package leaf import ( "flag" "fmt" "log" "git.sigsum.org/sigsum-go/cmd/sigsum-debug/leaf/hash" "git.sigsum.org/sigsum-go/cmd/sigsum-debug/leaf/inclusion" "git.sigsum.org/sigsum-go/cmd/sigsum-debug/leaf/sign" "git.sigsum.org/sigsum-go/cmd/sigsum-debug/leaf/verify" "git.sigsum.org/sigsum-go/internal/options" ) const usage = ` sigsum-debug leaf signs, verifies, and hashes Merkle tree leaves. Usage: sigsum-debug leaf help Outputs a usage message sigsum-debug leaf sign -k PRIVATE_KEY -h SHARD_HINT Reads data from stdin and outputs a signature sigsum-debug leaf verify -k PUBLIC_KEY -s SIGNATURE -h SHARD_HINT Reads data from stdin and verifies its signature sigsum-debug leaf hash -k KEY_HASH -s SIGNATURE -h SHARD_HINT Reads data from stdin and outputs a leaf hash sigsum-debug leaf inclusion -l LEAF_HASH -n TREE_SIZE -r ROOT_HASH Reads an inclusion proof from stdin and verifies it ` var ( optPrivateKey, optPublicKey, optKeyHash, optLeafHash, optRootHash, optSignature string optShardHint, optTreeSize uint64 ) func Main(args []string) error { var err error opt := options.New(args, func() { log.Printf(usage[1:]) }, setOptions) err = checkOptions(opt.Name()) if err == nil { switch opt.Name() { case "help": opt.Usage() case "sign": err = sign.Main(opt.Args(), optPrivateKey, optShardHint) case "verify": err = verify.Main(opt.Args(), optPublicKey, optSignature, optShardHint) case "hash": err = hash.Main(opt.Args(), optKeyHash, optSignature, optShardHint) case "inclusion": err = inclusion.Main(opt.Args(), optLeafHash, optRootHash, optTreeSize) default: err = fmt.Errorf("invalid command %q, try \"help\"", opt.Name()) } } if err != nil { format := " %s: %w" if len(opt.Name()) == 0 { format = "%s: %w" } err = fmt.Errorf(format, opt.Name(), err) } return err } func setOptions(fs *flag.FlagSet) { switch cmd := fs.Name(); cmd { case "help": case "sign": options.AddString(fs, &optPrivateKey, "k", "private-key", options.DefaultString) options.AddUint64(fs, &optShardHint, "h", "shard-hint", options.DefaultUint64) case "verify": options.AddString(fs, &optPublicKey, "k", "public-key", options.DefaultString) options.AddString(fs, &optSignature, "s", "signature", options.DefaultString) options.AddUint64(fs, &optShardHint, "h", "shard-hint", options.DefaultUint64) case "hash": options.AddString(fs, &optKeyHash, "k", "key-hash", options.DefaultString) options.AddString(fs, &optSignature, "s", "signature", options.DefaultString) options.AddUint64(fs, &optShardHint, "h", "shard-hint", options.DefaultUint64) case "inclusion": options.AddString(fs, &optLeafHash, "l", "leaf-hash", options.DefaultString) options.AddUint64(fs, &optTreeSize, "n", "tree-size", options.DefaultUint64) options.AddString(fs, &optRootHash, "r", "root-hash", options.DefaultString) } } // checkOptions checks that options with required arguments were set func checkOptions(cmd string) error { var err error switch cmd { case "help": case "sign": err = options.CheckString("private key", optPrivateKey, err) err = options.CheckUint64("shard hint", optShardHint, err) case "verify": err = options.CheckString("public key", optPublicKey, err) err = options.CheckString("signature", optSignature, err) err = options.CheckUint64("shard hint", optShardHint, err) case "hash": err = options.CheckString("key hash", optKeyHash, err) err = options.CheckString("signature", optSignature, err) err = options.CheckUint64("shard hint", optShardHint, err) case "inclusion": err = options.CheckString("leaf hash", optLeafHash, err) err = options.CheckUint64("tree size", optTreeSize, err) err = options.CheckString("root hash", optRootHash, err) } return err }