poanetwork
/
threshold_crypto
mirror of https://github.com/poanetwork/threshold_crypto.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Added clear-on-drop secret-keys to 'NetworkInfo'.

This commit is contained in:
Peter van Nostrand 2018-06-21 12:08:48 -04:00 committed by Vladimir Komendantskiy
parent 34d642f709
commit 5bf57d5d1d
1 changed files with 17 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
mod.rs
View File

@ -8,6 +8,7 @@ use std::fmt;
use std::hash::{Hash, Hasher};
use byteorder::{BigEndian, ByteOrder};
use clear_on_drop::ClearOnDrop;
use init_with::InitWith;
use pairing::{CurveAffine, CurveProjective, Engine, Field, PrimeField};
use rand::{ChaChaRng, OsRng, Rng, SeedableRng};
@ -119,6 +120,12 @@ impl<E: Engine> PartialEq for SecretKey<E> {
}
}
impl<E: Engine> Default for SecretKey<E> {
fn default() -> Self {
SecretKey(E::Fr::zero())
}
}
impl<E: Engine> SecretKey<E> {
/// Creates a new secret key.
pub fn new<R: Rng>(rng: &mut R) -> Self {
@ -290,8 +297,13 @@ impl<E: Engine> SecretKeySet<E> {
}
/// Returns the `i`-th secret key share.
pub fn secret_key_share<T: Into<<E::Fr as PrimeField>::Repr>>(&self, i: T) -> SecretKey<E> {
SecretKey(self.poly.evaluate(from_repr_plus_1::<E::Fr>(i.into())))
pub fn secret_key_share<T>(&self, i: T) -> ClearOnDrop<Box<SecretKey<E>>>
where
T: Into<<E::Fr as PrimeField>::Repr>
{
ClearOnDrop::new(Box::new(
SecretKey(self.poly.evaluate(from_repr_plus_1::<E::Fr>(i.into())))
))
}
/// Returns the corresponding public key set. That information can be shared publicly.
@ -423,9 +435,9 @@ mod tests {
assert_ne!(pk_set.public_key(), pk_set.public_key_share(2));
// Make sure we don't hand out the main secret key to anyone.
assert_ne!(sk_set.secret_key(), sk_set.secret_key_share(0));
assert_ne!(sk_set.secret_key(), sk_set.secret_key_share(1));
assert_ne!(sk_set.secret_key(), sk_set.secret_key_share(2));
assert_ne!(sk_set.secret_key(), *sk_set.secret_key_share(0));
assert_ne!(sk_set.secret_key(), *sk_set.secret_key_share(1));
assert_ne!(sk_set.secret_key(), *sk_set.secret_key_share(2));
let msg = "Totally real news";