Add federated keyless public key implementation

Aptos/Aptos.Crypto/FederatedKeyless.cs

@@ -0,0 +1,93 @@
+namespace Aptos;
+
+using System.Numerics;
+using Aptos.Poseidon;
+using Microsoft.IdentityModel.JsonWebTokens;
+
+public class FederatedKeylessPublicKey : PublicKey
+{
+    private readonly AccountAddress JwkAddress;
+
+    public readonly KeylessPublicKey KeylessPublicKey;
+
+    public override Hex Value => Hex.FromHexInput(BcsToBytes());
+
+    public FederatedKeylessPublicKey(
+        string iss,
+        string uidKey,
+        string uidVal,
+        string aud,
+        string pepper,
+        AccountAddress jwkAddress
+    )
+        : this(iss, Keyless.ComputeIdCommitment(uidKey, uidVal, aud, pepper), jwkAddress) { }
+
+    public FederatedKeylessPublicKey(
+        string iss,
+        string uidKey,
+        string uidVal,
+        string aud,
+        byte[] pepper,
+        AccountAddress jwkAddress
+    )
+        : this(iss, Keyless.ComputeIdCommitment(uidKey, uidVal, aud, pepper), jwkAddress) { }
+
+    public FederatedKeylessPublicKey(string iss, string idCommitment, AccountAddress jwkAddress)
+        : this(iss, Hex.FromHexInput(idCommitment).ToByteArray(), jwkAddress) { }
+
+    public FederatedKeylessPublicKey(string iss, byte[] idCommitment, AccountAddress jwkAddress)
+        : this(new KeylessPublicKey(iss, idCommitment), jwkAddress) { }
+
+    public FederatedKeylessPublicKey(KeylessPublicKey keylessPublicKey, AccountAddress jwkAddress)
+        : base(PublicKeyVariant.FederatedKeyless)
+    {
+        JwkAddress = jwkAddress;
+        KeylessPublicKey = keylessPublicKey;
+    }
+
+    public override bool VerifySignature(byte[] message, Signature signature) =>
+        signature is KeylessSignature keylessSignature
+        && keylessSignature.EphemeralPublicKey.VerifySignature(
+            message,
+            keylessSignature.EphemeralSignature.Signature
+        );
+
+    public override byte[] ToByteArray() => BcsToBytes();
+
+    public override void Serialize(Serializer s)
+    {
+        JwkAddress.Serialize(s);
+        KeylessPublicKey.Serialize(s);
+    }
+
+    public static new FederatedKeylessPublicKey Deserialize(Deserializer d)
+    {
+        AccountAddress jwkAddress = AccountAddress.Deserialize(d);
+        KeylessPublicKey keylessPublicKey = KeylessPublicKey.Deserialize(d);
+        return new FederatedKeylessPublicKey(keylessPublicKey, jwkAddress);
+    }
+
+    public static FederatedKeylessPublicKey FromJwt(
+        string jwt,
+        string pepper,
+        AccountAddress jwkAddress,
+        string uidKey = "sub"
+    ) =>
+        new(
+            new JsonWebToken(jwt).Issuer,
+            Keyless.ComputeIdCommitment(jwt, pepper, uidKey),
+            jwkAddress
+        );
+
+    public static FederatedKeylessPublicKey FromJwt(
+        string jwt,
+        byte[] pepper,
+        AccountAddress jwkAddress,
+        string uidKey = "sub"
+    ) =>
+        new(
+            new JsonWebToken(jwt).Issuer,
+            Keyless.ComputeIdCommitment(jwt, pepper, uidKey),
+            jwkAddress
+        );
+}

Aptos/Aptos.Crypto/PublicKey.cs

@@ -19,6 +19,9 @@ public enum PublicKeyVariant : uint
 
     [EnumMember(Value = "keyless")]
     Keyless,
+
+    [EnumMember(Value = "federated_keyless")]
+    FederatedKeyless,
 }
 
 [JsonConverter(typeof(PublicKeyConverter))]
@@ -45,6 +48,7 @@ public static PublicKey Deserialize(Deserializer d)
             PublicKeyVariant.Ed25519 => new Ed25519PublicKey(d.Bytes()),
             PublicKeyVariant.Secp256k1Ecdsa => new Secp256k1PublicKey(d.Bytes()),
             PublicKeyVariant.Keyless => KeylessPublicKey.Deserialize(d),
+            PublicKeyVariant.FederatedKeyless => FederatedKeylessPublicKey.Deserialize(d),
             _ => throw new ArgumentException("Invalid public key variant"),
         };
     }

Aptos/Aptos.Transactions/TransactionBuilder.cs

@@ -24,6 +24,14 @@ public static AccountAuthenticator GetAuthenticatorForSimulation(PublicKey publi
             );
         }
 
+        if (publicKey is FederatedKeylessPublicKey federatedKeylessPublicKey)
+        {
+            return new AccountAuthenticatorSingleKey(
+                federatedKeylessPublicKey,
+                Keyless.GetSimulationSignature()
+            );
+        }
+
         return new AccountAuthenticatorSingleKey(publicKey, invalidSignature);
     }