1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
|
/// This program demonstrates how to make a detached signature.
use std::env;
use std::io;
extern crate rpassword;
extern crate sequoia_openpgp as openpgp;
use crate::openpgp::armor;
use crate::openpgp::crypto;
use crate::openpgp::parse::Parse;
use crate::openpgp::serialize::stream::{Message, Signer};
fn main() {
let args: Vec<String> = env::args().collect();
if args.len() < 2 {
panic!("A simple filter creating a detached signature.\n\n\
Usage: {} <secret-keyfile> [<secret-keyfile>...] \
<input >output\n", args[0]);
}
// Read the transferable secret keys from the given files.
let mut keys = Vec::new();
for filename in &args[1..] {
let tsk = openpgp::TPK::from_file(filename)
.expect("Failed to read key");
let mut n = 0;
for (_, _, key) in tsk.keys_valid().signing_capable().secret(true) {
keys.push({
let mut key = key.clone();
if key.secret().expect("filtered").is_encrypted() {
let password = rpassword::read_password_from_tty(
Some(&format!("Please enter password to decrypt \
{}/{}: ",tsk, key))).unwrap();
let algo = key.pk_algo();
key.secret_mut().expect("filtered")
.decrypt_in_place(algo, &password.into())
.expect("decryption failed");
}
n += 1;
key.into_keypair().unwrap()
});
}
if n == 0 {
panic!("Found no suitable signing key on {}", tsk);
}
}
// Compose a writer stack corresponding to the output format and
// packet structure we want. First, we want the output to be
// ASCII armored.
let sink = armor::Writer::new(io::stdout(), armor::Kind::Signature, &[])
.expect("Failed to create armored writer.");
// Stream an OpenPGP message.
let message = Message::new(sink);
// Now, create a signer that emits a detached signature.
let mut signer = Signer::detached(
message,
keys.iter_mut().map(|s| -> &mut dyn crypto::Signer { s }).collect(),
None)
.expect("Failed to create signer");
// Copy all the data.
io::copy(&mut io::stdin(), &mut signer)
.expect("Failed to sign data");
// Finally, teardown the stack to ensure all the data is written.
signer.finalize()
.expect("Failed to write data");
}
|