cmd := fs.Name(); cmd {
+ case "help":
+ case "sign":
+ options.AddString(fs, &optPrivateKey, "k", "private-key", options.DefaultString)
+ options.AddUint64(fs, &optShardHint, "h", "shard-hint", options.DefaultUint64)
+ case "verify":
+ options.AddString(fs, &optPublicKey, "k", "public-key", options.DefaultString)
+ options.AddString(fs, &optSignature, "s", "signature", options.DefaultString)
+ options.AddUint64(fs, &optShardHint, "h", "shard-hint", options.DefaultUint64)
+ case "hash":
+ options.AddString(fs, &optKeyHash, "k", "key-hash", options.DefaultString)
+ options.AddString(fs, &optSignature, "s", "signature", options.DefaultString)
+ options.AddUint64(fs, &optShardHint, "h", "shard-hint", options.DefaultUint64)
+ case "inclusion":
+ options.AddString(fs, &optLeafHash, "l", "leaf-hash", options.DefaultString)
+ options.AddUint64(fs, &optTreeSize, "n", "tree-size", options.DefaultUint64)
+ options.AddString(fs, &optRootHash, "r", "root-hash", options.DefaultString)
+ }
+}
+
+// checkOptions checks that options with required arguments were set
+func checkOptions(cmd string) error {
+ var err error
+
+ switch cmd {
+ case "help":
+ case "sign":
+ err = options.CheckString("private key", optPrivateKey, err)
+ err = options.CheckUint64("shard hint", optShardHint, err)
+ case "verify":
+ err = options.CheckString("public key", optPublicKey, err)
+ err = options.CheckString("signature", optSignature, err)
+ err = options.CheckUint64("shard hint", optShardHint, err)
+ case "hash":
+ err = options.CheckString("key hash", optKeyHash, err)
+ err = options.CheckString("signature", optSignature, err)
+ err = options.CheckUint64("shard hint", optShardHint, err)
+ case "inclusion":
+ err = options.CheckString("leaf hash", optLeafHash, err)
+ err = options.CheckUint64("tree size", optTreeSize, err)
+ err = options.CheckString("root hash", optRootHash, err)
+ }
+
+ return err
+}