mirror of
https://github.com/luxfi/coronad.git
synced 2026-10-30 16:59:09 +00:00
zeekay
4e6885fbe8
github.com/luxfi/coronad existed only as loose files: no .git, no history, no
remote. Invisible to any sweep that looks for a .git directory, and an rm -rf
would have destroyed it unrecoverably.
Includes two dependency repairs.
1. It did not build: "unknown revision v1.16.98" — the v1.16.x line was DELETED
from github.com/luxfi/geth. The requirement is baked into published modules
(crypto/constants/warp pin the dead tag, some also `exclude` the
alternative), so requiring crypto v1.20.2 / constants v1.6.2 / warp v1.24.1
is what escapes it.
2. Dropped two replace directives pointing at absolute paths on one disk:
replace github.com/luxfi/corona => /Users/z/work/lux/corona
replace github.com/luxfi/warp => /Users/z/work/lux/warp
Those would have made this module resolvable ONLY on this machine — CI or
any other checkout could never build it. They were also unnecessary: the
published versions the `require` lines already name (corona v0.10.4) build
and test clean without them.
Verified: go build ./... exits 0, go test ./... 1 ok / 0 fail.
The compiled coronad binary is ignored rather than committed.
NOTE: no remote — luxfi/coronad does not exist on GitHub. Still one copy.
83 lines
3.0 KiB
Go
83 lines
3.0 KiB
Go
// Copyright (C) 2019-2026, Lux Industries Inc. All rights reserved.
|
|
// See the file LICENSE for licensing terms.
|
|
|
|
package coronad
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/luxfi/corona/hash"
|
|
"github.com/luxfi/corona/reshare"
|
|
"github.com/luxfi/corona/threshold"
|
|
)
|
|
|
|
// activationSuite is the hash suite coronad signs/verifies activation certs
|
|
// under. It MUST match the suite keyera.Bootstrap opened the era with
|
|
// (Corona-SHA3, hash.Default()) so the transcript hashes agree.
|
|
func activationSuite() hash.HashSuite { return hash.Default() }
|
|
|
|
// SignActivation drives a threshold-signing session over an activation
|
|
// message's signable bytes and returns the reshare.ActivationCert the chain's
|
|
// VerifyActivation accepts. This is the post-reshare circuit-breaker: it proves
|
|
// the (possibly new) committee can collectively sign under the UNCHANGED group
|
|
// key, so the chain may commit the new share distribution.
|
|
//
|
|
// The activation signature uses the corona kernel wire form (Signature.
|
|
// MarshalBinary), NOT the warp Corona-lane wire form — an activation cert is a
|
|
// corona-internal artifact the chain verifies with corona.Verify, never a warp
|
|
// envelope payload.
|
|
func SignActivation(era *Era, newTransport TransportFactory, msg reshare.ActivationMessage, participants ...int) (*reshare.ActivationCert, error) {
|
|
if era == nil || era.GroupKey() == nil {
|
|
return nil, ErrUninitializedEra
|
|
}
|
|
ps := participants
|
|
if len(ps) == 0 {
|
|
ps = fullCommittee(era)
|
|
}
|
|
|
|
signable := msg.SignableBytes(activationSuite())
|
|
prfKey := deriveSessionPRFKey(era, sha256Sum(signable))
|
|
sessionID := deriveSessionID(sha256Sum(signable))
|
|
|
|
sess, err := NewSigningSession(era, ps, sessionID, string(signable), prfKey)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
sig, err := sess.Run(newTransport(sess.participants))
|
|
if err != nil {
|
|
return nil, fmt.Errorf("coronad: activation signing session: %w", err)
|
|
}
|
|
if !threshold.Verify(era.GroupKey(), string(signable), sig) {
|
|
return nil, ErrSelfVerifyFailed
|
|
}
|
|
sigBytes, err := sig.MarshalBinary()
|
|
if err != nil {
|
|
return nil, fmt.Errorf("coronad: marshal activation signature: %w", err)
|
|
}
|
|
return &reshare.ActivationCert{Message: msg, Signature: sigBytes}, nil
|
|
}
|
|
|
|
// VerifyActivationCert runs the chain-level activation check against era's group
|
|
// key: the cert's transcript hashes must equal the chain's local view, and the
|
|
// threshold signature must verify under the unchanged group key. It wraps
|
|
// reshare.VerifyActivation with coronad's corona-wire verify closure.
|
|
func VerifyActivationCert(era *Era, cert *reshare.ActivationCert, localTranscriptHash, localExchangeHash [32]byte) error {
|
|
if era == nil || era.GroupKey() == nil {
|
|
return ErrUninitializedEra
|
|
}
|
|
gk := era.GroupKey()
|
|
return reshare.VerifyActivation(
|
|
cert,
|
|
localTranscriptHash,
|
|
localExchangeHash,
|
|
activationSuite(),
|
|
func(message, signature []byte) bool {
|
|
var sig threshold.Signature
|
|
if err := sig.UnmarshalBinary(signature); err != nil {
|
|
return false
|
|
}
|
|
return threshold.Verify(gk, string(message), &sig)
|
|
},
|
|
)
|
|
}
|