CroneKorkN
730625e36c
every libs/*.py and hooks/*.py now starts with a one-line module docstring; every bin/* script starts with a `# purpose:` header. discovery-by-`ls`-and-read instead of by index. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
18 lines
614 B
Python
18 lines
614 B
Python
"""wireguard: deterministic WireGuard private/public key + PSK derivation, backed by repo.vault.random_bytes_as_base64_for."""
|
|
|
|
import base64
|
|
from nacl.public import PrivateKey
|
|
from nacl.encoding import Base64Encoder
|
|
from functools import cache
|
|
|
|
@cache
|
|
def privkey(id):
|
|
return str(repo.vault.random_bytes_as_base64_for(f"wireguard privkey {id}"))
|
|
|
|
@cache
|
|
def pubkey(id):
|
|
return PrivateKey(base64.b64decode(privkey(id))).public_key.encode(encoder=Base64Encoder).decode('ascii')
|
|
|
|
@cache
|
|
def psk(id1, id2):
|
|
return repo.vault.random_bytes_as_base64_for(f"wireguard psk {' '.join(sorted([id1, id2]))}")
|