Files
SirHumza--orbisRPC/orbisrpc/release_pubkey.h
T

23 lines
1.0 KiB
C

/* release_pubkey.h - embedded release-channel public key (P-256, raw X||Y).
*
* PRODUCTION KEY: generated 2026-09-25 with
* openssl ecparam -name prime256v1 -genkey -noout -out release_priv.pem
* The private key lives OFFLINE outside the repo (macOS host:
* ~/.config/orbisrpc/release_priv.pem) and must be backed up offline:
* losing it bricks the on-console updater; leaking it fakes releases.
* Sign manifest.json with scripts/make_manifest.py --priv release_priv.pem.
*/
#ifndef ORBISRPC_RELEASE_PUBKEY_H
#define ORBISRPC_RELEASE_PUBKEY_H
/* Uncompressed P-256 X || Y (64 bytes). */
static const unsigned char ORBISRPC_RELEASE_PUBKEY[64] = {
0xe7,0x31,0xa1,0x93,0x9f,0xe3,0x85,0x36,0x03,0xbf,0x3e,0xb1,0xf0,0xc0,0x55,0x80,
0x4e,0xa9,0x19,0xc5,0xca,0xe5,0xe8,0x5c,0x36,0xdc,0x0d,0x6f,0x7e,0x46,0x03,0xdb,
0x23,0x2b,0xb9,0x2e,0xb1,0x72,0xa8,0xc4,0x75,0x15,0x99,0x18,0x58,0x59,0xfe,0x8c,
0x4d,0x4f,0x31,0xee,0xa3,0xdd,0xfb,0x15,0xae,0x09,0xc3,0x34,0xee,0xf9,0x16,0x54
};
#define ORBISRPC_RELEASE_KEY_ID "prod-2026-09-25"
#endif