proof.go

package spec

import (
	"bytes"
	"fmt"

	"github.com/ssvlabs/dkg-spec/crypto"
)

func ValidateCeremonyProof(
	validatorPK []byte,
	operator *Operator,
	signedProof SignedProof,
) error {
	// verify owner address is not zero address
	if bytes.Equal(signedProof.Proof.Owner[:], make([]byte, 20)) {
		return fmt.Errorf("invalid owner address")
	}
	// verify validator pk
	if !bytes.Equal(validatorPK, signedProof.Proof.ValidatorPubKey) {
		return fmt.Errorf("invalid proof validator pubkey")
	}
	if err := VerifyCeremonyProof(operator.PubKey, signedProof); err != nil {
		return err
	}
	return nil
}

// VerifyCeremonyProof returns error if ceremony signed proof is invalid
func VerifyCeremonyProof(pkBytes []byte, proof SignedProof) error {
	hash, err := proof.Proof.HashTreeRoot()
	if err != nil {
		return err
	}
	pk, err := crypto.ParseRSAPublicKey(pkBytes)
	if err != nil {
		return err
	}
	return crypto.VerifyRSA(pk, hash[:], proof.Signature)
}