From 732815f3d90c812b1a7d06a4492cb69306d7274c Mon Sep 17 00:00:00 2001
From: udip <udi0peled@gmail.com>
Date: Wed, 25 Nov 2020 21:16:11 +0200
Subject: [PATCH] wrote encrypted shares

---
 fb_bls_key_generator.py                  |  18 +++---
 utils/__pycache__/genver.cpython-38.pyc  | Bin 0 -> 5439 bytes
 utils/__pycache__/recover.cpython-38.pyc | Bin 9331 -> 9331 bytes
 utils/{generate.py => genver.py}         |  73 +++++++++++++++++------
 4 files changed, 64 insertions(+), 27 deletions(-)
 create mode 100644 utils/__pycache__/genver.cpython-38.pyc
 rename utils/{generate.py => genver.py} (67%)

diff --git a/fb_bls_key_generator.py b/fb_bls_key_generator.py
index 4645578..aba4018 100755
--- a/fb_bls_key_generator.py
+++ b/fb_bls_key_generator.py
@@ -10,7 +10,7 @@
 from termcolor import colored
 
 from utils import recover
-from utils import generate
+from utils import genver
 
 pubkey_descriptions = {
     'MPC_ECDSA_SECP256K1': 'MPC_ECDSA_SECP256K1 XPUB',
@@ -64,28 +64,30 @@ def main():
     
     # Set party ids for each RSA key file (allows duplicate, will get different shares+id)
     # ids shouldn't be more then 255 bits
-    parties = dict()
+    rsa_keys = dict()
+    print("Setting ids:")
     id = 1
     for f in args.RSA_keys:
         if not os.path.exists(f): 
             print(f'RSA key: {f} not found.')
             exit(-1)
         # TODO: open and read rsa_key from file
-        parties[id] = f
+        rsa_keys[id] = f
+        print(f'id: {id}\tfile: {f}')
         id += 1
-        
-    num_parties = len(parties)
+    
+    num_parties = len(rsa_keys)
 
-    # If no threshold arg, set all parties
+    # If no threshold arg, set all rsa_keys
     threshold = num_parties
     if args.threshold is not None:
         threshold = args.threshold
         if threshold > num_parties or threshold < 1:
-            print(f'Invalid threshold {threshold} for {num_parties} parties')
+            print(f'Invalid threshold {threshold} for {num_parties} rsa_keys')
             exit(-1)
 
     try:
-        bls_pubkey = generate.sample_bs12381_shares_with_verificaion(parties, threshold)
+        bls_pubkey = genver.sample_bs12381_shares_with_verificaion(rsa_keys, threshold)
     except ValueError:
         print("ValueError")
 
diff --git a/utils/__pycache__/genver.cpython-38.pyc b/utils/__pycache__/genver.cpython-38.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..a2c6376de2597d8a3813b28cd2681f176748e32d
GIT binary patch
literal 5439
zcmbtYNpBp-6|U;;SvfNtQWV8S%V={nu|b+Lkk|^X$XX&BwkbkPWUCXSF`O!rP4!F<
ztBaCI^jty#rVTg<kXvj6!y|$Gh8%LvFKFZtASYdN4G;uKzE?e5Wg%XA(A8D1wpXvd
z`rfPgRk>Vbc>eRJKYRZgW$YhRIQ(Q#xPdo%lQSlm-~nrK*W#47khfjO<n18S%DOp|
zcY=JY;1*g%w`j_lV4ziUOD3NU%B_l9>Gv6Q2QiKvRNX4RxnQU@<PP=ghTUPv^1+GL
zh&#fW99}&s3ZnQ0cSr9sF(69Mm?+6pTedrfa#>VRu9)&T%7dbca@CY4<fIt-ii=@!
z;+f-~mIXOE&g3MdBVXC#q!@+tj47Y`$`WH@9Obhp_uGjHw3-yBAw4IHkk^*1aVE}S
z#IxcYr02y&Bfmg$)L#%a^f)grJj=Kjg}uP)m!6YN>pVGe_v*X~!=-ym^I;UpDDuNL
z#JRgyZ#E*oIajxm{DNFtm+huZoZEg=qqelL5oy`F-)M`lg|dBr;T?SPqM@bsTN3%=
z{QI{SX1sgv+?juFrBh}7wvcVzq?r#tRDA<)bQ+0dE*H$T1Q*sb=Gwv*4!(}aK<jLB
z<*sZ$km`<7p?a_VxDohbetj|UoA1kw`?49fBdyk(T8bu(y7y3?-dlJhf>+FA<^eGa
zY?sgNa<||$*7b_#iwNs=A{i_t`8~-lQ$y(T@3*E`!j_y~7yk4wd?goyu=yyOzAYb5
z|5B~P9OAZY1XA7nU}1V)`$06lEZdKzn(AyMdC&9PzV^HkQov}&H)p=>Ql|ELH-Y&5
zhw}StDxn~-rd9SO``Ut~thvos?%cnB@BXz~-%PcRu~Y4l+^8*us@7>J?aQd9D(Jh*
z)gV4*p=mOVVv_Sb*wgb)p|Gd+>)%0b(|K+;Lk4I!TGI29qUW_ju^v#q<aulBjUcU2
zCrE*lN3|fsD^f+#3aLfpAj$K*Z6rSkOQ#O41ONtt-fMM2rN1q7R2ixm@W7_tk{`&r
zWz6X2_XNibYSuVOtLS5(_7WAo=aygUZ~1-M5Po~PhE*NecBpu*rbq!rNIb3`8UO4d
z?asYiyL4w22>S3S2irA)3VIK=i%LIeyT*=cbEn-@8yyY0`mX!sc&%u;zg3Bi{Bb)F
z&MuJh{arf$vYEf<Hs$);q|RWHm+r*nLmC{z$-&y8!T;L|V%76B*8a&M2`D<F8tr9y
zgj8t3HeN%N)J(H2)&sHZ@Gg(J;EyadCinsf6x3<WDPkd*GK)`Az<9!p3CTH<*dXX*
z#!W_}MyrG4PmRMCc#(3;@>R5t@<^Cf;(5#A>LT)WJF!8^NkOkD8LfnYNHQG-57Q(q
z_a2%(hnHm0Uyy8b&0@C2A34#;Hfhb&YZ?w^n|}%C9urAATb$hb0u#<M-{vFiGo~%!
zZ1XMaHv8mC*VcAyZSidu+p`RPGqH`nSt^h3_g}m5Df^T!St2L$&+;+5jXArH#yp}h
z#zavRw``0y)wN@%=j@>VlUg?uJ8@>5#hDS7j&_R0)+i(CEL;2I+V5fq1U@kLoNT)}
zyhq<;ft3grsBIPufx|8}V}I9bc$;?Z?b-`lNro|`Nr%seNj@2-ZQO=|1RG=H><`u&
zO~%!a(7^1}u9a9*uP2r-b}hHq34;x<8Oo(4MQ}{_(zu4=tUxT#3|pP+H&GMOR9QGA
zi*26o?{Kuzz@|;j!cjJY==#(_4@Exs`G4`$Gl?C@w%OITHmEThpE#h<sGe1qXj(J(
zE663>ceClZ>c>=L7>BT9yhKtyGW8pfM`K8sGr~u>V;6aam-vKDr4p}M>MH86V*XUo
z=r0fnofvZzs>l$e=m?A<-J%!@@TYZ9{L=}aD4Oj!*oQrXR&sejI--F{et>3uVo^V#
z?lu-5`dGYKs?p;(xXHLik0oU2NCHqCV0zGX;PnBnS?GlFZGa2#!Xdq~HbHX03_u%W
zBPqnvmPW2Q0S;@iwyeXoYZGh5xW76A1;s<O)2Xgm^;5_WG<BVzv8>!&b6qJ!Pi{Wc
zE0S`@4KdjW0*~6#Sx*t=HMD0Ieh))N1S-a}9IoB`EI!6BaP=0XyF4kU!Hbt}{Slng
zeV~BX*yjN<+C)M<zJmk3YH!(HuB{#p<!VOo9jj}_td~uX;%}_3O~<vDi!Evci@=)W
zY{#N@Ygcq0I}MtM5mBichOQTkLh5zoliXqud0|H<16ciI>4i#2mE>FNf%ZGWMq=Ha
zNisgd<S4NlLa1pPAftYUk6Srv3U?3(Y0+;>;iU^T;C5{kjvI0qNRbNX5}|g#@vkvr
zMDY>h!vJ`dPk=xbol0P<tfGdu7mh^cBqc)tqQB%f8{|Dr;BtgcDH0@$5(=ZgfrU~s
z<@7c7&>+NBkRv1@QzEu44*JZ1&bX<uKjS*v%Wd-=v;jfl)F7JAZySRA%rbQr)#*G4
z)B=IpRIdv(K9MMB)W&SKnWNYnppkcon6G2MK$S+GM^7#s>KQxzUK!M8OfBz~Z~`(r
zR`j_pQ;*;Bwa;~>H@L%kRgr;1%R=`dgM@zq3At{5b4(BSPUw+1FS1)!@8k}-y~0PV
zeb!-m^ilEmT%F~Ne)?3Lrx72rw)HXF+}2~g@wkB2#kkm;*yeF=oUKlhTM&gWu+r{;
zD8@NBkbyW$&Zk?_r&rJP&c>x3j!`@MoG8U5irr~cXiyU6Evs9O%e|WESNYo5%ajLt
z=Xc<O#DVO>4s`m6t^Ivp&%gHdJSPUJe>(0%wD=gWs0tQb>{iJA)raPe94CqZ$PF8}
zQA5VKjWKc?8j*lzs}^kr9g@^}7=YGoHH)_DIwe1+<O&inV+H*8n4sDx?SlyMH8kkp
zJ?uHI_33*tnz{PMn=}1R-V+~pvpviLvft!VURVTirdb3<v}O^bU2^A8eY^kN^M40t
z41r4>&D9JN<P9U!flXVOiwNnh@$T!LWiQN4oMh&v_}I){N&PO(e#mU;uw*KAjgq6*
z*??$&7Wmbn%MZQF!n@q^F2Czt{?NO;kZ|?9hE|Ea=r6<Cg~bgm4G+2F#7=w0r}J+%
z0L<)d7N&?3aH01$D|epyk*2ExU0-UO){|EgUfi59_v_jd<(oP*rBGXnT7N)ui8KTD
zBat)^sb4ZAmqOuf(#r`jyrE0uY7?u|NwOV`0(VCQm4=B0u%yyq7(_`aB|^hYQDVt8
zbIntPNY`$MPm(;wTcZCM)D7xSVP8`4&Ash?xsf<w2hoJ1Z~;n+4;sO`G)qww04XB1
z#BR$cNv^-7B(Fn{jE1?wC~-Osy^>@l86{E_|0WqSf=uic`83HigD}FsAT6}24=VCF
zX=rjAIRs1Qf=y(rC|&@mlUF>Dx@9cDqyI=evj7TU+|prwPICQHl5P4Oc+#Ypezkn6
z-BP%&4O`QN8LqZpQXc6+(7`D*h`mDs16vcSz4Gl&)iQcT?;>Hw0T->3RpCXrl%jna
z4y6j|DBcn;LSE(MpsR2<7TTmaYF#yvRh3#6RTE>?`CR=HY_s9XW^)RlRKzf@ah{#9
zqsYm)1p@0L{omwH^jpHQ`YnGG9uajjS3S^yd*T~}25d=IZ*+iS<zO^Lr!UE-_lxvq
zQoTj^4X5V!{wgxKQ4gv093_M=^&#~u_nY1__BW7m%kxTVy)jR)l}b?rmlW<iZAx?f
zOc81TW)Nc&xG&Ox6kVFQ$wUoFMz7=IV{o6?fU&Vpdgjf+-#`6Hem4D&<T_meqAN&B
euzLx6Kq&=CbVowospjx2R`R3cReQ8FTKXRy;o^t@

literal 0
HcmV?d00001

diff --git a/utils/__pycache__/recover.cpython-38.pyc b/utils/__pycache__/recover.cpython-38.pyc
index c8e3d0e0bc0b5fb90c8fd7b1a622af639909f3e6..f35c1f085ac09c5c76cc758b66c33b42a0a28ee9 100644
GIT binary patch
delta 892
zcmYL{OHUI~6vw^vL1?Y5w6&z5RVwOWP#z&hK%l5dL8};$FlcINhjyTa@y=A3L<ETl
z4X`>Z<I2P@U|fqa#-(xRV&VtTr4skv|KMX5zkBX^-21<0&fd`8kayhY^BfT0=&Rk=
z-h`jYbi;pE(DZ*~3F-?hvo3lY$g^Q;I{e{um&mkO^1It!M=e&6JeIRuR&%m*d^~xD
zw~GM3M*iBkt4EkJU8t?F33^}K85$6KiCGS9VNt5$El5m~C)my==~8e$IEk=Zc9qPu
zIL)EvbeVR85h3ME@G_gCXy}(<Abe3s84f>X`8S`#W6sz;+~S&3%w*20(aO_BH9Ml1
z+=tVuc##I8ZQ<*<>k4ocV894%MqjdCYOZhUfl{k_hA)%~$`Zeeokuq^+|U<QqrhXx
zPr&O|=Ccbqg?r&S1N6~WeWGCkL6@!-RfCVg4OKi2<mp@eIi^yip%jr_=^3@C$kjq_
zT2o3qhm3xD(Xd^2N0@TJ4iqz{!u516BP3+0@90mqPW`?R4IW!u89{~p3cQdXLRD33
ztK_wuhN&t0{a-@J38aDhKsAs7rh#GLq=4k)O=6L~8do1?3?(fj@GPP;K<FRB!m_9*
z*1|SuHr5+i7kg3s2nox83OuHFu@1ILd$H%Y3UJH<a{^KgKM0!xM*t1b0Rwmd;8*an
zz~7@+;dlb9(bwbMtU`4sK6PRa`Tt(nKiDCB;*w_w?T?|bEQfCJKc`Z(@x0q^`3l`^
zR8H-nfbnK5j#Mfov6R%tyHRhe8ijS6tj0=s6{anJ3)VJZ(o%e|19P$8O$-6Y6!R${
S51>hW1K0#Azz+S0ul)wdxYC*c

delta 892
zcmYL{OHUI~6vw^vL1?Y5w6&z5RVwOWP#z)1fV_iLplY-+DIrav10CpNJX0+75sab%
z6$2b4F|Paw#x)vaTpD*SCVl{2Dsk`q4?bq`yXT(Ao&P=e?2PP;xDy_aYmfYF6Wg!d
z{a#`6xc8)F#rshVa<A`>=;CePtQg~_{U45Z$xKtkzB{e;vMI8P%d{^nXc^O<NW_My
zT?Qz|-rA_62RVGEc2!L9``XUHklZW6wCTmNQbjFD9A%fkT}<*hf5AVAuruk%S5opc
zo0c(5e(MiODPR19Vv56oUy{DySt;d0a9I@Id=6f<M>4W3>6lk5v5Z-xFHGgM=~1;p
z9-LN11`mYWf^qz77&s3IV4PRNuS6d=*Ee-rN~>q6n9r(<G%drX%P6I(WR$g1mLkX>
zgx9GSri&Ss-0++L`uTBvf5QZV4nxmrCAtPTR8bTt@VEL?Lg!FJK4dylGg?kfR!g}l
zUCq-xG6wi%!;`wCG?P9nkV{uoGE$kelrYD=2Y-q+?(+nA_)vLi92M3ra6{UMs;bsj
z#ckS46<yu!{}MuWU<Q~4s(~z^0b{^X3B^uLaxvXHX*bd(H6<m`9HMz3@DD*`ad)Ie
ztn*x?C$uK_viLp{mH{1j!0#d*VuN=gFD@0~xDJqnQbT)TSAYXR8Mq1D0u}*01>KhT
zd-Mt%tH2}vdbmq$a@~<notQ)V-wW%3ZK$fDrwHwip|nh!QKCPma=7ud(`xxczSyW9
z+d_e$W-PXNJg$hi(nj5=w^Ut$m0+`RHE5}@<UfP+IdGR3qr)ATi`{Nw2nbV5Q$PVg
QlV}~-05*Xw{t><R8`E#tivR!s

diff --git a/utils/generate.py b/utils/genver.py
similarity index 67%
rename from utils/generate.py
rename to utils/genver.py
index ce65144..46f092e 100644
--- a/utils/generate.py
+++ b/utils/genver.py
@@ -1,27 +1,43 @@
 from py_ecc.bls import G2ProofOfPossession as bls_pop
 from py_ecc.bls import G2Basic as bls_basic
-
 import py_ecc.optimized_bls12_381 as bls_opt
 
-# (
-#     add,
-    
-#     final_exponentiate,
-#     G1,
-#     multiply,
-#     neg,
-#     pairing,
-#     Z1,
-#     Z2,
-# )
-
 from typing import Sequence, Dict
 from random import SystemRandom
-import itertools
+from Crypto.PublicKey import RSA
 
+import os
+import itertools
+from datetime import datetime
 import pprint
+
+from Crypto.Cipher import PKCS1_OAEP
 pp = pprint.PrettyPrinter(indent=2)
 
+# Error Handling 
+
+class GenVerErrorInvalidPublicKeyReconstructed(Exception):
+    def __init__(self, auth_ids):
+        self._auth_ids = auth_ids
+
+    def __str__(self):
+        return f'ERROR: Invalid public key for parties {self._auth_ids}'
+
+class GenVerErrorRSAKeyImport(Exception):
+    def __init__(self, key_file):
+        self._key_file = key_file
+
+    def __str__(self):
+        return f'ERROR: Reading RSA public key file: {self._key_file}'
+
+class GenVerErrorRSAEncryption(Exception):
+    def __init__(self, msg):
+        self._msg = msg
+
+    def __str__(self):
+        return f'ERROR: {self._msg}'
+
+
 #bls_opt.curve_order = 7
 # Raise error if randomness is too short
 def sample_random_in_range(range:int):
@@ -84,12 +100,12 @@ def interpolate_public(public_shares: Dict[int,tuple]):
 #TODO public_to_address
 
 # parties: dict{ party_id : RSA_pub_file }
-def sample_bs12381_shares_with_verificaion(parties:Dict[int,str], threshold:int, verification_file:str = None):
-    print(parties)
+def sample_bs12381_shares_with_verificaion(rsa_key_files:Dict[int,str], threshold:int, verification_file:str = None):
+    print(rsa_key_files)
     print(threshold)
     print(bls_opt.curve_order)
 
-    ids = list(parties.keys())
+    ids = list(rsa_key_files.keys())
     
     private_shares = sample_shares(ids, threshold, bls_opt.curve_order)
     pp.pprint(private_shares)
@@ -105,8 +121,27 @@ def sample_bs12381_shares_with_verificaion(parties:Dict[int,str], threshold:int,
         curr_public_key = interpolate_public({id : public_shares[id] for id in auth_ids})
         print(curr_public_key)
         if not bls_opt.eq(public_key, curr_public_key):
-            print(f'Incorrect public key for ids {auth_ids}')
-            return
+            raise GenVerErrorInvalidPublicKeyReconstructed(auth_ids)
+    
+    now_date_time = datetime.now().strftime("%Y_%d_%m_%H_%M_%S")
+    for id, rsa_key_file in rsa_key_files.items():
+        try:
+            rsa_key = RSA.importKey(open(rsa_key_file, 'r').read())
+        except ValueError:
+            raise GenVerErrorRSAKeyImport(rsa_key_file)
+        try:
+            cipher = PKCS1_OAEP.new(rsa_key)
+            ciphertext = cipher.encrypt(private_shares[id].to_bytes(32, byteorder="big"))
+            out_filename = f'bls_private_key_share_id_{id}.rsa_enc_{now_date_time}'
+            if os.path.exists(out_filename):
+                raise GenVerErrorRSAEncryption(f'Existing file {out_filename}')
+            out_file = open(out_filename, "w+")
+            out_file.write(f'{id}\n')
+            out_file.write(f'{ciphertext.hex()}\n')
+            out_file.close()
+        except ValueError:
+            raise GenVerErrorRSAEncryption(f'Error writing encrypted private key share for id {id}')
+    import math
         
     #TODO encrypt root shares (with id)