dmsg_protocol 0.2.0

Deterministic encoding, COSE document verification, and approval helpers for dMsg
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

//! Print the `master` field of a `CoseInit` for one COSE canister, and the
//! derived content-root public key clients pin for recovery envelopes.
//!
//! ```sh
//! cargo run -p dmsg_protocol --features cose-pins --example cose_pins -- \
//!   <cose-canister-id> Production [mainnet|pocketic] [key_1]
//! ```
use candid::Principal;
use dmsg_protocol::cose_pins::{content_root_public_key, master_key_pin, KeySource};
use dmsg_types::Environment;

fn main() {
    let args: Vec<String> = std::env::args().skip(1).collect();
    let usage =
        "usage: cose_pins <cose-canister-id> <Production|Staging|Local> [mainnet|pocketic] [key name]";
    let (Some(canister), Some(environment)) = (args.first(), args.get(1)) else {
        eprintln!("{usage}");
        std::process::exit(2);
    };
    let canister = Principal::from_text(canister).expect("canister ID");
    let environment = match environment.as_str() {
        "Production" => Environment::Production,
        "Staging" => Environment::Staging,
        "Local" => Environment::Local,
        _ => panic!("{usage}"),
    };
    let source = match args.get(2).map_or("mainnet", String::as_str) {
        "mainnet" => KeySource::Mainnet,
        "pocketic" => KeySource::PocketIc,
        _ => panic!("{usage}"),
    };
    let key_name = args.get(3).map_or("key_1", String::as_str);
    let master = master_key_pin(source, canister, &environment, key_name).expect("known master key");
    let public_key =
        content_root_public_key(source, canister, &environment, key_name).expect("known master key");
    let hex = |bytes: &[u8]| bytes.iter().map(|b| format!("{b:02x}")).collect::<String>();
    let pin: String = master
        .expected_fingerprint
        .as_slice()
        .iter()
        .map(|b| format!("\\{b:02x}"))
        .collect();
    println!(
        "master = record {{ key_name = \"{}\"; expected_fingerprint = blob \"{pin}\" }};",
        master.key_name
    );
    println!("content_root_public_key = {}", hex(&public_key));
}