🔑 Key Generation and ElectionGuard Package Bump (#60)

* 🙈 Ignore code-workspaces for vs-code

* ✨  Creation of Election and Auxiliary Keys

- Add generation of keys
- Add tests

* 🆙  Upgrade to electionguard 1.1.3

- Upgrade to newest electionguard
- Remove previous serialization logic in favor of base logic
- 📦  Add `pytest` to dev packages

Author: keithrfung

.gitignore

@@ -138,7 +138,7 @@ dmypy.json
 cython_debug/
 
 # VS Code
-*.local.json
+*.code-workspace
 
 # Mac
 .DS_Store

Pipfile

@@ -8,6 +8,7 @@ black = "*"
 mkdocs = "*"
 mypy = "*"
 pylint = "*"
+pytest = "*"
 
 [packages]
 electionguard = "*"

Pipfile.lock

@@ -1,8 +1,9 @@
 from fastapi import APIRouter
 
-from app.api.v1.endpoints import ballot, ping, election
+from app.api.v1.endpoints import ballot, election, key, ping
 
 api_router = APIRouter()
 api_router.include_router(ping.router, prefix="/ping", tags=["ping"])
 api_router.include_router(election.router, prefix="/election", tags=["election"])
 api_router.include_router(ballot.router, prefix="/ballot", tags=["ballot"])
+api_router.include_router(key.router, prefix="/key", tags=["key"])

app/api/v1/api.py

@@ -9,7 +9,6 @@
 from fastapi import APIRouter, Body, HTTPException
 from pydantic import BaseModel
 from typing import Any
-from app.utils.serialize import write_json, write_json_object
 
 router = APIRouter()
 
@@ -31,7 +30,7 @@ def cast_ballot(request: AcceptBallotRequest = Body(...)) -> Any:
             status_code=500,
             detail="Ballot failed to be cast",
         )
-    return write_json_object(cast_ballot)
+    return cast_ballot.to_json_object()
 
 
 @router.post("/spoil")
@@ -45,14 +44,14 @@ def spoil_ballot(request: AcceptBallotRequest = Body(...)) -> Any:
             status_code=500,
             detail="Ballot failed to be spoiled",
         )
-    return write_json_object(spoiled_ballot)
+    return spoiled_ballot.to_json_object()
 
 
 def handle_ballot(request: AcceptBallotRequest, state: BallotBoxState) -> Any:
-    ballot = CiphertextBallot.from_json(write_json(request.ballot))
-    description = ElectionDescription.from_json(write_json(request.description))
+    ballot = CiphertextBallot.from_json_object(request.ballot)
+    description = ElectionDescription.from_json_object(request.description)
     internal_description = InternalElectionDescription(description)
-    context = CiphertextElectionContext.from_json(write_json(request.context))
+    context = CiphertextElectionContext.from_json_object(request.context)
 
     accepted_ballot = accept_ballot(
         ballot,

app/api/v1/endpoints/ballot.py

@@ -2,8 +2,6 @@
 from fastapi import APIRouter, HTTPException
 from os.path import realpath, join
 from typing import Any
-from app.utils.serialize import write_json_object
-
 
 router = APIRouter()
 
@@ -18,7 +16,7 @@ def get_election_constants() -> Any:
     Return the constants defined for an election
     """
     constants = ElectionConstants()
-    return write_json_object(constants)
+    return constants.to_json_object()
 
 
 @router.get("/description")

app/api/v1/endpoints/election.py

@@ -0,0 +1,105 @@
+from electionguard.key_ceremony import (
+    generate_election_key_pair,
+    generate_rsa_auxiliary_key_pair,
+)
+from electionguard.serializable import write_json_object
+from electionguard.group import int_to_q_unchecked
+from fastapi import APIRouter, HTTPException
+from pydantic import BaseModel
+from typing import Optional, Any
+
+router = APIRouter()
+
+
+class ElectionKeyPairRequest(BaseModel):
+    quorum: int
+    nonce: Optional[str] = None
+
+
+class ElectionKeyPairResponse(BaseModel):
+    secret_key: str
+    public_key: str
+    proof: Any
+    polynomial: Any
+
+
+class AuxiliaryKeyPairResponse(BaseModel):
+    secret_key: str
+    public_key: str
+
+
+GuardianKeysRequest = ElectionKeyPairRequest
+
+
+class GuardianKeysResponse(BaseModel):
+    election: ElectionKeyPairResponse
+    auxiliary: AuxiliaryKeyPairResponse
+
+
+@router.post("/generate", response_model=GuardianKeysResponse)
+def generate_keys(request: GuardianKeysRequest) -> GuardianKeysResponse:
+    """
+    Generate election key pairs for use in election process
+    """
+    election_keys = generate_election_key_pair(
+        request.quorum,
+        int_to_q_unchecked(request.nonce) if request.nonce is not None else None,
+    )
+    auxiliary_keys = generate_rsa_auxiliary_key_pair()
+    if not election_keys:
+        raise HTTPException(
+            status_code=500,
+            detail="Election keys failed to be generated",
+        )
+    if not auxiliary_keys:
+        raise HTTPException(
+            status_code=500, detail="Auxiliary keys failed to be generated"
+        )
+    return GuardianKeysResponse(
+        election=ElectionKeyPairResponse(
+            public_key=str(election_keys.key_pair.public_key),
+            secret_key=str(election_keys.key_pair.secret_key),
+            proof=write_json_object(election_keys.proof),
+            polynomial=write_json_object(election_keys.polynomial),
+        ),
+        auxiliary=AuxiliaryKeyPairResponse(
+            public_key=auxiliary_keys.public_key, secret_key=auxiliary_keys.secret_key
+        ),
+    )
+
+
+@router.post("/election/generate", response_model=ElectionKeyPairResponse)
+def generate_election_keys(request: ElectionKeyPairRequest) -> ElectionKeyPairResponse:
+    """
+    Generate election key pairs for use in election process
+    """
+    keys = generate_election_key_pair(
+        request.quorum,
+        int_to_q_unchecked(request.nonce) if request.nonce is not None else None,
+    )
+    if not keys:
+        raise HTTPException(
+            status_code=500,
+            detail="Election keys failed to be generated",
+        )
+    return ElectionKeyPairResponse(
+        public_key=str(keys.key_pair.public_key),
+        secret_key=str(keys.key_pair.secret_key),
+        proof=write_json_object(keys.proof),
+        polynomial=write_json_object(keys.polynomial),
+    )
+
+
+@router.post("/auxiliary/generate", response_model=AuxiliaryKeyPairResponse)
+def generate_auxiliary_keys() -> AuxiliaryKeyPairResponse:
+    """
+    Generate auxiliary key pair for auxiliary uses during process
+    """
+    keys = generate_rsa_auxiliary_key_pair()
+    if not keys:
+        raise HTTPException(
+            status_code=500, detail="Auxiliary keys failed to be generated"
+        )
+    return AuxiliaryKeyPairResponse(
+        public_key=keys.public_key, secret_key=keys.secret_key
+    )