hancock

// Index
//
// Provides a consistent naming convention for index files.  Multiple
// commands may create and inspect indexes, so we define the common
// conventions in this package.
package model

// Copyright (C) 2019  David N. Cohen

// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU Affero General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.

// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU Affero General Public License for more details.

// Index
//
// Provides a consistent naming convention for index files.  Multiple
// commands may create and inspect indexes, so we define the common
// conventions in this package.
package model

// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU Affero General Public License for more details.

// You should have received a copy of the GNU Affero General Public License
// along with this program.  If not, see <https://www.gnu.org/licenses/>.





package model

import (
	"encoding/json"
	"io"
	"os"
	"time"
................................................................................

	// How many roles?
	RoleCount int = iota
)

//go:generate stringer -type=Role



type FileManifest struct {


	CID  CID    `json:"cid"`



	Path string `json:"path,omitempty"`



	Role Role   `json:"role"`



	Time int64  `json:"timestamp"`
}

func NewFileManifest(path string) (*FileManifest, error) {
	f, err := os.Open(path)
	if err != nil {
		return nil, err
	}

// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU Affero General Public License for more details.

// You should have received a copy of the GNU Affero General Public License
// along with this program.  If not, see <https://www.gnu.org/licenses/>.

// Manifest
//
// A file manifest is a description of a source file, produced by an
// authority who signs the manifest to produce testimony.
package model

import (
	"encoding/json"
	"io"
	"os"
	"time"
................................................................................

	// How many roles?
	RoleCount int = iota
)

//go:generate stringer -type=Role

// Type FileManifest includes information about a file.  A signed
// manifest becomes testimony used to authenticate the file.
type FileManifest struct {
	// Content Identifier is derived from a cryptographically strong
	// hash of the file content.
	CID CID `json:"cid"`

	// Path indicates the relative path of the file when manifest was
	// produced.  It may have a different path when verified.
	Path string `json:"path,omitempty"`

	// The Role of the authority producing testimony.  I.e. the file's
	// author, or a third-party auditor.
	Role Role `json:"role"`

	// Timestamp indicates when manifest was produced.  This does not
	// indicated the age of the file, or when testimony was signed.
	Time int64 `json:"timestamp"`
}

func NewFileManifest(path string) (*FileManifest, error) {
	f, err := os.Open(path)
	if err != nil {
		return nil, err
	}

// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU Affero General Public License for more details.

// You should have received a copy of the GNU Affero General Public License
// along with this program.  If not, see <https://www.gnu.org/licenses/>.





package model

import "golang.org/x/crypto/ssh"



type Testimony struct {
	Public    string        `json:"public"`    // the signing public key
	Encoded   []byte        `json:"encoded"`   // the encoded bytes that are signed







	Signature ssh.Signature `json:"signature"` // the signature


	publicKey ssh.PublicKey // cache to avoid redundant parsing
}

// Verify returns nil when the manifest, signature, and public key are
// consistent.  This checks only the tag data, and does not check that
// the key corresponds to an authorized entity.
func (this *Testimony) Verify() error {
	public, err := this.PublicKey()

// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU Affero General Public License for more details.

// You should have received a copy of the GNU Affero General Public License
// along with this program.  If not, see <https://www.gnu.org/licenses/>.

// Testmimony
//
// Testimony is an attestation by an authority regarding the status of
// a source file.
package model

import "golang.org/x/crypto/ssh"

// Type Testimony, when produced by a trusted authority, allows a
// verifier to authenticate a source file.
type Testimony struct {


	// The signer's public key.
	Public string `json:"public"`

	// The encoded bytes that were signed.  May be decoded into a manifest.
	Encoded []byte `json:"encoded"`

	// Signature of Encoded bytes.
	Signature ssh.Signature `json:"signature"`

	// internal cache, to avoid redundant parsing of Public field.
	publicKey ssh.PublicKey
}

// Verify returns nil when the manifest, signature, and public key are
// consistent.  This checks only the tag data, and does not check that
// the key corresponds to an authorized entity.
func (this *Testimony) Verify() error {
	public, err := this.PublicKey()