crypto-keygen-standalone.c

Go to the documentation of this file.

#define _GNU_SOURCE
 
#include <d0_blind_id/d0_blind_id.h>
 
#include <ctype.h>
#include <stdio.h>
#include <unistd.h>
#include <getopt.h>
#include <string.h>
#include <stdlib.h>
#include <signal.h>
#include <math.h>
#include <sys/types.h>
#include <sys/stat.h>
 
// BEGIN stuff shared with crypto.c
#define FOURCC_D0PK (('d' << 0) | ('0' << 8) | ('p' << 16) | ('k' << 24))
#define FOURCC_D0SK (('d' << 0) | ('0' << 8) | ('s' << 16) | ('k' << 24))
#define FOURCC_D0PI (('d' << 0) | ('0' << 8) | ('p' << 16) | ('i' << 24))
#define FOURCC_D0SI (('d' << 0) | ('0' << 8) | ('s' << 16) | ('i' << 24))
#define FOURCC_D0IQ (('d' << 0) | ('0' << 8) | ('i' << 16) | ('q' << 24))
#define FOURCC_D0IR (('d' << 0) | ('0' << 8) | ('i' << 16) | ('r' << 24))
#define FOURCC_D0ER (('d' << 0) | ('0' << 8) | ('e' << 16) | ('r' << 24))
#define FOURCC_D0IC (('d' << 0) | ('0' << 8) | ('i' << 16) | ('c' << 24))
 
static unsigned long Crypto_LittleLong(const char *data)
{
    return
        ((unsigned char) data[0]) |
        (((unsigned char) data[1]) << 8) |
        (((unsigned char) data[2]) << 16) |
        (((unsigned char) data[3]) << 24);
}
 
static void Crypto_UnLittleLong(char *data, unsigned long l)
{
    data[0] = l & 0xFF;
    data[1] = (l >> 8) & 0xFF;
    data[2] = (l >> 16) & 0xFF;
    data[3] = (l >> 24) & 0xFF;
}
 
static size_t Crypto_ParsePack(const char *buf, size_t len, unsigned long header, const char **lumps, size_t *lumpsize, size_t nlumps)
{
    size_t i;
    size_t pos;
    pos = 0;
    if(header)
    {
        if(len < 4)
            return 0;
        if(Crypto_LittleLong(buf) != header)
            return 0;
        pos += 4;
    }
    for(i = 0; i < nlumps; ++i)
    {
        if(pos + 4 > len)
            return 0;
        lumpsize[i] = Crypto_LittleLong(&buf[pos]);
        pos += 4;
        if(pos + lumpsize[i] > len)
            return 0;
        lumps[i] = &buf[pos];
        pos += lumpsize[i];
    }
    return pos;
}
 
static size_t Crypto_UnParsePack(char *buf, size_t len, unsigned long header, const char *const *lumps, const size_t *lumpsize, size_t nlumps)
{
    size_t i;
    size_t pos;
    pos = 0;
    if(header)
    {
        if(len < 4)
            return 0;
        Crypto_UnLittleLong(buf, header);
        pos += 4;
    }
    for(i = 0; i < nlumps; ++i)
    {
        if(pos + 4 + lumpsize[i] > len)
            return 0;
        Crypto_UnLittleLong(&buf[pos], lumpsize[i]);
        pos += 4;
        memcpy(&buf[pos], lumps[i], lumpsize[i]);
        pos += lumpsize[i];
    }
    return pos;
}
 
void file2buf(const char *fn, char **data, size_t *datasize)
{
    FILE *f;
    *data = NULL;
    *datasize = 0;
    size_t n = 0, dn = 0;
    if(!strncmp(fn, "/dev/fd/", 8))
        f = fdopen(atoi(fn + 8), "rb");
    else
        f = fopen(fn, "rb");
    if(!f)
    {
        return;
    }
    for(;;)
    {
        *data = realloc(*data, *datasize += 8192);
        if(!*data)
        {
            *datasize = 0;
            fclose(f);
            return;
        }
        dn = fread(*data + n, 1, *datasize - n, f);
        if(!dn)
            break;
        n += dn;
    }
    fclose(f);
    *datasize = n;
}
 
int buf2file(const char *fn, const char *data, size_t n)
{
    FILE *f;
    if(!strncmp(fn, "/dev/fd/", 8))
        f = fdopen(atoi(fn + 8), "wb");
    else
        f = fopen(fn, "wb");
    if(!f)
        return 0;
    n = fwrite(data, n, 1, f);
    if(fclose(f) || !n)
        return 0;
    return 1;
}
 
void file2lumps(const char *fn, unsigned long header, const char **lumps, size_t *lumpsize, size_t nlumps)
{
    char *buf;
    size_t n;
    file2buf(fn, &buf, &n);
    if(!buf)
    {
        fprintf(stderr, "could not open %s\n", fn);
        exit(1);
    }
    if(!Crypto_ParsePack(buf, n, header, lumps, lumpsize, nlumps))
    {
        fprintf(stderr, "could not parse %s as %c%c%c%c (%d lumps expected)\n", fn, (int) header & 0xFF, (int) (header >> 8) & 0xFF, (int) (header >> 16) & 0xFF, (int) (header >> 24) & 0xFF, (int) nlumps);
        free(buf);
        exit(1);
    }
    free(buf);
}
 
mode_t umask_save;
void lumps2file(const char *fn, unsigned long header, const char *const *lumps, size_t *lumpsize, size_t nlumps, D0_BOOL private)
{
    char buf[65536];
    size_t n;
    if(private)
        umask(umask_save | 0077);
    else
        umask(umask_save);
    if(!(n = Crypto_UnParsePack(buf, sizeof(buf), header, lumps, lumpsize, nlumps)))
    {
        fprintf(stderr, "could not unparse for %s\n", fn);
        exit(1);
    }
    if(!buf2file(fn, buf, n))
    {
        fprintf(stderr, "could not write %s\n", fn);
        exit(1);
    }
}
 
void USAGE(const char *me)
{
    printf("Usage:\n"
            "%s [-F] [-b bits] [-n progress-denominator] [-x prefix] [-X infix] [-C] -o private.d0sk\n"
            "%s -P private.d0sk -o public.d0pk\n"
            "%s [-n progress-denominator] [-x prefix] [-X infix] [-C] -p public.d0pk -o idkey-unsigned.d0si\n"
            "%s -p public.d0pk -I idkey-unsigned.d0si -o request.d0iq -O camouflage.d0ic\n"
            "%s -P private.d0sk -j request.d0iq -o response.d0ir\n"
            "%s -p public.d0pk -I idkey-unsigned.d0si -c camouflage.d0ic -J response.d0ir -o idkey.d0si\n"
            "%s -P private.d0sk -I idkey-unsigned.d0si -o idkey.d0si\n"
            "%s -I idkey.d0si -o id.d0pi\n"
            "%s -p public.d0pk\n"
            "%s -P private.d0sk\n"
            "%s -p public.d0pk -i id.d0pi\n"
            "%s -p public.d0pk -I idkey.d0si\n"
            "%s -0 -p public.d0pk -I idkey.d0si\n"
            "%s -0 -p public.d0pk\n"
            "%s -p public.d0pk -I idkey.d0si -d file-to-sign.dat -o file-signed.dat\n"
            "%s -p public.d0pk -s file-signed.dat -o file-content.dat [-O id.d0pi]\n"
            "%s -p public.d0pk -I idkey.d0si -d file-to-sign.dat -O signature.dat\n"
            "%s -p public.d0pk -d file-to-sign.dat -s signature.dat [-O id.d0pi]\n",
            me, me, me, me, me, me, me, me, me, me, me, me, me, me, me, me, me, me
           );
}
 
unsigned int seconds;
unsigned int generated;
unsigned int ntasks = 1;
double generated_offset;
double guesscount;
double guessfactor;
void print_generated(int signo)
{
    (void) signo;
    ++seconds;
    if(generated >= 1000000000)
    {
        generated_offset += generated;
        generated = 0;
    }
    fprintf(stderr, "Generated: %.0f (about %.0f, %.1f/s, about %.2f hours for %.0f)\n",
        // nasty and dishonest hack:
        // we are adjusting the values "back", so the total count is
        // divided by guessfactor (as the check function is called
        // guessfactor as often as it would be if no fastreject were
        // done)
        // so the values indicate the relative speed of fastreject vs
        // normal!
        (generated + generated_offset) / guessfactor,
        (generated + generated_offset) * ntasks / guessfactor,
        (generated + generated_offset) * ntasks / (guessfactor * seconds),
        guesscount * ((guessfactor * seconds) / (generated + generated_offset) / ntasks) / 3600.0,
        guesscount);
    alarm(1);
}
 
#define CHECK(x) if(!(x)) { fprintf(stderr, "error exit: error returned by %s\n", #x); exit(2); }
 
const char *prefix = NULL, *infix = NULL;
size_t prefixlen = 0;
int ignorecase;
typedef D0_BOOL (*fingerprint_func) (const d0_blind_id_t *ctx, char *outbuf, size_t *outbuflen);
D0_BOOL fastreject(const d0_blind_id_t *ctx, void *pass)
{
    static char fp64[513]; size_t fp64size = 512;
    CHECK(((fingerprint_func) pass)(ctx, fp64, &fp64size));
    ++generated;
    if(ignorecase)
    {
        if(prefixlen)
            if(strncasecmp(fp64, prefix, prefixlen))
                return 1;
        if(infix)
        {
            fp64[fp64size] = 0;
            if(!strcasestr(fp64, infix))
                return 1;
        }
    }
    else
    {
        if(prefixlen)
            if(memcmp(fp64, prefix, prefixlen))
                return 1;
        if(infix)
        {
            fp64[fp64size] = 0;
            if(!strstr(fp64, infix))
                return 1;
        }
    }
    return 0;
}
 
int main(int argc, char **argv)
{
    int opt;
    size_t lumpsize[2];
    const char *lumps[2];
    char *databuf_in; size_t databufsize_in;
    char *databuf_out; size_t databufsize_out;
    char *databuf_sig; size_t databufsize_sig;
    char lumps_w0[65536];
    char lumps_w1[65536];
    const char *pubkeyfile = NULL, *privkeyfile = NULL, *pubidfile = NULL, *prividfile = NULL, *idreqfile = NULL, *idresfile = NULL, *outfile = NULL, *outfile2 = NULL, *camouflagefile = NULL, *datafile = NULL, *sigfile = NULL;
    char fp64[513]; size_t fp64size = 512;
    int mask = 0;
    int bits = 1024;
    int i;
    D0_BOOL do_fastreject = 1;
    d0_blind_id_t *ctx;
    if(!d0_blind_id_INITIALIZE())
    {
        fprintf(stderr, "could not initialize\n");
        exit(1);
    }
 
    umask_save = umask(0022);
 
    ctx = d0_blind_id_new();
    while((opt = getopt(argc, argv, "d:s:p:P:i:I:j:J:o:O:c:b:x:X:y:Fn:C0")) != -1)
    {
        switch(opt)
        {
            case 'C':
                ignorecase = 1;
                break;
            case 'n':
                ntasks = atoi(optarg);
                break;
            case 'b':
                bits = atoi(optarg);
                break;
            case 'p': // d0pk = <pubkey> <modulus>
                pubkeyfile = optarg;
                mask |= 1;
                break;
            case 'P': // d0sk = <privkey> <modulus>
                privkeyfile = optarg;
                mask |= 2;
                break;
            case 'i': // d0pi = <pubid>
                pubidfile = optarg;
                mask |= 4;
                break;
            case 'I': // d0si = <privid>
                prividfile = optarg;
                mask |= 8;
                break;
            case 'j': // d0iq = <req>
                idreqfile = optarg;
                mask |= 0x10;
                break;
            case 'J': // d0ir = <resp>
                idresfile = optarg;
                mask |= 0x20;
                break;
            case 'o':
                outfile = optarg;
                mask |= 0x40;
                break;
            case 'O':
                outfile2 = optarg;
                mask |= 0x80;
                break;
            case 'c':
                camouflagefile = optarg;
                mask |= 0x100;
                break;
            case 'x':
                prefix = optarg;
                prefixlen = strlen(prefix);
                break;
            case '0':
                // test mode
                mask |= 0x200;
                break;
            case 'd':
                datafile = optarg;
                mask |= 0x400;
                break;
            case 's':
                sigfile = optarg;
                mask |= 0x800;
                break;
            case 'X':
                infix = optarg;
                break;
            case 'F':
                do_fastreject = 0;
                break;
            default:
                USAGE(*argv);
                return 1;
        }
    }
 
    // fastreject is a slight slowdown when rejecting nothing at all
    if(!infix && !prefixlen)
        do_fastreject = 0;
 
    guesscount = pow(64.0, prefixlen);
    if(infix)
        guesscount /= (1 - pow(1 - pow(1/64.0, strlen(infix)), 44 - prefixlen - strlen(infix)));
    // 44 chars; prefix is assumed to not match the infix (although it theoretically could)
    // 43'th char however is always '=' and does not count
    if(ignorecase)
    {
        if(infix)
            for(i = 0; infix[i]; ++i)
                if(toupper(infix[i]) != tolower(infix[i]))
                    guesscount /= 2;
        for(i = 0; i < (int)prefixlen; ++i)
            if(toupper(prefix[i]) != tolower(prefix[i]))
                guesscount /= 2;
    }
 
    if(do_fastreject)
    {
        // fastreject: reject function gets called about log(2^bits) times more often
        guessfactor = bits * log(2) / 2;
        // so guess function gets called guesscount * guessfactor times, and it tests as many valid keys as guesscount
    }
 
    if(mask & 1)
    {
        file2lumps(pubkeyfile, FOURCC_D0PK, lumps, lumpsize, 2);
        if(!d0_blind_id_read_public_key(ctx, lumps[0], lumpsize[0]))
        {
            fprintf(stderr, "could not decode public key\n");
            exit(1);
        }
        if(!d0_blind_id_read_private_id_modulus(ctx, lumps[1], lumpsize[1]))
        {
            fprintf(stderr, "could not decode modulus\n");
            exit(1);
        }
    }
    else if(mask & 2)
    {
        file2lumps(privkeyfile, FOURCC_D0SK, lumps, lumpsize, 2);
        if(!d0_blind_id_read_private_key(ctx, lumps[0], lumpsize[0]))
        {
            fprintf(stderr, "could not decode private key\n");
            exit(1);
        }
        if(!d0_blind_id_read_private_id_modulus(ctx, lumps[1], lumpsize[1]))
        {
            fprintf(stderr, "could not decode modulus\n");
            exit(1);
        }
    }
 
    if(mask & 4)
    {
        file2lumps(pubidfile, FOURCC_D0PI, lumps, lumpsize, 1);
        if(!d0_blind_id_read_public_id(ctx, lumps[0], lumpsize[0]))
        {
            fprintf(stderr, "could not decode public ID\n");
            exit(1);
        }
    }
    if(mask & 8)
    {
        file2lumps(prividfile, FOURCC_D0SI, lumps, lumpsize, 1);
        if(!d0_blind_id_read_private_id(ctx, lumps[0], lumpsize[0]))
        {
            fprintf(stderr, "could not decode private ID\n");
            exit(1);
        }
    }
 
    if(mask & 0x10)
    {
        file2lumps(idreqfile, FOURCC_D0IQ, lumps, lumpsize, 1);
        lumpsize[1] = sizeof(lumps_w1);
        lumps[1] = lumps_w1;
        if(!d0_blind_id_answer_private_id_request(ctx, lumps[0], lumpsize[0], lumps_w1, &lumpsize[1]))
        {
            fprintf(stderr, "could not answer private ID request\n");
            exit(1);
        }
    }
    else if((mask & 0x120) == 0x120)
    {
        file2lumps(camouflagefile, FOURCC_D0IC, lumps, lumpsize, 1);
        if(!d0_blind_id_read_private_id_request_camouflage(ctx, lumps[0], lumpsize[0]))
        {
            fprintf(stderr, "could not decode camouflage\n");
            exit(1);
        }
 
        file2lumps(idresfile, FOURCC_D0IR, lumps, lumpsize, 1);
        if(!d0_blind_id_finish_private_id_request(ctx, lumps[0], lumpsize[0]))
        {
            fprintf(stderr, "could not finish private ID request\n");
            exit(1);
        }
    }
 
    if(mask & 0x400)
    {
        file2buf(datafile, &databuf_in, &databufsize_in);
        if(!databuf_in)
        {
            fprintf(stderr, "could not decode data\n");
            exit(1);
        }
    }
 
    if(mask & 0x800)
    {
        file2buf(sigfile, &databuf_sig, &databufsize_sig);
        if(!databuf_sig)
        {
            fprintf(stderr, "could not decode signature\n");
            exit(1);
        }
    }
 
    switch(mask)
    {
        // modes of operation:
        case 0x40:
            //   nothing -> private key file (incl modulus), print fingerprint
            generated = 0;
            generated_offset = 0;
            seconds = 0;
            signal(SIGALRM, print_generated);
            alarm(1);
            if(do_fastreject)
            {
                CHECK(d0_blind_id_generate_private_key_fastreject(ctx, bits, fastreject, d0_blind_id_fingerprint64_public_key));
            }
            else
            {
                guessfactor = 1; // no fastreject here
                do
                {
                    CHECK(d0_blind_id_generate_private_key(ctx, bits));
                }
                while(fastreject(ctx, d0_blind_id_fingerprint64_public_key));
            }
            alarm(0);
            signal(SIGALRM, NULL);
            CHECK(d0_blind_id_generate_private_id_modulus(ctx));
            lumps[0] = lumps_w0;
            lumpsize[0] = sizeof(lumps_w0);
            lumps[1] = lumps_w1;
            lumpsize[1] = sizeof(lumps_w1);
            CHECK(d0_blind_id_write_private_key(ctx, lumps_w0, &lumpsize[0]));
            CHECK(d0_blind_id_write_private_id_modulus(ctx, lumps_w1, &lumpsize[1]));
            lumps2file(outfile, FOURCC_D0SK, lumps, lumpsize, 2, 1);
            break;
        case 0x42:
            //   private key file -> public key file (incl modulus)
            lumps[0] = lumps_w0;
            lumpsize[0] = sizeof(lumps_w0);
            lumps[1] = lumps_w1;
            lumpsize[1] = sizeof(lumps_w1);
            CHECK(d0_blind_id_write_public_key(ctx, lumps_w0, &lumpsize[0]));
            CHECK(d0_blind_id_write_private_id_modulus(ctx, lumps_w1, &lumpsize[1]));
            lumps2file(outfile, FOURCC_D0PK, lumps, lumpsize, 2, 0);
            break;
        case 0x41:
            //   public key file -> unsigned private ID file
            generated = 0;
            generated_offset = 0;
            seconds = 0;
            signal(SIGALRM, print_generated);
            alarm(1);
            guessfactor = 1; // no fastreject here
            do
            {
                CHECK(d0_blind_id_generate_private_id_start(ctx));
            }
            while(fastreject(ctx, d0_blind_id_fingerprint64_public_id));
            alarm(0);
            signal(SIGALRM, 0);
            lumps[0] = lumps_w0;
            lumpsize[0] = sizeof(lumps_w0);
            CHECK(d0_blind_id_write_private_id(ctx, lumps_w0, &lumpsize[0]));
            lumps2file(outfile, FOURCC_D0SI, lumps, lumpsize, 1, 1);
            break;
        case 0xC9:
            //   public key file, unsigned private ID file -> ID request file and camouflage file
            lumps[0] = lumps_w0;
            lumpsize[0] = sizeof(lumps_w0);
            CHECK(d0_blind_id_generate_private_id_request(ctx, lumps_w0, &lumpsize[0]));
            lumps2file(outfile, FOURCC_D0IQ, lumps, lumpsize, 1, 0);
            lumpsize[0] = sizeof(lumps_w0);
            CHECK(d0_blind_id_write_private_id_request_camouflage(ctx, lumps_w0, &lumpsize[0]));
            lumps2file(outfile2, FOURCC_D0IC, lumps, lumpsize, 1, 1);
            break;
        case 0x52:
            //   private key file, ID request file -> ID response file
            lumps2file(outfile, FOURCC_D0IR, lumps+1, lumpsize+1, 1, 0);
            break;
        case 0x169:
            //   public key file, ID response file, private ID file -> signed private ID file
            lumps[0] = lumps_w0;
            lumpsize[0] = sizeof(lumps_w0);
            CHECK(d0_blind_id_write_private_id(ctx, lumps_w0, &lumpsize[0]));
            lumps2file(outfile, FOURCC_D0SI, lumps, lumpsize, 1, 1);
            break;
        case 0x4A:
            //   private key file, private ID file -> signed private ID file
            {
                char buf[65536]; size_t bufsize;
                char buf2[65536]; size_t buf2size;
                D0_BOOL status;
                d0_blind_id_t *ctx2 = d0_blind_id_new();
                CHECK(d0_blind_id_copy(ctx2, ctx));
                bufsize = sizeof(buf);
                CHECK(d0_blind_id_authenticate_with_private_id_start(ctx, 1, 1, "hello world", 11, buf, &bufsize));
                buf2size = sizeof(buf2);
                CHECK(d0_blind_id_authenticate_with_private_id_challenge(ctx2, 1, 1, buf, bufsize, buf2, &buf2size, &status));
                bufsize = sizeof(buf);
                CHECK(d0_blind_id_authenticate_with_private_id_response(ctx, buf2, buf2size, buf, &bufsize));
                buf2size = sizeof(buf2);
                CHECK(d0_blind_id_authenticate_with_private_id_verify(ctx2, buf, bufsize, buf2, &buf2size, &status));
                CHECK(status == 0);
                CHECK(d0_blind_id_authenticate_with_private_id_generate_missing_signature(ctx2));
                lumps[0] = lumps_w0;
                lumpsize[0] = sizeof(lumps_w0);
                CHECK(d0_blind_id_write_private_id(ctx2, lumps_w0, &lumpsize[0]));
                lumps2file(outfile, FOURCC_D0SI, lumps, lumpsize, 1, 1);
            }
            break;
        case 0x48:
            //   private ID file -> public ID file
            lumps[0] = lumps_w0;
            lumpsize[0] = sizeof(lumps_w0);
            CHECK(d0_blind_id_write_public_id(ctx, lumps_w0, &lumpsize[0]));
            lumps2file(outfile, FOURCC_D0PI, lumps, lumpsize, 1, 0);
            break;
        case 0x01:
        case 0x02:
            //   public/private key file -> fingerprint
            CHECK(d0_blind_id_fingerprint64_public_key(ctx, fp64, &fp64size));
            printf("%.*s\n", (int)fp64size, fp64);
            break;
        case 0x05:
        case 0x09:
            //   public/private ID file -> fingerprint
            CHECK(d0_blind_id_fingerprint64_public_id(ctx, fp64, &fp64size));
            printf("%.*s\n", (int)fp64size, fp64);
            break;
        case 0x449:
            //   public key, private ID, data -> signed data
            databufsize_out = databufsize_in + 8192;
            databuf_out = malloc(databufsize_out);
            CHECK(d0_blind_id_sign_with_private_id_sign(ctx, 1, 0, databuf_in, databufsize_in, databuf_out, &databufsize_out));
            buf2file(outfile, databuf_out, databufsize_out);
            break;
        case 0x489:
            //   public key, private ID, data -> signature
            databufsize_out = databufsize_in + 8192;
            databuf_out = malloc(databufsize_out);
            CHECK(d0_blind_id_sign_with_private_id_sign_detached(ctx, 1, 0, databuf_in, databufsize_in, databuf_out, &databufsize_out));
            buf2file(outfile2, databuf_out, databufsize_out);
            break;
        case 0x841:
        case 0x8C1:
            //   public key, signed data -> data, optional public ID
            {
                D0_BOOL status;
                databufsize_out = databufsize_sig;
                databuf_out = malloc(databufsize_out);
                CHECK(d0_blind_id_sign_with_private_id_verify(ctx, 1, 0, databuf_sig, databufsize_sig, databuf_out, &databufsize_out, &status));
                CHECK(d0_blind_id_fingerprint64_public_id(ctx, fp64, &fp64size));
                printf("%d\n", (int)status);
                printf("%.*s\n", (int)fp64size, fp64);
                buf2file(outfile, databuf_out, databufsize_out);
 
                if(outfile2)
                {
                    lumps[0] = lumps_w0;
                    lumpsize[0] = sizeof(lumps_w0);
                    lumps[1] = lumps_w1;
                    lumpsize[1] = sizeof(lumps_w1);
                    CHECK(d0_blind_id_write_public_key(ctx, lumps_w0, &lumpsize[0]));
                    CHECK(d0_blind_id_write_private_id_modulus(ctx, lumps_w1, &lumpsize[1]));
                    lumps2file(outfile2, FOURCC_D0PK, lumps, lumpsize, 2, 0);
                }
            }
            break;
        case 0xC01:
        case 0xC81:
            //   public key, signature, signed data -> optional public ID
            {
                D0_BOOL status;
                CHECK(d0_blind_id_sign_with_private_id_verify_detached(ctx, 1, 0, databuf_sig, databufsize_sig, databuf_in, databufsize_in, &status));
                CHECK(d0_blind_id_fingerprint64_public_id(ctx, fp64, &fp64size));
                printf("%d\n", (int)status);
                printf("%.*s\n", (int)fp64size, fp64);
 
                if(outfile2)
                {
                    lumps[0] = lumps_w0;
                    lumpsize[0] = sizeof(lumps_w0);
                    lumps[1] = lumps_w1;
                    lumpsize[1] = sizeof(lumps_w1);
                    CHECK(d0_blind_id_write_public_key(ctx, lumps_w0, &lumpsize[0]));
                    CHECK(d0_blind_id_write_private_id_modulus(ctx, lumps_w1, &lumpsize[1]));
                    lumps2file(outfile2, FOURCC_D0PK, lumps, lumpsize, 2, 0);
                }
            }
            break;
/*
        case 0x09:
            //   public key, private ID file -> test whether key is properly signed
            {
                char buf[65536]; size_t bufsize;
                char buf2[65536]; size_t buf2size;
                D0_BOOL status;
                d0_blind_id_t *ctx2 = d0_blind_id_new();
                CHECK(d0_blind_id_copy(ctx2, ctx));
                bufsize = sizeof(buf);
                CHECK(d0_blind_id_authenticate_with_private_id_start(ctx, 1, 1, "hello world", 11, buf, &bufsize));
                buf2size = sizeof(buf2);
                CHECK(d0_blind_id_authenticate_with_private_id_challenge(ctx2, 1, 1, buf, bufsize, buf2, &buf2size, &status));
                bufsize = sizeof(buf);
                CHECK(d0_blind_id_authenticate_with_private_id_response(ctx, buf2, buf2size, buf, &bufsize));
                buf2size = sizeof(buf2);
                CHECK(d0_blind_id_authenticate_with_private_id_verify(ctx2, buf, bufsize, buf2, &buf2size, &status));
                if(status)
                    printf("OK\n");
                else
                    printf("EPIC FAIL\n");
            }
            break;
*/
        case 0x209:
            // protocol client
            {
                char hexbuf[131073];
                const char hex[] = "0123456789abcdef";
                char buf[65536]; size_t bufsize;
                char buf2[65536]; size_t buf2size;
                bufsize = sizeof(buf);
                CHECK(d0_blind_id_authenticate_with_private_id_start(ctx, 1, 1, "hello world", 11, buf, &bufsize));
                for(i = 0; i < (int)bufsize; ++i)
                    sprintf(&hexbuf[2*i], "%02x", (unsigned char)buf[i]);
                printf("%s\n", hexbuf);
                fgets(hexbuf, sizeof(hexbuf), stdin);
                buf2size = strlen(hexbuf) / 2;
                for(i = 0; i < (int)buf2size; ++i)
                    buf2[i] = ((strchr(hex, hexbuf[2*i]) - hex) << 4) | (strchr(hex, hexbuf[2*i+1]) - hex);
                bufsize = sizeof(buf);
                CHECK(d0_blind_id_authenticate_with_private_id_response(ctx, buf2, buf2size, buf, &bufsize));
                for(i = 0; i < (int)bufsize; ++i)
                    sprintf(&hexbuf[2*i], "%02x", (unsigned char)buf[i]);
                printf("%s\n", hexbuf);
            }
            break;
        case 0x201:
            // protocol server
            {
                char hexbuf[131073];
                const char hex[] = "0123456789abcdef";
                char buf[65536]; size_t bufsize;
                char buf2[65536]; size_t buf2size;
                D0_BOOL status;
                fgets(hexbuf, sizeof(hexbuf), stdin);
                buf2size = strlen(hexbuf) / 2;
                for(i = 0; i < (int)buf2size; ++i)
                    buf2[i] = ((strchr(hex, hexbuf[2*i]) - hex) << 4) | (strchr(hex, hexbuf[2*i+1]) - hex);
                bufsize = sizeof(buf);
                CHECK(d0_blind_id_authenticate_with_private_id_challenge(ctx, 1, 1, buf2, buf2size, buf, &bufsize, &status));
                for(i = 0; i < (int)bufsize; ++i)
                    sprintf(&hexbuf[2*i], "%02x", (unsigned char)buf[i]);
                printf("%s\n", hexbuf);
                fgets(hexbuf, sizeof(hexbuf), stdin);
                buf2size = strlen(hexbuf) / 2;
                for(i = 0; i < (int)buf2size; ++i)
                    buf2[i] = ((strchr(hex, hexbuf[2*i]) - hex) << 4) | (strchr(hex, hexbuf[2*i+1]) - hex);
                bufsize = sizeof(buf);
                CHECK(d0_blind_id_authenticate_with_private_id_verify(ctx, buf2, buf2size, buf, &bufsize, &status));
                printf("verify status: %d\n", status);
 
                CHECK(d0_blind_id_fingerprint64_public_id(ctx, fp64, &fp64size));
                printf("%.*s\n", (int)fp64size, fp64);
            }
            break;
        default:
            USAGE(*argv);
            exit(1);
            break;
    }
    d0_blind_id_SHUTDOWN();
    return 0;
}