-
Notifications
You must be signed in to change notification settings - Fork 6
/
issuer.go
125 lines (103 loc) · 3.15 KB
/
issuer.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
/*
Copyright IBM Corp. All Rights Reserved.
SPDX-License-Identifier: Apache-2.0
*/
package bridge
import (
"fmt"
"github.com/golang/protobuf/proto"
"github.com/hyperledger/fabric-amcl/amcl"
"github.com/hyperledger/fabric/bccsp"
"github.com/hyperledger/fabric/bccsp/idemix/handlers"
cryptolib "github.com/hyperledger/fabric/idemix"
"github.com/pkg/errors"
)
// IssuerPublicKey encapsulate an idemix issuer public key.
type IssuerPublicKey struct {
PK *cryptolib.IssuerPublicKey
}
func (o *IssuerPublicKey) Bytes() ([]byte, error) {
return proto.Marshal(o.PK)
}
func (o *IssuerPublicKey) Hash() []byte {
return o.PK.Hash
}
// IssuerPublicKey encapsulate an idemix issuer secret key.
type IssuerSecretKey struct {
SK *cryptolib.IssuerKey
}
func (o *IssuerSecretKey) Bytes() ([]byte, error) {
return proto.Marshal(o.SK)
}
func (o *IssuerSecretKey) Public() handlers.IssuerPublicKey {
return &IssuerPublicKey{o.SK.Ipk}
}
// Issuer encapsulates the idemix algorithms to generate issuer key-pairs
type Issuer struct {
NewRand func() *amcl.RAND
}
// NewKey generates a new issuer key-pair
func (i *Issuer) NewKey(attributeNames []string) (res handlers.IssuerSecretKey, err error) {
defer func() {
if r := recover(); r != nil {
res = nil
err = errors.Errorf("failure [%s]", r)
}
}()
sk, err := cryptolib.NewIssuerKey(attributeNames, i.NewRand())
if err != nil {
return
}
res = &IssuerSecretKey{SK: sk}
return
}
func (*Issuer) NewPublicKeyFromBytes(raw []byte, attributes []string) (res handlers.IssuerPublicKey, err error) {
defer func() {
if r := recover(); r != nil {
res = nil
err = errors.Errorf("failure [%s]", r)
}
}()
ipk := new(cryptolib.IssuerPublicKey)
err = proto.Unmarshal(raw, ipk)
if err != nil {
return nil, errors.WithStack(&bccsp.IdemixIssuerPublicKeyImporterError{
Type: bccsp.IdemixIssuerPublicKeyImporterUnmarshallingError,
ErrorMsg: "failed to unmarshal issuer public key",
Cause: err})
}
err = ipk.SetHash()
if err != nil {
return nil, errors.WithStack(&bccsp.IdemixIssuerPublicKeyImporterError{
Type: bccsp.IdemixIssuerPublicKeyImporterHashError,
ErrorMsg: "setting the hash of the issuer public key failed",
Cause: err})
}
err = ipk.Check()
if err != nil {
return nil, errors.WithStack(&bccsp.IdemixIssuerPublicKeyImporterError{
Type: bccsp.IdemixIssuerPublicKeyImporterValidationError,
ErrorMsg: "invalid issuer public key",
Cause: err})
}
if len(attributes) != 0 {
// Check the attributes
if len(attributes) != len(ipk.AttributeNames) {
return nil, errors.WithStack(&bccsp.IdemixIssuerPublicKeyImporterError{
Type: bccsp.IdemixIssuerPublicKeyImporterNumAttributesError,
ErrorMsg: fmt.Sprintf("invalid number of attributes, expected [%d], got [%d]",
len(ipk.AttributeNames), len(attributes)),
})
}
for i, attr := range attributes {
if ipk.AttributeNames[i] != attr {
return nil, errors.WithStack(&bccsp.IdemixIssuerPublicKeyImporterError{
Type: bccsp.IdemixIssuerPublicKeyImporterAttributeNameError,
ErrorMsg: fmt.Sprintf("invalid attribute name at position [%d]", i),
})
}
}
}
res = &IssuerPublicKey{PK: ipk}
return
}