Merge pull request #5 from privacybydesign/disable-algorithm

Ability to disable non default signature algorithm

config.yaml.example

@@ -12,6 +12,12 @@ acceptableLag: 60
 # The default signature algorithm.  Either ed25519 or xmssmt.
 defaultSigAlg: xmssmt
 
+# Whether or not other signature algorithms besides defaultSigAlg 
+# are disabled. This is useful if you only want to support one algorithm.
+# NOTE: if true, you can still verify validity of timestamps generated with 
+# any other supported algorithm for the keys listed in otherTrustedPublicKeys
+disableOtherSigAlg: false
+
 # Path to store private keys.  Will be generated if not present.
 # WARNING: do not make backups or copies of xmssmt.key.  See the README.
 xmssmtKeyPath: xmssmt.key

go.mod

@@ -1,15 +1,36 @@
 module github.com/bwesterb/atumd
 
-go 1.14
+go 1.19
 
 require (
 	github.com/bwesterb/go-atum v1.1.5
 	github.com/bwesterb/go-pow v1.0.0
 	github.com/bwesterb/go-xmssmt v1.5.2
 	github.com/go-chi/cors v1.2.1
-	github.com/prometheus/client_golang v1.12.2
-	github.com/prometheus/common v0.35.0 // indirect
-	golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d
-	google.golang.org/protobuf v1.28.0 // indirect
+	github.com/prometheus/client_golang v1.17.0
+	golang.org/x/crypto v0.14.0
 	gopkg.in/yaml.v2 v2.4.0
 )
+
+require (
+	github.com/beorn7/perks v1.0.1 // indirect
+	github.com/bwesterb/byteswriter v1.0.0 // indirect
+	github.com/cespare/xxhash v1.1.0 // indirect
+	github.com/cespare/xxhash/v2 v2.2.0 // indirect
+	github.com/edsrzf/mmap-go v1.1.0 // indirect
+	github.com/golang/protobuf v1.5.3 // indirect
+	github.com/hashicorp/errwrap v1.1.0 // indirect
+	github.com/hashicorp/go-multierror v1.1.1 // indirect
+	github.com/kr/text v0.2.0 // indirect
+	github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
+	github.com/nightlyone/lockfile v1.0.0 // indirect
+	github.com/prometheus/client_model v0.4.1-0.20230718164431-9a2bf3000d16 // indirect
+	github.com/prometheus/common v0.44.0 // indirect
+	github.com/prometheus/procfs v0.11.1 // indirect
+	github.com/templexxx/cpu v0.0.9 // indirect
+	github.com/templexxx/xorsimd v0.4.1 // indirect
+	github.com/timshannon/bolthold v0.0.0-20210913165410-232392fc8a6a // indirect
+	go.etcd.io/bbolt v1.3.6 // indirect
+	golang.org/x/sys v0.13.0 // indirect
+	google.golang.org/protobuf v1.31.0 // indirect
+)