/**
* @file include/gnunet_secretsharing_service.h
- * @brief verified additive secret sharing and cooperative decryption
+ * @brief verifiable additive secret sharing and cooperative decryption
* @author Florian Dold
*/
*/
struct GNUNET_SECRETSHARING_Session;
+/**
+ * Share of a secret shared with a group of peers.
+ */
+struct GNUNET_SECRETSHARING_Share;
+
/**
* Handle to cancel a cooperative decryption operation.
/**
- * Parameters of the crypto system.
+ * Public key of a group sharing a secret.
*/
-struct GNUNET_SECRETSHARING_Parameters
+struct GNUNET_SECRETSHARING_PublicKey
{
/**
- * Threshold, that is, minimum number of peers that
- * must cooperate to decrypt a value.
- */
- unsigned int k;
- /**
- * Prime with p = 2q+1.
+ * Value of the private key.
*/
- gcry_mpi_t p;
- /**
- * Prime.
- */
- gcry_mpi_t q;
- /**
- * Generator of G_q.
- */
- gcry_mpi_t g;
+ gcry_mpi_t value;
};
/**
* Encrypted field element.
*/
-struct GNUNET_SECRETSHARING_Ciphertext
+struct GNUNET_SECRETSHARING_Ciphertext
{
/**
* First component.
};
+/**
+ * Plain, unencrypted message that can be encrypted with
+ * a group public key.
+ */
+struct GNUNET_SECRETSHARING_Message
+{
+ /**
+ * Value of the message.
+ */
+ gcry_mpi_t value;
+};
+
+
/**
* Called once the secret has been established with all peers, or the deadline is due.
*
* Note that the number of peers can be smaller that 'k' (this threshold parameter), which
- * makes the threshold crypto system useledd. However, in this case one can still determine which peers
+ * makes the threshold crypto system useless. However, in this case one can still determine which peers
* were able to participate in the secret sharing successfully.
*
* @param cls closure
+ * @param my_share the share of this peer
* @param public_key public key of the session
- * @param num_ready_peers number of peers in @ready_peers
- * @parem ready_peers peers that successfuly participated in establishing
+ * @param num_ready_peers number of peers in @a ready_peers
+ * @param ready_peers peers that successfuly participated in establishing
* the shared secret
*/
typedef void (*GNUNET_SECRETSHARING_SecretReadyCallback) (void *cls,
- gcry_mpi_t public_key,
+ const struct GNUNET_SECRETSHARING_Share *my_share,
+ const struct GNUNET_SECRETSHARING_PublicKey public_key,
unsigned int num_ready_peers,
const struct GNUNET_PeerIdentity *ready_peers);
* Called when a decryption has succeeded.
*
* @param cls closure
- * @param result decrypted value
+ * @param data decrypted value
+ * @param data_size number of bytes in @a data
*/
typedef void (*GNUNET_SECRETSHARING_DecryptCallback) (void *cls,
- gcry_mpi_t result);
+ const void *data,
+ size_t data_size);
/**
* with the other peers.
*
* @param cfg configuration to use
- * @param num_peers number of peers in @peers
+ * @param num_peers number of peers in 'peers'
+ * @param peers array of peers that we will share secrets with, can optionally contain the local peer
* @param session_id unique session id
* @param deadline point in time where the session must be established; taken as hint
* by underlying consensus sessions
+ * @param threshold minimum number of peers that must cooperate to decrypt a value
* @param cb called when the secret has been established
* @param cls closure for cb
*/
const struct GNUNET_PeerIdentity *peers,
const struct GNUNET_HashCode *session_id,
struct GNUNET_TIME_Absolute deadline,
- struct GNUNET_SECRETSHARING_Parameters *parameters,
+ unsigned int threshold,
GNUNET_SECRETSHARING_SecretReadyCallback *cb,
void *cls);
+/**
+ * Load a session from an existing share.
+ *
+ * @param cfg configuration to use for connecting to the secretsharing service
+ * @param share share to load the session from
+ */
+struct GNUNET_SECRETSHARING_Session *
+GNUNET_SECRETSHARING_load_session_DEPRECATED (const struct GNUNET_CONFIGURATION_Handle *cfg,
+ const struct GNUNET_SECRETSHARING_Share *share);
+
+/**
+ * Convert a secret share to a string.
+ *
+ * @param share share to serialize
+ * @return the serialized secret share, to be freed by the caller
+ */
+char *
+GNUNET_SECRETSHARING_share_to_BIN (const struct GNUNET_SECRETSHARING_Share *share);
+
+
+/**
+ * Convert a secret share to a string.
+ *
+ * @param str string to deserialize
+ * @return the serialized secret share, to be freed by the caller
+ */
+const struct GNUNET_SECRETSHARING_Share *
+GNUNET_SECRETSHARING_share_from_BIN (const char *str);
+
+
+/**
+ * Destroy a secret share.
+ *
+ * @param share secret share to destroy
+ */
+void
+GNUNET_SECRETSHARING_share_destroy (const struct GNUNET_SECRETSHARING_Share *share);
+
+
/**
* Destroy a secret sharing session.
*
* @param session session to take the key for encryption from,
* the session's ready callback must have been already called
* @param message message to encrypt
- * @param result_cyphertext pointer to store the resulting ciphertext
- * @return GNUNET_YES on succes, GNUNET_SYSERR if the message is invalid (invalid range)
+ * @param message_size number of bytes in @a message
+ * @param result_ciphertext pointer to store the resulting ciphertext
+ * @return #GNUNET_YES on succes, #GNUNET_SYSERR if the message is invalid (invalid range)
*/
-int
-GNUNET_SECRETSHARING_encrypt (const struct GNUNET_SECRETSHARING_Session *session,
- gcry_mpi_t message,
+int
+GNUNET_SECRETSHARING_encrypt (const struct GNUNET_SECRETSHARING_PublicKey *session,
+ const void *message,
+ size_t message_size,
struct GNUNET_SECRETSHARING_Ciphertext *result_ciphertext);
* @param session session to use for the decryption
* @param ciphertext ciphertext to publish in order to decrypt it (if enough peers agree)
* @param decrypt_cb callback called once the decryption succeeded
- * @param cls closure for decrypt_cb
+ * @param decrypt_cb_cls closure for @a decrypt_cb
* @return handle to cancel the operation
*/
-struct GNUNET_SECRETSHARING_DecryptionHandle
-GNUNET_SECRETSHARING_publish_decrypt (struct GNUNET_SECRETSHARING_Session *session,
- struct GNUNET_SECRETSHARING_Ciphertext *ciphertext,
- GNUNET_SECRETSHARING_DecryptCallback decrypt_cb,
- void *cls);
+struct GNUNET_SECRETSHARING_DecryptionHandle *
+GNUNET_SECRETSHARING_decrypt (struct GNUNET_SECRETSHARING_Session *session,
+ struct GNUNET_SECRETSHARING_Ciphertext *ciphertext,
+ GNUNET_SECRETSHARING_DecryptCallback decrypt_cb,
+ void *decrypt_cb_cls);
+
/**
* Cancel a decryption.
* @param decryption_handle decryption to cancel
*/
void
-GNUNET_SECRETSHARING_cancel_decrypt (struct GNUNET_SECRETSHARING_DecryptionHandle *decryption_handle);
-
+GNUNET_SECRETSHARING_decrypt_cancel (struct GNUNET_SECRETSHARING_DecryptionHandle *decryption_handle);
projects / oweals / gnunet.git / blobdiff