1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
|
package leaf
import (
"flag"
"fmt"
"log"
"git.sigsum.org/sigsum-go/cmd/sigsum-debug/leaf/hash"
"git.sigsum.org/sigsum-go/cmd/sigsum-debug/leaf/inclusion"
"git.sigsum.org/sigsum-go/cmd/sigsum-debug/leaf/sign"
"git.sigsum.org/sigsum-go/cmd/sigsum-debug/leaf/verify"
"git.sigsum.org/sigsum-go/internal/options"
)
const usage = `
sigsum-debug leaf signs, verifies, and hashes Merkle tree leaves.
Usage:
sigsum-debug leaf help
Outputs a usage message
sigsum-debug leaf sign -k PRIVATE_KEY -h SHARD_HINT
Reads data from stdin and outputs a signature
sigsum-debug leaf verify -k PUBLIC_KEY -s SIGNATURE -h SHARD_HINT
Reads data from stdin and verifies its signature
sigsum-debug leaf hash -k KEY_HASH -s SIGNATURE -h SHARD_HINT
Reads data from stdin and outputs a leaf hash
sigsum-debug leaf inclusion -l LEAF_HASH -n TREE_SIZE -r ROOT_HASH
Reads an inclusion proof from stdin and verifies it
`
var (
optPrivateKey, optPublicKey, optKeyHash, optLeafHash, optRootHash, optSignature string
optShardHint, optTreeSize uint64
)
func Main(args []string) error {
var err error
opt := options.New(args, func() { log.Printf(usage[1:]) }, setOptions)
err = checkOptions(opt.Name())
if err == nil {
switch opt.Name() {
case "help", "":
opt.Usage()
case "sign":
err = sign.Main(opt.Args(), optPrivateKey, optShardHint)
case "verify":
err = verify.Main(opt.Args(), optPublicKey, optSignature, optShardHint)
case "hash":
err = hash.Main(opt.Args(), optKeyHash, optSignature, optShardHint)
case "inclusion":
err = inclusion.Main(opt.Args(), optLeafHash, optRootHash, optTreeSize)
default:
err = fmt.Errorf("invalid command %q, try \"help\"", opt.Name())
}
}
if err != nil {
format := " %s: %w"
if len(opt.Name()) == 0 {
format = "%s: %w"
}
err = fmt.Errorf(format, opt.Name(), err)
}
return err
}
func setOptions(fs *flag.FlagSet) {
switch cmd := fs.Name(); cmd {
case "help":
case "sign":
options.AddString(fs, &optPrivateKey, "k", "private-key", options.DefaultString)
options.AddUint64(fs, &optShardHint, "h", "shard-hint", options.DefaultUint64)
case "verify":
options.AddString(fs, &optPublicKey, "k", "public-key", options.DefaultString)
options.AddString(fs, &optSignature, "s", "signature", options.DefaultString)
options.AddUint64(fs, &optShardHint, "h", "shard-hint", options.DefaultUint64)
case "hash":
options.AddString(fs, &optKeyHash, "k", "key-hash", options.DefaultString)
options.AddString(fs, &optSignature, "s", "signature", options.DefaultString)
options.AddUint64(fs, &optShardHint, "h", "shard-hint", options.DefaultUint64)
case "inclusion":
options.AddString(fs, &optLeafHash, "l", "leaf-hash", options.DefaultString)
options.AddUint64(fs, &optTreeSize, "n", "tree-size", options.DefaultUint64)
options.AddString(fs, &optRootHash, "r", "root-hash", options.DefaultString)
}
}
// checkOptions checks that options with required arguments were set
func checkOptions(cmd string) error {
var err error
switch cmd {
case "help":
case "sign":
err = options.CheckString("private key", optPrivateKey, err)
err = options.CheckUint64("shard hint", optShardHint, err)
case "verify":
err = options.CheckString("public key", optPublicKey, err)
err = options.CheckString("signature", optSignature, err)
err = options.CheckUint64("shard hint", optShardHint, err)
case "hash":
err = options.CheckString("key hash", optKeyHash, err)
err = options.CheckString("signature", optSignature, err)
err = options.CheckUint64("shard hint", optShardHint, err)
case "inclusion":
err = options.CheckString("leaf hash", optLeafHash, err)
err = options.CheckUint64("tree size", optTreeSize, err)
err = options.CheckString("root hash", optRootHash, err)
}
return err
}
|
