zaru-core 0.1.0

A secure payment model engine with transaction state machine and cryptographic verification
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

use ed25519_dalek::Verifier;

use crate::crypto::signature::Signature;
use crate::wallet::WalletId;

#[derive(Debug)]
pub struct CryptoVerifier;

impl CryptoVerifier {
    pub fn verify(
        message: &[u8],
        signature: &Signature,
        expected_wallet: &WalletId,
    ) -> Result<(), &'static str> {
        // 1. cryptographic verification
        signature
            .public_key
            .verify(message, &signature.sig)
            .map_err(|_| "invalid signature")?;

        // 2. wallet ownership enforcement
        let derived_wallet = WalletId::from_ed25519(&signature.public_key);

        if &derived_wallet != expected_wallet {
            return Err("wallet does not match signing key");
        }

        Ok(())
    }
}