1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

use ed25519_dalek::{Keypair, PublicKey, SecretKey, Signature, Signer};
use secrecy::DebugSecret;
use wasmium_errors::{WasmiumError, WasmiumResult};
use zeroize::Zeroize;

pub struct ProtectedEd25519KeyPair(pub(crate) Keypair);

impl ProtectedEd25519KeyPair {
    pub fn new(keypair: Keypair) -> ProtectedEd25519KeyPair {
        ProtectedEd25519KeyPair(keypair)
    }

    pub fn from_bytes(input_bytes: &[u8]) -> WasmiumResult<ProtectedEd25519KeyPair> {
        match Keypair::from_bytes(input_bytes) {
            Ok(keypair) => Ok(ProtectedEd25519KeyPair::new(keypair)),
            Err(_) => return Err(WasmiumError::InvalidBytesForKeyPair),
        }
    }

    pub fn try_sign(&self, message: &[u8]) -> WasmiumResult<Signature> {
        match self.0.try_sign(message) {
            Ok(signature) => Ok(signature),
            Err(_) => Err(WasmiumError::SigningError),
        }
    }
}

impl Zeroize for ProtectedEd25519KeyPair {
    fn zeroize(&mut self) {
        *self = ProtectedEd25519KeyPair(Keypair {
            secret: SecretKey::from_bytes(&[0_u8; 32]).unwrap(), //Never fails, hence unwrap()
            public: PublicKey::from_bytes(&[0_u8; 32]).unwrap(), //Never fails, hence unwrap()
        });
    }
}

impl DebugSecret for ProtectedEd25519KeyPair {
    fn debug_secret(f: &mut core::fmt::Formatter<'_>) -> Result<(), core::fmt::Error> {
        f.debug_struct("ProtectedEd25519KeyPair(Keypair)").finish()
    }
}