Cv25519 (tox-id) key support.

2 files changed, 19 insertions, 11 deletions

diff --git a/lib/Kiki.hs b/lib/Kiki.hs
index 258892f..e36e41a 100644
--- a/lib/Kiki.hs
+++ b/lib/Kiki.hs
@@ -279,13 +279,7 @@ importAndRefresh root cmn cipher = do
 
     let sshcpath = fromMaybe "" rootdir ++ osHomeDir ++ ".ssh/id_rsa"
         sshspath = fromMaybe "" rootdir ++ "/etc/ssh/ssh_host_rsa_key"
-        op =
-          KeyRingOperation
-          { opFiles =
-              Map.fromList $
-                [ ( HomeSec, buildStreamInfo KF_All KeyRingFile )
-                , ( HomePub, (buildStreamInfo KF_All KeyRingFile) { access = Pub } )
-                , ( torgen , case torgen of
+        mktorkey = ( torgen , case torgen of
                                 FileDesc _ -> StreamInfo { typ = PEMFile
                                                          , fill = KF_Match "tor"
                                                          , spill = KF_Match "tor"
@@ -293,11 +287,19 @@ importAndRefresh root cmn cipher = do
                                                          , initializer = NoCreate
                                                          , transforms = [] }
                                 _          -> strm { spill = KF_Match "tor" })
+        op =
+          KeyRingOperation
+          { opFiles =
+              Map.fromList $
+                [ ( HomeSec, buildStreamInfo KF_All KeyRingFile )
+                , ( HomePub, (buildStreamInfo KF_All KeyRingFile) { access = Pub } )
+                , mktorkey
                 , ( Generate 1 (GenRSA (2048 `div` 8)), strm { spill = KF_Match "ipsec" })
                 , ( ArgFile sshcpath, (peminfo 2048 "ssh-client") )
                 , ( ArgFile sshspath, (peminfo 2048 "ssh-server") )
                 , ( Generate 2 (GenRSA (4096 `div` 8)), strm { spill = KF_Match "encrypt" })
-                , ( Generate 3 (GenRSA (4096 `div` 8)), strm { spill = KF_Match "sign" })
+                , ( Generate 3 GenEd25519, strm { spill = KF_Match "sign" })
+                , ( Generate 4 GenCv25519, strm { spill = KF_Match "tox-id" })
                 ]
           , opPassphrases = withAgent $ pwds ++ do pfd <- maybeToList passfd
                                                    return $ PassphraseSpec Nothing Nothing pfd
@@ -310,11 +312,16 @@ importAndRefresh root cmn cipher = do
                                    -- so we'll sync the keyrings at least.
                 [ ( HomeSec, buildStreamInfo KF_All KeyRingFile )
                 , ( HomePub, (buildStreamInfo KF_All KeyRingFile) { access = Pub } )
+                , mktorkey -- We'll also add the torkey and UID since
+                           -- otherwise this will be a strange keyring.
                 ]
           , opPassphrases = withAgent $ do pfd <- maybeToList passfd
                                            return $ PassphraseSpec Nothing Nothing pfd
-          , opHome=homespec, opTransforms = []
+          , opHome=homespec
+          , opTransforms = []
           }
+    when (not bUnprivileged) $ do
+        hPutStrLn stderr "Insufficient privilege generating system service keys."
     -- Run the all-in-one operation that generates or imports all subkeys.
     KikiResult rt report <- runKeyRing (if bUnprivileged then nop else op)
     outputReport report
diff --git a/stack.yaml b/stack.yaml
index 6cdb54c..7e34768 100644
--- a/stack.yaml
+++ b/stack.yaml
@@ -3,7 +3,8 @@ packages:
 - '.'
 extra-deps:
 # - ../openpgp-util
-- git: d@cryptonomic.net:public_git/openpgp-util.git
-  commit: bb3a9e181638fa881e2bcd8425f10cfb365533f5
+- git: d@cryptonomic.net:git_namespace/2d3c6f46d185bcac5a8bedd73102aa11cf797489/public_git/openpgp-util.git
+  commit: 02680b1ed3b37c0cc16e04e51e613d53ff9dbab8
 - git: d@cryptonomic.net:public_git/openpgp-asciiarmor.git
   commit: 9694b1b6ae3763c44d3b1361b5faa0a7b27e77a9
+- modular-arithmetic-1.2.1.5