libkeycard 0.1.12

A digital certificate library for the Mensago platform
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128

# Script used to generate hashes and signatures for unit tests based on standard test data

# THESE KEYS ARE PUBLICLY ACCESSIBLE! DO NOT USE THESE FOR ANYTHING EXCEPT UNIT TESTS!!

# User Contact Request Verification Key: ED25519:d0-oQb;{QxwnO{=!|^62+E=UYk2Y3mr2?XKScF4D
# User Contact Request Signing Key: ED25519:ip52{ps^jH)t$k-9bc_RzkegpIW?}FFe~BX&<V}9

# User Contact Request Encryption Key: CURVE25519:j(IBzX*F%OZF;g77O8jrVjM1a`Y<6-ehe{S;{gph
# User Contact Request Decryption Key: CURVE25519:55t6A0y%S?{7c47p(R@C*X#at9Y`q5(Rc#YBS;r}

# User Verification Key: ED25519:6|HBWrxMY6-?r&Sm)_^PLPerpqOj#b&x#N_#C3}p
# User Signing Key: ED25519:p;XXU0XF#UO^}vKbC-wS(#5W6=OEIFmR2z`rS1j+

# User Encryption Key: CURVE25519:nSRso=K(WF{P+4x5S*5?Da-rseY-^>S8VN#v+)IN
# User Decryption Key: CURVE25519:4A!nTPZSVD#tm78d=-?1OIQ43{ipSpE;@il{lYkg

# Organization Primary Verification Key: ED25519:)8id(gE02^S<{3H>9B;X4{DuYcb`%wo^mC&1lN88
# Organization Primary Signing Key: ED25519:msvXw(nII<Qm6oBHc+92xwRI3>VFF-RcZ=7DEu3|

# Organization Secondary Verification Key: ED25519:^j&t+&+q3fgPe1%PLmW4i|RCV|KNWZBLByIUZg+~
# Organization Secondary Signing Key: ED25519:4%Xb|FD_^#62(<)y0>C7LM0K=bdq7pwV62{V&O+1

# Organization Encryption Key: CURVE25519:@b?cjpeY;<&y+LSOA&yUQ&ZIrp(JGt{W$*V>ATLG
# Organization Decryption Key: CURVE25519:nQxAR1Rh{F4gKR<KZz)*)7}5s_^!`!eb!sod0<aT

# THESE KEYS ARE PUBLICLY ACCESSIBLE! DO NOT USE THESE FOR ANYTHING EXCEPT UNIT TESTS!!

import base64
import os
from pathlib import Path

import hashlib
import nacl.signing

def sign_org_card():
	'''Create a signed organization keycard from test_org_card.kc'''
	current_dir = Path(os.path.realpath(__file__)).parent
	orgcard_path = current_dir.joinpath("test_org_card.kc")

	orgcard_data = b''
	try:
		with open(orgcard_path, 'rb') as f:
			orgcard_data = f.read()
	except Exception as e:
		print(f"Couldn't open {orgcard_path}: {e}")
		return
	
	org_signing_key85 = "msvXw(nII<Qm6oBHc+92xwRI3>VFF-RcZ=7DEu3|"
	key = nacl.signing.SigningKey(base64.b85decode(org_signing_key85))

	# Add the entry hash
	hasher = hashlib.blake2b(digest_size=32)
	hasher.update(orgcard_data)
	orgcard_data = orgcard_data + b"Hash:BLAKE2B-256:" + base64.b85encode(hasher.digest()) + \

		b"\r\n"
	
	# Org sign the keycard
	signed = key.sign(orgcard_data)
	signature = base64.b85encode(signed.signature)
	orgcard_data = orgcard_data + b"Organization-Signature:ED25519:" + signature + b"\r\n"

	signedcard_path = current_dir.joinpath("test_org_card_signed.kc")
	try:
		with open(signedcard_path, 'wb') as f:
			f.write(orgcard_data)
		print(f"Saved signed data to {signedcard_path}")
	except Exception as e:
		print(f"Couldn't save {signedcard_path}: {e}")
		return

	print(orgcard_data.decode())


def sign_user_card():
	'''Create a signed user keycard from test_user_card.kc'''
	current_dir = Path(os.path.realpath(__file__)).parent
	usercard_path = current_dir.joinpath("test_user_card.kc")

	usercard_data = b''
	try:
		with open(usercard_path, 'rb') as f:
			usercard_data = f.read()
	except Exception as e:
		print(f"Couldn't open {usercard_path}: {e}")
		return
	
	org_signing_key85 = "msvXw(nII<Qm6oBHc+92xwRI3>VFF-RcZ=7DEu3|"
	okey = nacl.signing.SigningKey(base64.b85decode(org_signing_key85))

	# org sign the keycard
	signed = okey.sign(usercard_data)
	signature = base64.b85encode(signed.signature)
	usercard_data = usercard_data + b"Organization-Signature:ED25519:" + signature + b"\r\n"
	
	# Add the previous hash
	usercard_data = usercard_data + \

		b"Previous-Hash:BLAKE2B-256:5p?~_i$tLp<u5)cide0_jfVkSEw9tuaXOQK<jx1X\r\n"

	# Add the entry hash
	hasher = hashlib.blake2b(digest_size=32)
	hasher.update(usercard_data)
	usercard_data = usercard_data + b"Hash:BLAKE2B-256:" + base64.b85encode(hasher.digest()) + \

		b"\r\n"
	
	# user sign the keycard
	user_signing_key85 = "ip52{ps^jH)t$k-9bc_RzkegpIW?}FFe~BX&<V}9"
	ukey = nacl.signing.SigningKey(base64.b85decode(user_signing_key85))

	signed = ukey.sign(usercard_data)
	signature = base64.b85encode(signed.signature)
	usercard_data = usercard_data + b"User-Signature:ED25519:" + signature + b"\r\n"

	signedcard_path = current_dir.joinpath("test_user_card_signed.kc")
	try:
		with open(signedcard_path, 'wb') as f:
			f.write(usercard_data)
		print(f"Saved signed data to {signedcard_path}")
	except Exception as e:
		print(f"Couldn't save {signedcard_path}: {e}")
		return

	print(usercard_data.decode())


if __name__ == '__main__':
	sign_org_card()
	sign_user_card()