-revocation prototype

1 files changed, 19 insertions, 3 deletions

diff --git a/src/include/gnunet_revocation_service.h b/src/include/gnunet_revocation_service.h
index 772dbbe75..7176abb7a 100644
--- a/src/include/gnunet_revocation_service.h
+++ b/src/include/gnunet_revocation_service.h
@@ -24,6 +24,7 @@
 /**
  * @file include/gnunet_revocation_service.h
  * @brief API to perform and access key revocations
+ * @author Christian Grothoff
  * @defgroup revocation key revocation service
  * @{
  */
@@ -94,8 +95,11 @@ struct GNUNET_REVOCATION_Handle;
  * Perform key revocation.
  *
  * @param cfg the configuration to use
- * @param key key to revoke
- * @param pow proof of work to use
+ * @param key public key of the key to revoke
+ * @param sig signature to use on the revocation (should have been
+ *            created using #GNUNET_REVOCATION_sign_revocation).
+ * @param pow proof of work to use (should have been created by
+ *            iteratively calling #GNUNET_REVOCATION_check_pow)
  * @param func funtion to call with the result of the check
  *             (called with `is_valid` being #GNUNET_NO if
  *              the revocation worked).
@@ -104,7 +108,8 @@ struct GNUNET_REVOCATION_Handle;
  */
 struct GNUNET_REVOCATION_Handle *
 GNUNET_REVOCATION_revoke (const struct GNUNET_CONFIGURATION_Handle *cfg,
-                          const struct GNUNET_CRYPTO_EccPrivateKey *key,
+                          const struct GNUNET_CRYPTO_EccPublicSignKey *key,
+                          const struct GNUNET_CRYPTO_EccSignature *sig,
                           uint64_t pow,
                           GNUNET_REVOCATION_Callback func, void *func_cls);
 
@@ -131,6 +136,17 @@ GNUNET_REVOCATION_check_pow (const struct GNUNET_CRYPTO_EccPublicSignKey *key,
                              uint64_t pow);
 
 
+/**
+ * Create a revocation signature.
+ *
+ * @param key private key of the key to revoke
+ * @param sig where to write the revocation signature
+ */
+void
+GNUNET_REVOCATION_sign_revocation (const struct GNUNET_CRYPTO_EccPrivateKey *key,
+                                   struct GNUNET_CRYPTO_EccSignature *sig);
+
+
 #if 0                           /* keep Emacsens' auto-indent happy */
 {
 #endif