mirror of
https://github.com/onsonr/sonr.git
synced 2025-03-10 13:07:09 +00:00
- **deps: remove tigerbeetle-go dependency** - **refactor: remove unused landing page components and models** - **feat: add pin and publish vault handlers** - **refactor: move payment and credential services to webui browser package** - **refactor: remove unused credentials management components** - **feat: add landing page components and middleware for credentials and payments** - **refactor: remove unused imports in vault config** - **refactor: remove unused bank, DID, and DWN gRPC clients** - **refactor: rename client files and improve code structure** - **feat: add session middleware helpers and landing page components** - **feat: add user profile registration flow** - **feat: Implement WebAuthn registration flow** - **feat: add error view for users without WebAuthn devices** - **chore: update htmx to include extensions** - **refactor: rename pin handler to claim handler and update routes** - **chore: update import paths after moving UI components and styles** - **fix: address potential server errors by handling and logging them properly** - **refactor: move vault config to gateway package and update related dependencies** - **style: simplify form styling and remove unnecessary components** - **feat: improve UI design for registration flow** - **feat: implement passkey-based authentication** - **refactor: migrate registration forms to use reusable form components** - **refactor: remove tailwindcss setup and use CDN instead** - **style: update submit button style to use outline variant** - **refactor: refactor server and IPFS client, remove MPC encryption** - **refactor: Abstract keyshare functionality and improve message encoding** - **refactor: improve keyset JSON marshaling and error handling** - **feat: add support for digital signatures using MPC keys** - **fix: Refactor MarshalJSON to use standard json.Marshal for Message serialization** - **fix: Encode messages before storing in keyshare structs** - **style: update form input styles for improved user experience** - **refactor: improve code structure in registration handlers** - **refactor: consolidate signer middleware and IPFS interaction** - **refactor: rename MPC signing and refresh protocol functions** - **refactor: update hway configuration loading mechanism** - **feat: integrate database support for sessions and users** - **refactor: remove devnet infrastructure and simplify build process** - **docs(guides): add Sonr DID module guide** - **feat: integrate progress bar into registration form** - **refactor: migrate WebAuthn dependencies to protocol package** - **feat: enhance user registration with passkey integration and improved form styling** - **refactor: move gateway view handlers to internal pages package** - **refactor: Move address package to MPC module** - **feat: integrate turnstile for registration** - **style: remove unnecessary size attribute from buttons** - **refactor: rename cookie package to session/cookie** - **refactor: remove unnecessary types.Session dependency** - **refactor: rename pkg/core to pkg/chain** - **refactor: simplify deployment process by removing testnet-specific Taskfile and devbox configuration** - **feat: add error redirect functionality and improve routes** - **feat: implement custom error handling for gateway** - **chore: update version number to 0.0.7 in template** - **feat: add IPFS client implementation** - **feat: Implement full IPFS client interface with comprehensive methods** - **refactor: improve IPFS client path handling** - **refactor: Move UCAN middleware to controller package** - **feat: add UCAN middleware to motr** - **refactor: update libp2p dependency** - **docs: add UCAN specification document** - **refactor: move UCAN controller logic to common package** - **refactor: rename exports.go to common.go** - **feat: add UCAN token support** - **refactor: migrate UCAN token parsing to dedicated package** - **refactor: improve CometBFT and app config initialization** - **refactor: improve deployment scripts and documentation** - **feat: integrate IPFS and producer middleware** - **refactor: rename agent directory to aider** - **fix: correct libp2p import path** - **refactor: remove redundant dependency** - **cleanup: remove unnecessary test files** - **refactor: move attention types to crypto/ucan package** - **feat: expand capabilities and resource types for UCANs** - **refactor: rename sonr.go to codec.go and update related imports** - **feat: add IPFS-based token store** - **feat: Implement IPFS-based token store with caching and UCAN integration** - **feat: Add dynamic attenuation constructor for UCAN presets** - **fix: Handle missing or invalid attenuation data with EmptyAttenuation** - **fix: Update UCAN attenuation tests with correct capability types** - **feat: integrate UCAN-based authorization into the producer middleware** - **refactor: remove unused dependency on go-ucan** - **refactor: Move address handling logic to DID module** - **feat: Add support for compressed and uncompressed Secp256k1 public keys in didkey** - **test: Add test for generating DID key from MPC keyshares** - **feat: Add methods for extracting compressed and uncompressed public keys in share types** - **feat: Add BaseKeyshare struct with public key conversion methods** - **refactor: Use compressed and uncompressed public keys in keyshare, fix public key usage in tests and verification** - **feat: add support for key generation policy type** - **fix: correct typo in VaultPermissions constant** - **refactor: move JWT related code to ucan package** - **refactor: move UCAN JWT and source code to spec package**
108 lines
3.0 KiB
Go
108 lines
3.0 KiB
Go
package mpc
|
|
|
|
import (
|
|
"crypto/ecdsa"
|
|
"errors"
|
|
"math/big"
|
|
|
|
"github.com/onsonr/sonr/crypto/core/curves"
|
|
"github.com/onsonr/sonr/crypto/core/protocol"
|
|
"github.com/onsonr/sonr/crypto/tecdsa/dklsv1"
|
|
)
|
|
|
|
// NewKeyshareSource generates a new MPC keyshare
|
|
func NewKeyset() (Keyset, error) {
|
|
curve := curves.K256()
|
|
valKs := dklsv1.NewAliceDkg(curve, protocol.Version1)
|
|
userKs := dklsv1.NewBobDkg(curve, protocol.Version1)
|
|
aErr, bErr := RunProtocol(userKs, valKs)
|
|
if err := checkIteratedErrors(aErr, bErr); err != nil {
|
|
return nil, err
|
|
}
|
|
valRes, err := valKs.Result(protocol.Version1)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
valShare, err := NewValKeyshare(valRes)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
userRes, err := userKs.Result(protocol.Version1)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
userShare, err := NewUserKeyshare(userRes)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return keyset{val: valShare, user: userShare}, nil
|
|
}
|
|
|
|
// ExecuteSigning runs the MPC signing protocol
|
|
func ExecuteSigning(signFuncVal SignFunc, signFuncUser SignFunc) (Signature, error) {
|
|
aErr, bErr := RunProtocol(signFuncVal, signFuncUser)
|
|
if err := checkIteratedErrors(aErr, bErr); err != nil {
|
|
return nil, err
|
|
}
|
|
out, err := signFuncUser.Result(protocol.Version1)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return dklsv1.DecodeSignature(out)
|
|
}
|
|
|
|
// ExecuteRefresh runs the MPC refresh protocol
|
|
func ExecuteRefresh(refreshFuncVal RefreshFunc, refreshFuncUser RefreshFunc) (Keyset, error) {
|
|
aErr, bErr := RunProtocol(refreshFuncVal, refreshFuncUser)
|
|
if err := checkIteratedErrors(aErr, bErr); err != nil {
|
|
return nil, err
|
|
}
|
|
valRefreshResult, err := refreshFuncVal.Result(protocol.Version1)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
valShare, err := NewValKeyshare(valRefreshResult)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
userRefreshResult, err := refreshFuncUser.Result(protocol.Version1)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
userShare, err := NewUserKeyshare(userRefreshResult)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return keyset{val: valShare, user: userShare}, nil
|
|
}
|
|
|
|
// SerializeSecp256k1Signature serializes an ECDSA signature into a byte slice
|
|
func SerializeSignature(sig Signature) ([]byte, error) {
|
|
rBytes := sig.R.Bytes()
|
|
sBytes := sig.S.Bytes()
|
|
|
|
sigBytes := make([]byte, 66) // V (1 byte) + R (32 bytes) + S (32 bytes)
|
|
sigBytes[0] = byte(sig.V)
|
|
copy(sigBytes[33-len(rBytes):33], rBytes)
|
|
copy(sigBytes[66-len(sBytes):66], sBytes)
|
|
return sigBytes, nil
|
|
}
|
|
|
|
// DeserializeSecp256k1Signature deserializes an ECDSA signature from a byte slice
|
|
func DeserializeSignature(sigBytes []byte) (Signature, error) {
|
|
if len(sigBytes) != 66 {
|
|
return nil, errors.New("malformed signature: not the correct size")
|
|
}
|
|
sig := &curves.EcdsaSignature{
|
|
V: int(sigBytes[0]),
|
|
R: new(big.Int).SetBytes(sigBytes[1:33]),
|
|
S: new(big.Int).SetBytes(sigBytes[33:66]),
|
|
}
|
|
return sig, nil
|
|
}
|
|
|
|
// VerifyMPCSignature verifies an MPC signature
|
|
func VerifyMPCSignature(sig Signature, msg []byte, publicKey *ecdsa.PublicKey) bool {
|
|
return ecdsa.Verify(publicKey, msg, sig.R, sig.S)
|
|
}
|