#! /bin/sh
###
### Reveal shares of a secret distributed among keepers
###
### (c) 2011 Mark Wooding
###

###----- Licensing notice ---------------------------------------------------
###
### This file is part of the distorted.org.uk key management suite.
###
### distorted-keys is free software; you can redistribute it and/or modify
### it under the terms of the GNU General Public License as published by
### the Free Software Foundation; either version 2 of the License, or
### (at your option) any later version.
###
### distorted-keys is distributed in the hope that it will be useful,
### but WITHOUT ANY WARRANTY; without even the implied warranty of
### MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
### GNU General Public License for more details.
###
### You should have received a copy of the GNU General Public License
### along with distorted-keys; if not, write to the Free Software Foundation,
### Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.

set -e
case "${KEYSLIB+t}" in t) ;; *) echo >&2 "$0: KEYSLIB unset"; exit 1 ;; esac
. "$KEYSLIB"/keyfunc.sh

defhelp <<HELP
RECOV KEEPER [NUB]
Reveal a share of a recovery key distributed among keepers.

If enough shares have been revealed, reconstruct the recovery private key.
The keeper nub is read from NUB, or stdin if NUB is omitted or \`-'.
HELP

## Parse the command line.
case $# in
  2) if [ -t 0 ]; then echo >&2 "$quis: stdin is a terminal"; exit 1; fi ;;
  3) ;;
  *) usage_err ;;
esac
recov=$1 keeper=$2; shift 2
checklabel "recovery key" "$recov"
case "$recov" in
  */*) ;;
  *) recov=$recov/current ;;
esac
checkword "keeper set label" "$keeper"

## Check that this is a sensible thing to do.
if [ ! -f $KEYS/keeper/$keeper/meta ]; then
  echo >&2 "$quis: unknown keeper set \`$keeper'"
  exit 1
fi
if [ ! -d $KEYS/recov/$recov ]; then
  echo >&2 "$quis: unknown recovery key \`$recov'"
  exit 1
fi
if [ ! -f $KEYS/recov/$recov/$keeper.param ]; then
  echo >&2 "$quis: recovery key \`$recov' not kept by keeper set \`$keeper'"
  exit 1
fi

## Grab the key, because we'll need to read it several times.
mktmp
cat -- "$@" >$tmp/secret

## Read the threshold from the recovery metadata.
read param <$KEYS/recov/$recov/$keeper.param
case "$param" in
  shamir-params:*) ;;
  *)
    echo >&2 "$quis: secret sharing parameter file damaged (wrong header)"
    exit 1
    ;;
esac
t=";${param#*:}"
case "$t" in
  *";t="*) ;;
  *)
    echo >&2 "$quis: secret sharing parameter file damaged (missing t)"
    exit 1
    ;;
esac
t=${t#*;t=}
t=${t%%;*}

## Find out which keeper index it corresponds to.
read n hunoz <$KEYS/keeper/$keeper/meta
i=0
foundp=nil
while [ $i -lt $n ]; do
  c_sysprepare $KEYS/keeper/$keeper/$i
  nubbin=$(nubid <$tmp/secret)
  nubid=$(cat $KEYS/keeper/$keeper/$i/nubid)
  case "$nubbin" in "$nubid") foundp=t; break ;; esac
  i=$(( $i + 1 ))
done
case $foundp in
  nil) echo >&2 "$quis: nub doesn't match keeper \`$keeper'"; exit 1 ;;
esac

## Establish the recovery staging area.  See whether we've done enough
## already.
reqsafe
tag=$(echo $recov | tr / .)
mkdir -p -m700 $SAFE/keys.reveal
reveal=$SAFE/keys.reveal/$tag
if [ ! -d $reveal ]; then mkdir -m700 $reveal; fi
cd $reveal
if [ -f nub ]; then
  echo >&2 "$quis: recovery key \`$recov' already revealed"
  exit 1
fi

## Decrypt the share.
umask 077
if [ -f $keeper.$i.share ]; then
  echo >&2 "$quis: share $i already revealed"
else
  c_sysdecrypt $KEYS/keeper/$keeper/$i $tmp/secret \
    <$KEYS/recov/$recov/$keeper.$i.share \
    >$keeper.$i.new
  mv $keeper.$i.new $keeper.$i.share
fi

## See if there's enough for a recovery.
n=0
for j in $keeper.*.share; do if [ -f "$j" ]; then n=$(( $n + 1 )); fi; done
if [ $n -lt $t ]; then
  echo >&2 "$quis: share $i revealed; $(( $t - $n )) more required"
else
  cat $KEYS/recov/$recov/$keeper.param $keeper.*.share >$keeper.shares
  $bindir/shamir recover <$keeper.shares >nub.new
  c_sysprepare $KEYS/recov/$recov/store
  nubbin=$(nubid <nub.new)
  nubid=$(cat $KEYS/recov/$recov/store/nubid)
  case "$nubbin" in
    "$nubid") ;;
    *)
      echo >&2 "$quis: recovered nub doesn't match stored hash"
      exit 1
      ;;
  esac
  mv nub.new nub
  rm -f $keeper.*
  echo >&2 "$quis: recovery key \`$recov' revealed"
fi

###----- That's all, folks --------------------------------------------------