medfall

A super great game engine
Log | Files | Refs

commit 8bb38c433a084050325dc7f8648aa8d536a63bd9
parent f2534555f31e5f17e41e0d2f5d0a26092a2500fb
Author: Michael Savage <mikejsavage@gmail.com>
Date:   Sun Apr  2 23:55:33 +0300

Release signing

Diffstat:
.gitignore | 6++++++
scripts/make_release.sh | 8+++++++-
utils/genkeys/genkeys.cc | 70++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
utils/genkeys/sign.cc | 26++++++++++++++++++++++++++
4 files changed, 109 insertions(+), 1 deletion(-)
diff --git a/.gitignore b/.gitignore @@ -3,11 +3,17 @@ pp sound srv test_lockfree + launcher/launcher +utils/genkeys/genkeys +utils/genkeys/sign + logs models +secret_key.h + *.o *.a *.so diff --git a/scripts/make_release.sh b/scripts/make_release.sh @@ -3,9 +3,15 @@ version=$(basename $(pwd)) find . -type f | xargs chmod 644 mkdir release + +# create manifest for f in $(find * -type f); do sha=$(sha256sum -b "$f" | head -c 64) size=$(stat -c "%s" "$f") cp "$f" "release/$sha" - echo "$f $sha $size" >> "release/$version.txt" + echo "$f $sha $size" >> "release/manifest.txt" done + +# sign manifest +../utils/genkeys/sign "release/manifest.txt" | cat - "release/manifest.txt" > "release/$version.txt" +rm release/manifest.txt diff --git a/utils/genkeys/genkeys.cc b/utils/genkeys/genkeys.cc @@ -0,0 +1,70 @@ +#include <sys/random.h> + +#include <stdio.h> + +#include "intrinsics.h" +#include "log.h" +#include "libs/monocypher/monocypher.h" + +int main( int argc, char ** argv ) { + u8 secret_key[ 32 ]; + if( argc == 1 ) { + int ok = getentropy( secret_key, sizeof( secret_key ) ); + if( ok == -1 ) { + FATAL( "getentropy" ); + } + } + else if( argc == 2 ) { + size_t key_len; + u8 * key = file_get_contents( argv[ 1 ], &key_len ); + if( key_len != sizeof( secret_key ) ) { + FATAL( "secret key should be 32 bytes" ); + } + memcpy( secret_key, key, sizeof( secret_key ) ); + } + else { + fprintf( stderr, "usage: %s [path/to/secret_key]\n", argv[ 0 ] ); + return 1; + } + + u8 public_key[ 32 ]; + crypto_sign_public_key( public_key, secret_key ); + + printf( "const u8 public_key[] = {" ); + + for( size_t i = 0; i < sizeof( public_key ); i++ ) { + if( i % 8 == 0 ) { + ggprint( "\n\t" ); + } + else { + ggprint( " " ); + } + + ggprint( "0x{02x},", public_key[ i ] ); + } + + printf( "\n};\n" ); + + ggprint( "secret key: " ); + for( size_t i = 0; i < sizeof( secret_key ); i++ ) { + ggprint( "{02x}", secret_key[ i ] ); + } + ggprint( "\n" ); + + printf( "const u8 secret_key[] = {" ); + + for( size_t i = 0; i < sizeof( secret_key ); i++ ) { + if( i % 8 == 0 ) { + ggprint( "\n\t" ); + } + else { + ggprint( " " ); + } + + ggprint( "0x{02x},", secret_key[ i ] ); + } + + printf( "\n};\n" ); + + return 0; +} diff --git a/utils/genkeys/sign.cc b/utils/genkeys/sign.cc @@ -0,0 +1,26 @@ +#include <stdio.h> + +#include "intrinsics.h" +#include "utils/genkeys/secret_key.h" +#include "libs/monocypher/monocypher.h" + +int main( int argc, char ** argv ) { + if( argc != 2 ) { + fprintf( stderr, "usage: %s <path/to/manifest.txt>\n", argv[ 0 ] ); + return 1; + } + + size_t manifest_len; + const u8 * manifest = file_get_contents( argv[ 1 ], &manifest_len ); + + u8 signature[ 64 ]; + crypto_sign( signature, secret_key, NULL, manifest, manifest_len ); + + for( size_t i = 0; i < sizeof( signature ); i++ ) { + printf( "%02x", signature[ i ] ); + } + + printf( "\n" ); + + return 0; +}