mirrors/arti.git/crates/tor-keymgr/src/mgr.rs, branch arti-v1.3.0

tor-keymgr: Implement KeyPath::matches for CTorPaths.

2024-10-08T13:23:17Z

`KeyPath::matches` now returns a boolean (because we can't return a matching "range" for `CTorPaths`, because unlike ArtiPaths, they're not represented as `String`s, and do not have variable parts that need to be captured).

tor-keymgr: Return an error if the keystore IDs are not unique.

2024-10-08T13:23:17Z

The `KeyMgrBuilder` now returns an error if the configured keystores don't have pairwise unique IDs. This is needed because some keymgr operations take a `KeystoreSelector` specifying the ID of the keystore the operation should be performed on, and assume that the keystore ID uniquely identifies a single keystore.

tor-keymgr: Rename the primary keystore for clarity.

2024-09-23T13:17:49Z

Previously, arti's primary keystore was referred to as its "default" keystore. However, "default" is inaccurate here: there is no way to meaningfully override this "default" (the "default" store acts as the main keystore). Throughout the codebase, we query all keystores for keys (including the secondary ones), but only ever write to the default/primary keystore. This is OK for now, because it enables us to have one mutable keystore, and multiple secondary, read-only stores.

tor-keymgr: add an overwrite flag to KeyMgr::insert()

2024-09-10T02:56:14Z

rename get_keypair_specifier() to keypair_specifier()

2024-09-09T16:12:27Z

https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2393#note_3073480

tor_keymgr: teach the KeyStore how to satisfy public key requests using a keypair

2024-09-09T16:08:11Z

Now that: - KeySpecifier::get_keypair_specifier() can be used to convert the KeySpecifier for a public key into the KeySpecifier for its secret key - ToEncodableKey has a "type level pointer" to ToEncodableKey We can use these two features together to automatically satisfy any request to get a public key using the corresponding secret key (if available).

tor_key_forge::traits::ToEncodableKey: add KeyPair associated type

2024-09-09T16:08:10Z

This comment adds a second associated type `KeyPair` to ToEncodableKey. For a `ToEncodableKey` which represents a (secret) KeyPair, this type is Self. For a `ToEncodableKey` which represents a public key, this is the `ToEncodableKey` whose `Key` is the pair of which this is the public part. This is essentially a "type level pointer" from the ToEncodableKey for a public key to the ToEncodableKey for its secret key.

tor_keymgr: add get_keypair_specifier() to KeySpecifier, and derive it

2024-09-09T16:08:10Z

This commit adds a new method `get_keypair_specifier()` to `KeySpecifier`. This method is used to indicate when one KeySpecifier (e.g. `KP_hs_id`) is the public part of another keypair (e.g. `KS_hs_id`). It will return the containing keypair in this case, and `None` otherwise.

tor_hsservice: add `impl From<&FooPublicKeySpecifier> for FooKeypairSpecifier` instances

2024-09-09T16:08:10Z

This adds the following trivial `From` instances: - tor_hsservice: impl From<&HsIdPublicKeySpecifier> for HsIdKeypairSpecifier - tor_hsservice: impl From<&BlindIdPublicKeySpecifier> for BlindIdKeypairSpecifier - tor_hscrypto::pk: impl From for HsBlindIdKey - tor_llcrypto::pk::ed25519: impl From for PublicKey - tor_keymgr::mgr: impl From for TestPublicKey - tor::hscrypto::pk: impl From for HsIdKey

Rename tor-keys crate to tor-key-forge

2024-09-04T18:26:37Z

Signed-off-by: David Goulet