Repository: openpubkey/openpubkey
Pull request #21 (2023-09-27 15:52:37)

Rename go module to openpubkey/openpubkey


Patch:
diff --git a/README.md b/README.md
index 0ca58a0..4b14b07 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,5 @@
 # OpenPubkey Reference Implementation
- 
+
 OpenPubkey adds user generated cryptographic signatures to OpenID Connect (OIDC) to enable users to sign messages or artifacts under their OpenID identity. Verifiers can check that these signatures are valid and associated with the signing OpenID identity. OpenPubkey does not add any new trusted parties beyond what is required for OpenID Connect and is fully compatible with existing OpenID Providers (Google, Azure/Microsoft, Okta, OneLogin, Keycloak) without any changes to the OpenID Provider.
 
 This repo contains the current reference implementation of OpenPubkey. The reference implementation is a work in progress.
@@ -7,17 +7,18 @@ This repo contains the current reference implementation of OpenPubkey. The refer
 ## Remaining Work
 
 Phase 1:
+
 - [ ] Common OpenPubkey client struct constructor that supports:
-  - [ ] [Github OpenID Provider (OP) with CIC in `aud` claim](https://github.com/bastionzero/openpubkey/issues/5)
-  - [ ] [Azure OpenID Provider (OP)](https://github.com/bastionzero/openpubkey/issues/6)
+  - [ ] [Github OpenID Provider (OP) with CIC in `aud` claim](https://github.com/openpubkey/openpubkey/issues/5)
+  - [ ] [Azure OpenID Provider (OP)](https://github.com/openpubkey/openpubkey/issues/6)
   - [x] Google OpenID Provider (OP)
 - [x] GQ Signature Support
   - [x] GQ signer and verifier
-  - [x] [GQ JWS Support](https://github.com/bastionzero/openpubkey/pull/14)
+  - [x] [GQ JWS Support](https://github.com/openpubkey/openpubkey/pull/14)
 - [ ] Examples
   - [ ] Google OP x509 signing example
   - [ ] Github Actions signing example
-- [ ] [Cryptography review and remediation](https://github.com/bastionzero/openpubkey/issues/11)
+- [ ] [Cryptography review and remediation](https://github.com/openpubkey/openpubkey/issues/11)
 - [ ] Opensource project must haves
   - [ ] Github actions to run unittest
   - [ ] Linter enforcement
@@ -27,30 +28,25 @@ Phase 1:
   - [ ] PR template
 
 Phase 2:
+
 - [ ] Additional Signers (TBD)
 
 # How to use this library
 
 To interact with OpenPubkey as a signer use the OpkClient struct.
 
-
 <!-- # How it works
 
 ... -->
 
 # Further reading
 
-* [OpenPubkey: Augmenting OpenID Connect with User held Signing Keys](https://eprint.iacr.org/2023/296)
-
-* [BastionZero’s OpenPubkey: A new approach to cryptographic signatures](https://www.bastionzero.com/blog/bastionzeros-openpubkey-why-i-think-it-is-the-most-important-security-research-ive-done)
-
-* [Reducing Trust in Automated Certificate Authorities via Proofs-of-Authentication](https://arxiv.org/abs/2307.08201)
-
-* [Guillou and Quisquater, A “Paradoxical” Indentity-Based Signature Scheme Resulting from Zero-Knowledge, Crypto 1988](https://link.springer.com/content/pdf/10.1007/0-387-34799-2_16.pdf) 
-  
-* [OpenID Connect Core 1.0 incorporating errata set 1](https://openid.net/specs/openid-connect-core-1_0.html)
-
+- [OpenPubkey: Augmenting OpenID Connect with User held Signing Keys](https://eprint.iacr.org/2023/296)
 
+- [BastionZero’s OpenPubkey: A new approach to cryptographic signatures](https://www.bastionzero.com/blog/bastionzeros-openpubkey-why-i-think-it-is-the-most-important-security-research-ive-done)
 
+- [Reducing Trust in Automated Certificate Authorities via Proofs-of-Authentication](https://arxiv.org/abs/2307.08201)
 
+- [Guillou and Quisquater, A “Paradoxical” Indentity-Based Signature Scheme Resulting from Zero-Knowledge, Crypto 1988](https://link.springer.com/content/pdf/10.1007/0-387-34799-2_16.pdf)
 
+- [OpenID Connect Core 1.0 incorporating errata set 1](https://openid.net/specs/openid-connect-core-1_0.html)
diff --git a/cert/ca.go b/cert/ca.go
index 0f13bab..1eafd8d 100644
--- a/cert/ca.go
+++ b/cert/ca.go
@@ -16,7 +16,7 @@ import (
 	"github.com/lestrrat-go/jwx/v2/jwa"
 	"github.com/lestrrat-go/jwx/v2/jwk"
 
-	"github.com/bastionzero/openpubkey/pktoken"
+	"github.com/openpubkey/openpubkey/pktoken"
 )
 
 type CosignerConfig struct {
diff --git a/examples/google/example.go b/examples/google/example.go
index 3cdd2d0..6777e8b 100644
--- a/examples/google/example.go
+++ b/examples/google/example.go
@@ -14,8 +14,8 @@ import (
 	"github.com/sirupsen/logrus"
 	"github.com/zitadel/oidc/v2/pkg/oidc"
 
-	"github.com/bastionzero/openpubkey/parties"
-	"github.com/bastionzero/openpubkey/pktoken"
+	"github.com/openpubkey/openpubkey/parties"
+	"github.com/openpubkey/openpubkey/pktoken"
 )
 
 // TODO: Create nice golang services rather than just using this handler nonsense
diff --git a/go.mod b/go.mod
index db552d6..401ef27 100644
--- a/go.mod
+++ b/go.mod
@@ -1,4 +1,4 @@
-module github.com/bastionzero/openpubkey
+module github.com/openpubkey/openpubkey
 
 go 1.20
 
diff --git a/gq/sign.go b/gq/sign.go
index c3c9b4d..2af216e 100644
--- a/gq/sign.go
+++ b/gq/sign.go
@@ -4,7 +4,7 @@ import (
 	"crypto/rand"
 	"math/big"
 
-	"github.com/bastionzero/openpubkey/util"
+	"github.com/openpubkey/openpubkey/util"
 )
 
 // Sign creates a GQ1 signature over the given message with the given GQ1 private number.
diff --git a/gq/verify.go b/gq/verify.go
index f3a1131..46ff3ff 100644
--- a/gq/verify.go
+++ b/gq/verify.go
@@ -5,7 +5,7 @@ import (
 	"fmt"
 	"math/big"
 
-	"github.com/bastionzero/openpubkey/util"
+	"github.com/openpubkey/openpubkey/util"
 )
 
 // Verify verifies a GQ1 signature over a message, using the public identity of the signer.
diff --git a/parties/ca.go b/parties/ca.go
index 806deaa..69a5782 100644
--- a/parties/ca.go
+++ b/parties/ca.go
@@ -20,8 +20,8 @@ import (
 	"github.com/lestrrat-go/jwx/v2/jwk"
 	"github.com/sirupsen/logrus"
 
-	"github.com/bastionzero/openpubkey/pktoken"
-	"github.com/bastionzero/openpubkey/util"
+	"github.com/openpubkey/openpubkey/pktoken"
+	"github.com/openpubkey/openpubkey/util"
 )
 
 // TODO: make requiredAudience a configuration option
diff --git a/parties/githubclient.go b/parties/githubclient.go
index 0ef2634..1ceca91 100644
--- a/parties/githubclient.go
+++ b/parties/githubclient.go
@@ -12,12 +12,12 @@ import (
 	"net/url"
 	"os"
 
-	"github.com/bastionzero/openpubkey/gq"
-	"github.com/bastionzero/openpubkey/pktoken"
-	"github.com/bastionzero/openpubkey/util"
 	"github.com/lestrrat-go/jwx/v2/jwa"
 	"github.com/lestrrat-go/jwx/v2/jwk"
 	"github.com/lestrrat-go/jwx/v2/jws"
+	"github.com/openpubkey/openpubkey/gq"
+	"github.com/openpubkey/openpubkey/pktoken"
+	"github.com/openpubkey/openpubkey/util"
 	"github.com/zitadel/oidc/v2/pkg/client"
 )
 
diff --git a/parties/googleclient.go b/parties/googleclient.go
index 4c7b737..c378380 100644
--- a/parties/googleclient.go
+++ b/parties/googleclient.go
@@ -24,9 +24,9 @@ import (
 
 	httphelper "github.com/zitadel/oidc/v2/pkg/http"
 
-	"github.com/bastionzero/openpubkey/gq"
-	"github.com/bastionzero/openpubkey/pktoken"
-	"github.com/bastionzero/openpubkey/util"
+	"github.com/openpubkey/openpubkey/gq"
+	"github.com/openpubkey/openpubkey/pktoken"
+	"github.com/openpubkey/openpubkey/util"
 )
 
 var (
diff --git a/parties/opkclient.go b/parties/opkclient.go
index 83735f6..5d96acf 100644
--- a/parties/opkclient.go
+++ b/parties/opkclient.go
@@ -10,8 +10,8 @@ import (
 
 	"github.com/zitadel/oidc/v2/pkg/oidc"
 
-	"github.com/bastionzero/openpubkey/gq"
-	"github.com/bastionzero/openpubkey/pktoken"
+	"github.com/openpubkey/openpubkey/gq"
+	"github.com/openpubkey/openpubkey/pktoken"
 )
 
 const gqSecurityParameter = 256
diff --git a/pktoken/signer.go b/pktoken/signer.go
index 1d2000f..c0f20c2 100644
--- a/pktoken/signer.go
+++ b/pktoken/signer.go
@@ -16,7 +16,7 @@ import (
 	"github.com/lestrrat-go/jwx/v2/jwk"
 	"github.com/lestrrat-go/jwx/v2/jws"
 
-	"github.com/bastionzero/openpubkey/util"
+	"github.com/openpubkey/openpubkey/util"
 )
 
 // Variable names with a postfix of "com" denotes that value is stored as a compact JWT representation (See RFC7519)


Test patch:
diff --git a/cert/ca_test.go b/cert/ca_test.go
index 71861e8..e21b61f 100644
--- a/cert/ca_test.go
+++ b/cert/ca_test.go
@@ -10,7 +10,7 @@ import (
 	"github.com/lestrrat-go/jwx/v2/jwa"
 	"github.com/lestrrat-go/jwx/v2/jws"
 
-	"github.com/bastionzero/openpubkey/pktoken"
+	"github.com/openpubkey/openpubkey/pktoken"
 )
 
 // output SK
diff --git a/gq/gq_test.go b/gq/gq_test.go
index db7ef06..e968355 100644
--- a/gq/gq_test.go
+++ b/gq/gq_test.go
@@ -10,8 +10,8 @@ import (
 	"testing"
 	"time"
 
-	"github.com/bastionzero/openpubkey/gq"
-	"github.com/bastionzero/openpubkey/util"
+	"github.com/openpubkey/openpubkey/gq"
+	"github.com/openpubkey/openpubkey/util"
 )
 
 func TestProveVerify(t *testing.T) {
diff --git a/pktoken/signer_test.go b/pktoken/signer_test.go
index 0ea7293..5b37348 100644
--- a/pktoken/signer_test.go
+++ b/pktoken/signer_test.go
@@ -6,8 +6,8 @@ import (
 	"encoding/hex"
 	"testing"
 
-	"github.com/bastionzero/openpubkey/util"
 	"github.com/lestrrat-go/jwx/v2/jws"
+	"github.com/openpubkey/openpubkey/util"
 )
 
 var (