mirrors/arti.git/crates/tor-keymgr/src/mgr.rs, branch arti-v1.2.8

tor-keymgr: Rename the primary keystore for clarity.

2024-09-23T13:17:49Z

Previously, arti's primary keystore was referred to as its "default" keystore. However, "default" is inaccurate here: there is no way to meaningfully override this "default" (the "default" store acts as the main keystore). Throughout the codebase, we query all keystores for keys (including the secondary ones), but only ever write to the default/primary keystore. This is OK for now, because it enables us to have one mutable keystore, and multiple secondary, read-only stores.

tor-keymgr: add an overwrite flag to KeyMgr::insert()

2024-09-10T02:56:14Z

rename get_keypair_specifier() to keypair_specifier()

2024-09-09T16:12:27Z

https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2393#note_3073480

tor_keymgr: teach the KeyStore how to satisfy public key requests using a keypair

2024-09-09T16:08:11Z

Now that: - KeySpecifier::get_keypair_specifier() can be used to convert the KeySpecifier for a public key into the KeySpecifier for its secret key - ToEncodableKey has a "type level pointer" to ToEncodableKey We can use these two features together to automatically satisfy any request to get a public key using the corresponding secret key (if available).

tor_key_forge::traits::ToEncodableKey: add KeyPair associated type

2024-09-09T16:08:10Z

This comment adds a second associated type `KeyPair` to ToEncodableKey. For a `ToEncodableKey` which represents a (secret) KeyPair, this type is Self. For a `ToEncodableKey` which represents a public key, this is the `ToEncodableKey` whose `Key` is the pair of which this is the public part. This is essentially a "type level pointer" from the ToEncodableKey for a public key to the ToEncodableKey for its secret key.

tor_keymgr: add get_keypair_specifier() to KeySpecifier, and derive it

2024-09-09T16:08:10Z

This commit adds a new method `get_keypair_specifier()` to `KeySpecifier`. This method is used to indicate when one KeySpecifier (e.g. `KP_hs_id`) is the public part of another keypair (e.g. `KS_hs_id`). It will return the containing keypair in this case, and `None` otherwise.

tor_hsservice: add `impl From<&FooPublicKeySpecifier> for FooKeypairSpecifier` instances

2024-09-09T16:08:10Z

This adds the following trivial `From` instances: - tor_hsservice: impl From<&HsIdPublicKeySpecifier> for HsIdKeypairSpecifier - tor_hsservice: impl From<&BlindIdPublicKeySpecifier> for BlindIdKeypairSpecifier - tor_hscrypto::pk: impl From for HsBlindIdKey - tor_llcrypto::pk::ed25519: impl From for PublicKey - tor_keymgr::mgr: impl From for TestPublicKey - tor::hscrypto::pk: impl From for HsIdKey

Rename tor-keys crate to tor-key-forge

2024-09-04T18:26:37Z

Signed-off-by: David Goulet

tor-keymgr: Use tor-keys crate and remove dead code

2024-09-04T18:25:55Z

Everything copied in the previous commits to tor-keys is now removed and tor-keys crate is used accross the code. Minor changes to tor-keys to accomodate this change. Part of #1137 Signed-off-by: David Goulet

tor-keys: Automatically implement keymgr trait

2024-09-04T18:25:55Z

The derive ed25519 keypair macro now implements the keymgr trait so the key wrapper can now be used with a keystore without needing to specify it in the tor-keymgr crate. For this to work, a slight change to the KeygenRng trait was needed as in to expect the CryptoRngCore trait which is what ed25519-dalek requires. And also, the removal of the Sealed trait since now it is accepted to implement these traits outside tor-keymgr. Fixes #1137 Signed-off-by: David Goulet