1 files changed, 290 insertions, 344 deletions

diff --git a/src/util/denom.c b/src/util/denom.c
index b6b3764da..cb232c4a3 100644
--- a/src/util/denom.c
+++ b/src/util/denom.c
@@ -1,6 +1,6 @@
 /*
   This file is part of TALER
-  Copyright (C) 2021 Taler Systems SA
+  Copyright (C) 2021, 2022, 2023 Taler Systems SA
 
   TALER is free software; you can redistribute it and/or modify it under the
   terms of the GNU General Public License as published by the Free Software
@@ -25,87 +25,43 @@
 enum GNUNET_GenericReturnValue
 TALER_denom_priv_create (struct TALER_DenominationPrivateKey *denom_priv,
                          struct TALER_DenominationPublicKey *denom_pub,
-                         enum TALER_DenominationCipher cipher,
+                         enum GNUNET_CRYPTO_BlindSignatureAlgorithm cipher,
                          ...)
 {
-  memset (denom_priv,
-          0,
-          sizeof (*denom_priv));
+  enum GNUNET_GenericReturnValue ret;
+  va_list ap;
+
   memset (denom_pub,
           0,
           sizeof (*denom_pub));
-  switch (cipher)
-  {
-  case TALER_DENOMINATION_INVALID:
-    GNUNET_break (0);
-    return GNUNET_SYSERR;
-  case TALER_DENOMINATION_RSA:
-    {
-      va_list ap;
-      unsigned int bits;
-
-      va_start (ap, cipher);
-      bits = va_arg (ap, unsigned int);
-      va_end (ap);
-      if (bits < 512)
-      {
-        GNUNET_break (0);
-        return GNUNET_SYSERR;
-      }
-      denom_priv->details.rsa_private_key
-        = GNUNET_CRYPTO_rsa_private_key_create (bits);
-    }
-    if (NULL == denom_priv->details.rsa_private_key)
-    {
-      GNUNET_break (0);
-      return GNUNET_SYSERR;
-    }
-    denom_pub->details.rsa_public_key
-      = GNUNET_CRYPTO_rsa_private_key_get_public (
-          denom_priv->details.rsa_private_key);
-    denom_priv->cipher = cipher;
-    denom_pub->cipher = cipher;
-    return GNUNET_OK;
-  // TODO: add case for Clause-Schnorr
-  default:
-    GNUNET_break (0);
-  }
-  return GNUNET_SYSERR;
+  memset (denom_priv,
+          0,
+          sizeof (*denom_priv));
+  va_start (ap,
+            cipher);
+  ret = GNUNET_CRYPTO_blind_sign_keys_create_va (
+    &denom_priv->bsign_priv_key,
+    &denom_pub->bsign_pub_key,
+    cipher,
+    ap);
+  va_end (ap);
+  return ret;
 }
 
 
 enum GNUNET_GenericReturnValue
 TALER_denom_sign_blinded (struct TALER_BlindedDenominationSignature *denom_sig,
                           const struct TALER_DenominationPrivateKey *denom_priv,
-                          void *blinded_msg,
-                          size_t blinded_msg_size)
+                          bool for_melt,
+                          const struct TALER_BlindedPlanchet *blinded_planchet)
 {
-  memset (denom_sig,
-          0,
-          sizeof (*denom_sig));
-  switch (denom_priv->cipher)
-  {
-  case TALER_DENOMINATION_INVALID:
-    GNUNET_break (0);
+  denom_sig->blinded_sig
+    = GNUNET_CRYPTO_blind_sign (denom_priv->bsign_priv_key,
+                                for_melt ? "rm" : "rw",
+                                blinded_planchet->blinded_message);
+  if (NULL == denom_sig->blinded_sig)
     return GNUNET_SYSERR;
-  case TALER_DENOMINATION_RSA:
-    denom_sig->details.blinded_rsa_signature
-      = GNUNET_CRYPTO_rsa_sign_blinded (
-          denom_priv->details.rsa_private_key,
-          blinded_msg,
-          blinded_msg_size);
-    if (NULL == denom_sig->details.blinded_rsa_signature)
-    {
-      GNUNET_break (0);
-      return GNUNET_SYSERR;
-    }
-    denom_sig->cipher = TALER_DENOMINATION_RSA;
-    return GNUNET_OK;
-  // TODO: add case for Clause-Schnorr
-  default:
-    GNUNET_break (0);
-  }
-  return GNUNET_SYSERR;
+  return GNUNET_OK;
 }
 
 
@@ -113,88 +69,52 @@ enum GNUNET_GenericReturnValue
 TALER_denom_sig_unblind (
   struct TALER_DenominationSignature *denom_sig,
   const struct TALER_BlindedDenominationSignature *bdenom_sig,
-  const union TALER_DenominationBlindingKeyP *bks,
+  const union GNUNET_CRYPTO_BlindingSecretP *bks,
+  const struct TALER_CoinPubHashP *c_hash,
+  const struct TALER_ExchangeWithdrawValues *alg_values,
   const struct TALER_DenominationPublicKey *denom_pub)
 {
-  if (bdenom_sig->cipher != denom_pub->cipher)
-  {
-    GNUNET_break (0);
-    return GNUNET_SYSERR;
-  }
-  switch (denom_pub->cipher)
+  denom_sig->unblinded_sig
+    = GNUNET_CRYPTO_blind_sig_unblind (bdenom_sig->blinded_sig,
+                                       bks,
+                                       c_hash,
+                                       sizeof (*c_hash),
+                                       alg_values->blinding_inputs,
+                                       denom_pub->bsign_pub_key);
+  if (NULL == denom_sig->unblinded_sig)
   {
-  case TALER_DENOMINATION_INVALID:
-    GNUNET_break (0);
+    GNUNET_break_op (0);
     return GNUNET_SYSERR;
-  case TALER_DENOMINATION_RSA:
-    denom_sig->details.rsa_signature
-      = GNUNET_CRYPTO_rsa_unblind (
-          bdenom_sig->details.blinded_rsa_signature,
-          &bks->rsa_bks,
-          denom_pub->details.rsa_public_key);
-    if (NULL == denom_sig->details.rsa_signature)
-    {
-      GNUNET_break (0);
-      return GNUNET_SYSERR;
-    }
-    denom_sig->cipher = TALER_DENOMINATION_RSA;
-    return GNUNET_OK;
-  // TODO: add case for Clause-Schnorr
-  default:
-    GNUNET_break (0);
   }
-  return GNUNET_SYSERR;
-}
-
-
-void
-TALER_blinding_secret_create (union TALER_DenominationBlindingKeyP *bs)
-{
-  GNUNET_CRYPTO_random_block (GNUNET_CRYPTO_QUALITY_NONCE,
-                              bs,
-                              sizeof (*bs));
-}
-
-
-/**
- * Hash @a rsa.
- *
- * @param rsa key to hash
- * @param[out] h_rsa where to write the result
- */
-void
-TALER_rsa_pub_hash (const struct GNUNET_CRYPTO_RsaPublicKey *rsa,
-                    struct TALER_RsaPubHashP *h_rsa)
-{
-  GNUNET_CRYPTO_rsa_public_key_hash (rsa,
-                                     &h_rsa->hash);
-
+  return GNUNET_OK;
 }
 
 
 void
 TALER_denom_pub_hash (const struct TALER_DenominationPublicKey *denom_pub,
-                      struct TALER_DenominationHash *denom_hash)
+                      struct TALER_DenominationHashP *denom_hash)
 {
+  struct GNUNET_CRYPTO_BlindSignPublicKey *bsp
+    = denom_pub->bsign_pub_key;
   uint32_t opt[2] = {
-    htonl (denom_pub->age_mask.mask),
-    htonl ((uint32_t) denom_pub->cipher)
+    htonl (denom_pub->age_mask.bits),
+    htonl ((uint32_t) bsp->cipher)
   };
-
   struct GNUNET_HashContext *hc;
+
   hc = GNUNET_CRYPTO_hash_context_start ();
   GNUNET_CRYPTO_hash_context_read (hc,
                                    opt,
                                    sizeof (opt));
-  switch (denom_pub->cipher)
+  switch (bsp->cipher)
   {
-  case TALER_DENOMINATION_RSA:
+  case GNUNET_CRYPTO_BSA_RSA:
     {
       void *buf;
       size_t blen;
 
       blen = GNUNET_CRYPTO_rsa_public_key_encode (
-        denom_pub->details.rsa_public_key,
+        bsp->details.rsa_public_key,
         &buf);
       GNUNET_CRYPTO_hash_context_read (hc,
                                        buf,
@@ -202,7 +122,11 @@ TALER_denom_pub_hash (const struct TALER_DenominationPublicKey *denom_pub,
       GNUNET_free (buf);
     }
     break;
-  // TODO: add case for Clause-Schnorr
+  case GNUNET_CRYPTO_BSA_CS:
+    GNUNET_CRYPTO_hash_context_read (hc,
+                                     &bsp->details.cs_public_key,
+                                     sizeof(bsp->details.cs_public_key));
+    break;
   default:
     GNUNET_assert (0);
   }
@@ -211,112 +135,65 @@ TALER_denom_pub_hash (const struct TALER_DenominationPublicKey *denom_pub,
 }
 
 
-void
-TALER_denom_priv_to_pub (const struct TALER_DenominationPrivateKey *denom_priv,
-                         const struct TALER_AgeMask age_mask,
-                         struct TALER_DenominationPublicKey *denom_pub)
+const struct TALER_ExchangeWithdrawValues *
+TALER_denom_ewv_rsa_singleton ()
 {
-  switch (denom_priv->cipher)
-  {
-  case TALER_DENOMINATION_RSA:
-    denom_pub->cipher = TALER_DENOMINATION_RSA;
-    denom_pub->age_mask = age_mask;
-    denom_pub->details.rsa_public_key
-      = GNUNET_CRYPTO_rsa_private_key_get_public (
-          denom_priv->details.rsa_private_key);
-    return;
-  // TODO: add case for Clause-Schnorr
-  default:
-    GNUNET_assert (0);
-  }
+  static struct GNUNET_CRYPTO_BlindingInputValues bi = {
+    .cipher = GNUNET_CRYPTO_BSA_RSA
+  };
+  static struct TALER_ExchangeWithdrawValues alg_values = {
+    .blinding_inputs = &bi
+  };
+  return &alg_values;
 }
 
 
 enum GNUNET_GenericReturnValue
-TALER_denom_blind (const struct TALER_DenominationPublicKey *dk,
-                   const union TALER_DenominationBlindingKeyP *coin_bks,
-                   const struct TALER_AgeHash *age_commitment_hash,
-                   const struct TALER_CoinSpendPublicKeyP *coin_pub,
-                   struct TALER_CoinPubHash *c_hash,
-                   void **coin_ev,
-                   size_t *coin_ev_size)
+TALER_denom_blind (
+  const struct TALER_DenominationPublicKey *dk,
+  const union GNUNET_CRYPTO_BlindingSecretP *coin_bks,
+  const union GNUNET_CRYPTO_BlindSessionNonce *nonce,
+  const struct TALER_AgeCommitmentHash *ach,
+  const struct TALER_CoinSpendPublicKeyP *coin_pub,
+  const struct TALER_ExchangeWithdrawValues *alg_values,
+  struct TALER_CoinPubHashP *c_hash,
+  struct TALER_BlindedPlanchet *blinded_planchet)
 {
-  switch (dk->cipher)
-  {
-  case TALER_DENOMINATION_RSA:
-    TALER_coin_pub_hash (coin_pub,
-                         age_commitment_hash,
-                         c_hash);
-    if (GNUNET_YES !=
-        GNUNET_CRYPTO_rsa_blind (&c_hash->hash,
-                                 &coin_bks->rsa_bks,
-                                 dk->details.rsa_public_key,
-                                 coin_ev,
-                                 coin_ev_size))
-    {
-      GNUNET_break (0);
-      return GNUNET_SYSERR;
-    }
-    return GNUNET_OK;
-  // TODO: add case for Clause-Schnorr
-  default:
-    GNUNET_break (0);
+  TALER_coin_pub_hash (coin_pub,
+                       ach,
+                       c_hash);
+  blinded_planchet->blinded_message
+    = GNUNET_CRYPTO_message_blind_to_sign (dk->bsign_pub_key,
+                                           coin_bks,
+                                           nonce,
+                                           c_hash,
+                                           sizeof (*c_hash),
+                                           alg_values->blinding_inputs);
+  if (NULL == blinded_planchet->blinded_message)
     return GNUNET_SYSERR;
-  }
+  return GNUNET_OK;
 }
 
 
 enum GNUNET_GenericReturnValue
 TALER_denom_pub_verify (const struct TALER_DenominationPublicKey *denom_pub,
                         const struct TALER_DenominationSignature *denom_sig,
-                        const struct TALER_CoinPubHash *c_hash)
+                        const struct TALER_CoinPubHashP *c_hash)
 {
-  if (denom_pub->cipher != denom_sig->cipher)
-  {
-    GNUNET_break (0);
-    return GNUNET_SYSERR;
-  }
-  switch (denom_pub->cipher)
-  {
-  case TALER_DENOMINATION_INVALID:
-    GNUNET_break (0);
-    return GNUNET_NO;
-  case TALER_DENOMINATION_RSA:
-    if (GNUNET_OK !=
-        GNUNET_CRYPTO_rsa_verify (&c_hash->hash,
-                                  denom_sig->details.rsa_signature,
-                                  denom_pub->details.rsa_public_key))
-    {
-      GNUNET_log (GNUNET_ERROR_TYPE_WARNING,
-                  "Coin signature is invalid\n");
-      return GNUNET_NO;
-    }
-    return GNUNET_YES;
-  // TODO: add case for Clause-Schnorr
-  default:
-    GNUNET_assert (0);
-  }
+  return GNUNET_CRYPTO_blind_sig_verify (denom_pub->bsign_pub_key,
+                                         denom_sig->unblinded_sig,
+                                         c_hash,
+                                         sizeof (*c_hash));
 }
 
 
 void
 TALER_denom_pub_free (struct TALER_DenominationPublicKey *denom_pub)
 {
-  switch (denom_pub->cipher)
+  if (NULL != denom_pub->bsign_pub_key)
   {
-  case TALER_DENOMINATION_INVALID:
-    return;
-  case TALER_DENOMINATION_RSA:
-    if (NULL != denom_pub->details.rsa_public_key)
-    {
-      GNUNET_CRYPTO_rsa_public_key_free (denom_pub->details.rsa_public_key);
-      denom_pub->details.rsa_public_key = NULL;
-    }
-    denom_pub->cipher = TALER_DENOMINATION_INVALID;
-    return;
-  // TODO: add case for Clause-Schnorr
-  default:
-    GNUNET_assert (0);
+    GNUNET_CRYPTO_blind_sign_pub_decref (denom_pub->bsign_pub_key);
+    denom_pub->bsign_pub_key = NULL;
   }
 }
 
@@ -324,21 +201,10 @@ TALER_denom_pub_free (struct TALER_DenominationPublicKey *denom_pub)
 void
 TALER_denom_priv_free (struct TALER_DenominationPrivateKey *denom_priv)
 {
-  switch (denom_priv->cipher)
+  if (NULL != denom_priv->bsign_priv_key)
   {
-  case TALER_DENOMINATION_INVALID:
-    return;
-  case TALER_DENOMINATION_RSA:
-    if (NULL != denom_priv->details.rsa_private_key)
-    {
-      GNUNET_CRYPTO_rsa_private_key_free (denom_priv->details.rsa_private_key);
-      denom_priv->details.rsa_private_key = NULL;
-    }
-    denom_priv->cipher = TALER_DENOMINATION_INVALID;
-    return;
-  // TODO: add case for Clause-Schnorr
-  default:
-    GNUNET_assert (0);
+    GNUNET_CRYPTO_blind_sign_priv_decref (denom_priv->bsign_priv_key);
+    denom_priv->bsign_priv_key = NULL;
   }
 }
 
@@ -346,21 +212,10 @@ TALER_denom_priv_free (struct TALER_DenominationPrivateKey *denom_priv)
 void
 TALER_denom_sig_free (struct TALER_DenominationSignature *denom_sig)
 {
-  switch (denom_sig->cipher)
+  if (NULL != denom_sig->unblinded_sig)
   {
-  case TALER_DENOMINATION_INVALID:
-    return;
-  case TALER_DENOMINATION_RSA:
-    if (NULL != denom_sig->details.rsa_signature)
-    {
-      GNUNET_CRYPTO_rsa_signature_free (denom_sig->details.rsa_signature);
-      denom_sig->details.rsa_signature = NULL;
-    }
-    denom_sig->cipher = TALER_DENOMINATION_INVALID;
-    return;
-  // TODO: add case for Clause-Schnorr
-  default:
-    GNUNET_assert (0);
+    GNUNET_CRYPTO_unblinded_sig_decref (denom_sig->unblinded_sig);
+    denom_sig->unblinded_sig = NULL;
   }
 }
 
@@ -369,92 +224,73 @@ void
 TALER_blinded_denom_sig_free (
   struct TALER_BlindedDenominationSignature *denom_sig)
 {
-  switch (denom_sig->cipher)
+  if (NULL != denom_sig->blinded_sig)
   {
-  case TALER_DENOMINATION_INVALID:
-    return;
-  case TALER_DENOMINATION_RSA:
-    if (NULL != denom_sig->details.blinded_rsa_signature)
-    {
-      GNUNET_CRYPTO_rsa_signature_free (
-        denom_sig->details.blinded_rsa_signature);
-      denom_sig->details.blinded_rsa_signature = NULL;
-    }
-    denom_sig->cipher = TALER_DENOMINATION_INVALID;
-    return;
-  // TODO: add case for Clause-Schnorr
-  default:
-    GNUNET_assert (0);
+    GNUNET_CRYPTO_blinded_sig_decref (denom_sig->blinded_sig);
+    denom_sig->blinded_sig = NULL;
   }
 }
 
 
-/**
- * Make a (deep) copy of the given @a denom_src to
- * @a denom_dst.
- *
- * @param[out] denom_dst target to copy to
- * @param denom_str public key to copy
- */
 void
-TALER_denom_pub_deep_copy (struct TALER_DenominationPublicKey *denom_dst,
-                           const struct TALER_DenominationPublicKey *denom_src)
+TALER_denom_ewv_free (struct TALER_ExchangeWithdrawValues *ewv)
 {
-  *denom_dst = *denom_src; /* shallow copy */
-  switch (denom_src->cipher)
+  if (ewv == TALER_denom_ewv_rsa_singleton ())
+    return;
+  if (ewv->blinding_inputs ==
+      TALER_denom_ewv_rsa_singleton ()->blinding_inputs)
   {
-  case TALER_DENOMINATION_RSA:
-    denom_dst->details.rsa_public_key
-      = GNUNET_CRYPTO_rsa_public_key_dup (
-          denom_src->details.rsa_public_key);
+    ewv->blinding_inputs = NULL;
     return;
-  // TODO: add case for Clause-Schnorr
-  default:
-    GNUNET_assert (0);
+  }
+  if (NULL != ewv->blinding_inputs)
+  {
+    GNUNET_CRYPTO_blinding_input_values_decref (ewv->blinding_inputs);
+    ewv->blinding_inputs = NULL;
   }
 }
 
 
 void
-TALER_denom_sig_deep_copy (struct TALER_DenominationSignature *denom_dst,
-                           const struct TALER_DenominationSignature *denom_src)
+TALER_denom_ewv_copy (struct TALER_ExchangeWithdrawValues *bi_dst,
+                      const struct TALER_ExchangeWithdrawValues *bi_src)
 {
-  *denom_dst = *denom_src; /* shallow copy */
-  switch (denom_src->cipher)
+  if (bi_src == TALER_denom_ewv_rsa_singleton ())
   {
-  case TALER_DENOMINATION_INVALID:
+    *bi_dst = *bi_src;
     return;
-  case TALER_DENOMINATION_RSA:
-    denom_dst->details.rsa_signature
-      = GNUNET_CRYPTO_rsa_signature_dup (
-          denom_src->details.rsa_signature);
-    return;
-  // TODO: add case for Clause-Schnorr
-  default:
-    GNUNET_assert (0);
   }
+  bi_dst->blinding_inputs
+    = GNUNET_CRYPTO_blinding_input_values_incref (bi_src->blinding_inputs);
+}
+
+
+void
+TALER_denom_pub_copy (struct TALER_DenominationPublicKey *denom_dst,
+                      const struct TALER_DenominationPublicKey *denom_src)
+{
+  denom_dst->age_mask = denom_src->age_mask;
+  denom_dst->bsign_pub_key
+    = GNUNET_CRYPTO_bsign_pub_incref (denom_src->bsign_pub_key);
 }
 
 
 void
-TALER_blinded_denom_sig_deep_copy (
+TALER_denom_sig_copy (struct TALER_DenominationSignature *denom_dst,
+                      const struct TALER_DenominationSignature *denom_src)
+{
+  denom_dst->unblinded_sig
+    = GNUNET_CRYPTO_ub_sig_incref (denom_src->unblinded_sig);
+}
+
+
+void
+TALER_blinded_denom_sig_copy (
   struct TALER_BlindedDenominationSignature *denom_dst,
   const struct TALER_BlindedDenominationSignature *denom_src)
 {
-  *denom_dst = *denom_src; /* shallow copy */
-  switch (denom_src->cipher)
-  {
-  case TALER_DENOMINATION_INVALID:
-    return;
-  case TALER_DENOMINATION_RSA:
-    denom_dst->details.blinded_rsa_signature
-      = GNUNET_CRYPTO_rsa_signature_dup (
-          denom_src->details.blinded_rsa_signature);
-    return;
-  // TODO: add case for Clause-Schnorr
-  default:
-    GNUNET_assert (0);
-  }
+  denom_dst->blinded_sig
+    = GNUNET_CRYPTO_blind_sig_incref (denom_src->blinded_sig);
 }
 
 
@@ -462,22 +298,14 @@ int
 TALER_denom_pub_cmp (const struct TALER_DenominationPublicKey *denom1,
                      const struct TALER_DenominationPublicKey *denom2)
 {
-  if (denom1->cipher != denom2->cipher)
-    return (denom1->cipher > denom2->cipher) ? 1 : -1;
-  if (denom1->age_mask.mask != denom2->age_mask.mask)
-    return (denom1->age_mask.mask > denom2->age_mask.mask) ? 1 : -1;
-  switch (denom1->cipher)
-  {
-  case TALER_DENOMINATION_INVALID:
-    return 0;
-  case TALER_DENOMINATION_RSA:
-    return GNUNET_CRYPTO_rsa_public_key_cmp (denom1->details.rsa_public_key,
-                                             denom2->details.rsa_public_key);
-  // TODO: add case for Clause-Schnorr
-  default:
-    GNUNET_assert (0);
-  }
-  return -2;
+  if (denom1->bsign_pub_key->cipher !=
+      denom2->bsign_pub_key->cipher)
+    return (denom1->bsign_pub_key->cipher >
+            denom2->bsign_pub_key->cipher) ? 1 : -1;
+  if (denom1->age_mask.bits != denom2->age_mask.bits)
+    return (denom1->age_mask.bits > denom2->age_mask.bits) ? 1 : -1;
+  return GNUNET_CRYPTO_bsign_pub_cmp (denom1->bsign_pub_key,
+                                      denom2->bsign_pub_key);
 }
 
 
@@ -485,20 +313,18 @@ int
 TALER_denom_sig_cmp (const struct TALER_DenominationSignature *sig1,
                      const struct TALER_DenominationSignature *sig2)
 {
-  if (sig1->cipher != sig2->cipher)
-    return (sig1->cipher > sig2->cipher) ? 1 : -1;
-  switch (sig1->cipher)
-  {
-  case TALER_DENOMINATION_INVALID:
-    return 0;
-  case TALER_DENOMINATION_RSA:
-    return GNUNET_CRYPTO_rsa_signature_cmp (sig1->details.rsa_signature,
-                                            sig2->details.rsa_signature);
-  // TODO: add case for Clause-Schnorr
-  default:
-    GNUNET_assert (0);
-  }
-  return -2;
+  return GNUNET_CRYPTO_ub_sig_cmp (sig1->unblinded_sig,
+                                   sig1->unblinded_sig);
+}
+
+
+int
+TALER_blinded_planchet_cmp (
+  const struct TALER_BlindedPlanchet *bp1,
+  const struct TALER_BlindedPlanchet *bp2)
+{
+  return GNUNET_CRYPTO_blinded_message_cmp (bp1->blinded_message,
+                                            bp2->blinded_message);
 }
 
 
@@ -507,20 +333,140 @@ TALER_blinded_denom_sig_cmp (
   const struct TALER_BlindedDenominationSignature *sig1,
   const struct TALER_BlindedDenominationSignature *sig2)
 {
-  if (sig1->cipher != sig2->cipher)
-    return (sig1->cipher > sig2->cipher) ? 1 : -1;
-  switch (sig1->cipher)
+  return GNUNET_CRYPTO_blind_sig_cmp (sig1->blinded_sig,
+                                      sig1->blinded_sig);
+}
+
+
+void
+TALER_blinded_planchet_hash_ (const struct TALER_BlindedPlanchet *bp,
+                              struct GNUNET_HashContext *hash_context)
+{
+  const struct GNUNET_CRYPTO_BlindedMessage *bm = bp->blinded_message;
+  uint32_t cipher = htonl (bm->cipher);
+
+  GNUNET_CRYPTO_hash_context_read (hash_context,
+                                   &cipher,
+                                   sizeof (cipher));
+  switch (bm->cipher)
   {
-  case TALER_DENOMINATION_INVALID:
-    return 0;
-  case TALER_DENOMINATION_RSA:
-    return GNUNET_CRYPTO_rsa_signature_cmp (sig1->details.blinded_rsa_signature,
-                                            sig2->details.blinded_rsa_signature);
-  // TODO: add case for Clause-Schnorr
-  default:
-    GNUNET_assert (0);
+  case GNUNET_CRYPTO_BSA_INVALID:
+    GNUNET_break (0);
+    return;
+  case GNUNET_CRYPTO_BSA_RSA:
+    GNUNET_CRYPTO_hash_context_read (
+      hash_context,
+      bm->details.rsa_blinded_message.blinded_msg,
+      bm->details.rsa_blinded_message.blinded_msg_size);
+    return;
+  case GNUNET_CRYPTO_BSA_CS:
+    GNUNET_CRYPTO_hash_context_read (
+      hash_context,
+      &bm->details.cs_blinded_message,
+      sizeof (bm->details.cs_blinded_message));
+    return;
+  }
+  GNUNET_assert (0);
+}
+
+
+void
+TALER_planchet_blinding_secret_create (
+  const struct TALER_PlanchetMasterSecretP *ps,
+  const struct TALER_ExchangeWithdrawValues *alg_values,
+  union GNUNET_CRYPTO_BlindingSecretP *bks)
+{
+  const struct GNUNET_CRYPTO_BlindingInputValues *bi =
+    alg_values->blinding_inputs;
+
+  switch (bi->cipher)
+  {
+  case GNUNET_CRYPTO_BSA_INVALID:
+    GNUNET_break (0);
+    return;
+  case GNUNET_CRYPTO_BSA_RSA:
+    GNUNET_assert (GNUNET_YES ==
+                   GNUNET_CRYPTO_kdf (&bks->rsa_bks,
+                                      sizeof (bks->rsa_bks),
+                                      "bks",
+                                      strlen ("bks"),
+                                      ps,
+                                      sizeof(*ps),
+                                      NULL,
+                                      0));
+    return;
+  case GNUNET_CRYPTO_BSA_CS:
+    GNUNET_assert (GNUNET_YES ==
+                   GNUNET_CRYPTO_kdf (&bks->nonce,
+                                      sizeof (bks->nonce),
+                                      "bseed",
+                                      strlen ("bseed"),
+                                      ps,
+                                      sizeof(*ps),
+                                      &bi->details.cs_values,
+                                      sizeof(bi->details.cs_values),
+                                      NULL,
+                                      0));
+    return;
+  }
+  GNUNET_assert (0);
+}
+
+
+void
+TALER_planchet_setup_coin_priv (
+  const struct TALER_PlanchetMasterSecretP *ps,
+  const struct TALER_ExchangeWithdrawValues *alg_values,
+  struct TALER_CoinSpendPrivateKeyP *coin_priv)
+{
+  const struct GNUNET_CRYPTO_BlindingInputValues *bi
+    = alg_values->blinding_inputs;
+
+  switch (bi->cipher)
+  {
+  case GNUNET_CRYPTO_BSA_INVALID:
+    GNUNET_break (0);
+    memset (coin_priv,
+            0,
+            sizeof (*coin_priv));
+    return;
+  case GNUNET_CRYPTO_BSA_RSA:
+    GNUNET_assert (GNUNET_YES ==
+                   GNUNET_CRYPTO_kdf (coin_priv,
+                                      sizeof (*coin_priv),
+                                      "coin",
+                                      strlen ("coin"),
+                                      ps,
+                                      sizeof(*ps),
+                                      NULL,
+                                      0));
+    return;
+  case GNUNET_CRYPTO_BSA_CS:
+    GNUNET_assert (GNUNET_YES ==
+                   GNUNET_CRYPTO_kdf (coin_priv,
+                                      sizeof (*coin_priv),
+                                      "coin",
+                                      strlen ("coin"),
+                                      ps,
+                                      sizeof(*ps),
+                                      &bi->details.cs_values,
+                                      sizeof(bi->details.cs_values),
+                                      NULL,
+                                      0));
+    return;
+  }
+  GNUNET_assert (0);
+}
+
+
+void
+TALER_blinded_planchet_free (struct TALER_BlindedPlanchet *blinded_planchet)
+{
+  if (NULL != blinded_planchet->blinded_message)
+  {
+    GNUNET_CRYPTO_blinded_message_decref (blinded_planchet->blinded_message);
+    blinded_planchet->blinded_message = NULL;
   }
-  return -2;
 }