You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
106 lines
2.1 KiB
Go
106 lines
2.1 KiB
Go
package main
|
|
|
|
import (
|
|
"crypto"
|
|
"encoding/base64"
|
|
"flag"
|
|
"fmt"
|
|
"io/ioutil"
|
|
"os"
|
|
"path/filepath"
|
|
|
|
"golang.org/x/crypto/ed25519"
|
|
)
|
|
|
|
func main() {
|
|
var doGenerate bool
|
|
flag.BoolVar(&doGenerate, "g", false, "Generate a keypair")
|
|
|
|
var doPrintPub bool
|
|
flag.BoolVar(&doPrintPub, "p", false, "Print the pub key")
|
|
|
|
var doSign bool
|
|
flag.BoolVar(&doSign, "s", false, "Sign the release tar")
|
|
|
|
var publicKeyString string
|
|
flag.StringVar(&publicKeyString, "k", "", "Public key to verify against (runs verifier if set)")
|
|
|
|
flag.Parse()
|
|
|
|
if doGenerate {
|
|
generateKeypair()
|
|
os.Exit(0)
|
|
}
|
|
|
|
if doPrintPub {
|
|
pub, _ := loadKeys()
|
|
fmt.Printf("Public key: %s\n", base64.StdEncoding.EncodeToString(pub))
|
|
os.Exit(0)
|
|
}
|
|
|
|
if doSign {
|
|
_, priv := loadKeys()
|
|
|
|
file, err := ioutil.ReadFile("bin/NoiseTorch_x64.tgz")
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
sig, err := priv.Sign(nil, file, crypto.Hash(0))
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
if err := ioutil.WriteFile("bin/NoiseTorch_x64.tgz.sig", sig, 0644); err != nil {
|
|
panic(err)
|
|
}
|
|
os.Exit(0)
|
|
}
|
|
|
|
if publicKeyString != "" {
|
|
pub, err := base64.StdEncoding.DecodeString(publicKeyString)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
file, err := ioutil.ReadFile("bin/NoiseTorch_x64.tgz")
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
sig, err := ioutil.ReadFile("bin/NoiseTorch_x64.tgz.sig")
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
verified := ed25519.Verify(pub, file, sig)
|
|
|
|
fmt.Printf("Verified %t\n", verified)
|
|
}
|
|
}
|
|
|
|
func loadKeys() (ed25519.PublicKey, ed25519.PrivateKey) {
|
|
seed, err := ioutil.ReadFile(filepath.Join(os.Getenv("HOME"), ".config/noisetorch/private.key"))
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
priv := ed25519.NewKeyFromSeed(seed)
|
|
pub := priv.Public().(ed25519.PublicKey)
|
|
|
|
return pub, priv
|
|
}
|
|
|
|
func generateKeypair() {
|
|
pub, priv, err := ed25519.GenerateKey(nil)
|
|
if err != nil {
|
|
panic(err)
|
|
os.Exit(1)
|
|
}
|
|
if err := ioutil.WriteFile(filepath.Join(os.Getenv("HOME"), ".config/noisetorch/private.key"), priv.Seed(), 0600); err != nil {
|
|
panic(err)
|
|
os.Exit(2)
|
|
}
|
|
|
|
fmt.Printf("Private key generated and saved.\nPublic key: %s\n", base64.StdEncoding.EncodeToString(pub))
|
|
}
|