1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124

use candid::CandidType;
use ic_cdk::api::management_canister::ecdsa::{EcdsaPublicKeyArgument, SignWithEcdsaArgument};
use serde::{Deserialize, Serialize};

pub use ic_cdk::api::management_canister::ecdsa::{
    EcdsaCurve, EcdsaKeyId, EcdsaPublicKeyResponse, SignWithEcdsaResponse,
};

use crate::{canister::fetch_tuple0, identity::CanisterId, types::CanisterCallError};

/// 私钥派生路径
/// 不知道有没有长度要求的
pub type EcdsaDerivationPath = Vec<Vec<u8>>;

// #[derive(Debug)]
// pub struct EcdsaDerivationPath(Vec<Vec<u8>>);

// #[derive(Debug)]
// pub enum EcdsaDerivationPathError {
//     WrongLength,     // len <= 256
//     WrongPathLength, // len <= 256
// }
// impl std::fmt::Display for EcdsaDerivationPathError {
//     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
//         match self {
//             EcdsaDerivationPathError::WrongLength => write!(f, "wrong length"),
//             EcdsaDerivationPathError::WrongPathLength => write!(f, "wrong path length"),
//         }
//     }
// }
// impl std::error::Error for EcdsaDerivationPathError {}

// impl TryFrom<Vec<Vec<u8>>> for EcdsaDerivationPath {
//     type Error = EcdsaDerivationPathError;

//     fn try_from(value: Vec<Vec<u8>>) -> Result<Self, Self::Error> {
//         if 256 < value.len() {
//             return Err(EcdsaDerivationPathError::WrongLength);
//         }
//         for path in &value {
//             if 256 < path.len() {
//                 return Err(EcdsaDerivationPathError::WrongPathLength);
//             }
//         }
//         Ok(EcdsaDerivationPath(value))
//     }
// }

/// 罐子管理的私钥路径，确定使用哪一个私钥
#[derive(CandidType, Serialize, Deserialize, Debug, Clone)]
pub struct EcdsaIdentity {
    /// 加密曲线
    pub key_id: EcdsaKeyId,

    /// 派生路径
    pub derivation_path: EcdsaDerivationPath,
}

/// 消息 hash 对象，必须 32 长度
#[derive(CandidType, Serialize, Deserialize, Debug, Clone)]
pub struct MessageHash(Vec<u8>);

/// 消息 hash 错误
#[derive(CandidType, Serialize, Deserialize, Debug, Clone)]
pub struct MessageHashError;
impl std::fmt::Display for MessageHashError {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        write!(f, "Hash of the message with length of 32 bytes.")
    }
}
impl std::error::Error for MessageHashError {}
impl TryFrom<Vec<u8>> for MessageHash {
    type Error = MessageHashError;

    fn try_from(value: Vec<u8>) -> Result<Self, Self::Error> {
        if value.len() != 32 {
            return Err(MessageHashError);
        }
        Ok(MessageHash(value))
    }
}

/// 查询公钥
/// https://internetcomputer.org/docs/current/references/ic-interface-spec/#ic-ecdsa_public_key
pub async fn ecdsa_public_key(
    canister_id: Option<CanisterId>, // 不写则是自身 id
    identity: EcdsaIdentity,
) -> super::types::CanisterCallResult<EcdsaPublicKeyResponse> {
    ic_cdk::api::management_canister::ecdsa::ecdsa_public_key(EcdsaPublicKeyArgument {
        canister_id,
        // derivation_path: identity.derivation_path.0,
        derivation_path: identity.derivation_path,
        key_id: identity.key_id,
    })
    .await
    .map(fetch_tuple0)
    .map_err(|(rejection_code, message)| CanisterCallError {
        canister_id: crate::identity::CanisterId::anonymous(),
        method: "ic#ecdsa_public_key".to_string(),
        rejection_code,
        message,
    })
}

/// 进行签名
/// https://internetcomputer.org/docs/current/references/ic-interface-spec/#ic-sign_with_ecdsa
pub async fn ecdsa_sign(
    identity: EcdsaIdentity,
    message_hash: MessageHash,
) -> super::types::CanisterCallResult<SignWithEcdsaResponse> {
    ic_cdk::api::management_canister::ecdsa::sign_with_ecdsa(SignWithEcdsaArgument {
        message_hash: message_hash.0,
        derivation_path: identity.derivation_path,
        key_id: identity.key_id,
    })
    .await
    .map(fetch_tuple0)
    .map_err(|(rejection_code, message)| CanisterCallError {
        canister_id: crate::identity::CanisterId::anonymous(),
        method: "ic#sign_with_ecdsa".to_string(),
        rejection_code,
        message,
    })
}