Adding unit tests and making code more idiomatic go

cmd/keys/generate_keys.go

···
 	DIDKey     string `json:"didKey"`
 }
 
-func main() {
-	// Generate a new P-256 key pair
+// GenerateKeyPair creates a new P-256 key pair
+func GenerateKeyPair() (*KeyPair, error) {
 	privateKey, err := crypto.GeneratePrivateKeyP256()
 	if err != nil {
-		log.Fatalf("Failed to generate private key: %v", err)
+		return nil, fmt.Errorf("failed to generate private key: %v", err)
 	}
 
-	// Get the public key
 	publicKey, err := privateKey.PublicKey()
 	if err != nil {
-		log.Fatalf("Failed to get public key: %v", err)
+		return nil, fmt.Errorf("failed to get public key: %v", err)
 	}
 
-	// Create a key pair object
-	keyPair := KeyPair{
+	return &KeyPair{
 		PrivateKey: privateKey.Multibase(),
 		PublicKey:  publicKey.Multibase(),
 		DIDKey:     publicKey.DIDKey(),
-	}
+	}, nil
+}
 
-	// Print the keys
-	fmt.Println("Private Key (Multibase):", keyPair.PrivateKey)
-	fmt.Println("Public Key (Multibase):", keyPair.PublicKey)
-	fmt.Println("Public Key (DID):", keyPair.DIDKey)
-
-	// Create a directory for the keys if it doesn't exist
-	keysDir := "keys"
-	if err := os.MkdirAll(keysDir, 0755); err != nil {
-		log.Fatalf("Failed to create keys directory: %v", err)
+// SaveKeyPair saves a key pair to a file
+func SaveKeyPair(keyPair *KeyPair, dir string) error {
+	if err := os.MkdirAll(dir, 0755); err != nil {
+		return fmt.Errorf("failed to create directory: %v", err)
 	}
 
-	// Save the key pair to a file
 	keyPairJSON, err := json.MarshalIndent(keyPair, "", "  ")
 	if err != nil {
-		log.Fatalf("Failed to marshal key pair: %v", err)
+		return fmt.Errorf("failed to marshal key pair: %v", err)
 	}
 
-	keyPairPath := filepath.Join(keysDir, "keypair.json")
+	keyPairPath := filepath.Join(dir, "keypair.json")
 	if err := os.WriteFile(keyPairPath, keyPairJSON, 0644); err != nil {
-		log.Fatalf("Failed to write key pair: %v", err)
+		return fmt.Errorf("failed to write key pair: %v", err)
 	}
 
-	fmt.Printf("Key pair saved to %s\n", keyPairPath)
+	return nil
+}
 
+// LoadAndVerifyKeyPair loads a key pair from a file and verifies it
+func LoadAndVerifyKeyPair(keyPair *KeyPair) error {
 	// Demonstrate loading a private key from a multibase string
 	loadedPrivateKey, err := crypto.ParsePrivateMultibase(keyPair.PrivateKey)
 	if err != nil {
-		log.Fatalf("Failed to parse private key: %v", err)
+		return fmt.Errorf("failed to parse private key: %v", err)
 	}
 
 	// Get the public key from the loaded private key
 	loadedPublicKey, err := loadedPrivateKey.PublicKey()
 	if err != nil {
-		log.Fatalf("Failed to get public key from loaded private key: %v", err)
+		return fmt.Errorf("failed to get public key from loaded private key: %v", err)
 	}
 
 	// Verify that the loaded public key matches the original
 	if loadedPublicKey.Multibase() != keyPair.PublicKey {
-		log.Fatalf("Loaded public key does not match original")
+		return fmt.Errorf("loaded public key does not match original")
 	}
 
-	fmt.Println("Successfully loaded private key and verified public key")
-
 	// Demonstrate loading a public key from a DID key string
 	loadedPublicKeyFromDID, err := crypto.ParsePublicDIDKey(keyPair.DIDKey)
 	if err != nil {
-		log.Fatalf("Failed to parse public key from DID: %v", err)
+		return fmt.Errorf("failed to parse public key from DID: %v", err)
 	}
 
 	// Verify that the loaded public key matches the original
 	if loadedPublicKeyFromDID.Multibase() != keyPair.PublicKey {
-		log.Fatalf("Loaded public key from DID does not match original")
+		return fmt.Errorf("loaded public key from DID does not match original")
 	}
 
-	fmt.Println("Successfully loaded public key from DID")
+	return nil
+}
+
+func main() {
+	// Generate a new key pair
+	keyPair, err := GenerateKeyPair()
+	if err != nil {
+		log.Fatalf("Failed to generate key pair: %v", err)
+	}
+
+	// Print the keys
+	fmt.Println("Private Key (Multibase):", keyPair.PrivateKey)
+	fmt.Println("Public Key (Multibase):", keyPair.PublicKey)
+	fmt.Println("Public Key (DID):", keyPair.DIDKey)
+
+	// Save the key pair to a file
+	if err := SaveKeyPair(keyPair, "keys"); err != nil {
+		log.Fatalf("Failed to save key pair: %v", err)
+	}
+
+	fmt.Printf("Key pair saved to keys/keypair.json\n")
+
+	// Verify the key pair
+	if err := LoadAndVerifyKeyPair(keyPair); err != nil {
+		log.Fatalf("Failed to verify key pair: %v", err)
+	}
+
+	fmt.Println("Successfully verified key pair")
 }

cmd/keys/generate_keys_test.go

···
+package main
+
+import (
+	"encoding/json"
+	"os"
+	"path/filepath"
+	"testing"
+)
+
+func TestGenerateKeyPair(t *testing.T) {
+	keyPair, err := GenerateKeyPair()
+	if err != nil {
+		t.Fatalf("Failed to generate key pair: %v", err)
+	}
+
+	// Test that all fields are non-empty
+	if keyPair.PrivateKey == "" {
+		t.Error("PrivateKey is empty")
+	}
+	if keyPair.PublicKey == "" {
+		t.Error("PublicKey is empty")
+	}
+	if keyPair.DIDKey == "" {
+		t.Error("DIDKey is empty")
+	}
+
+	// Test JSON marshaling
+	keyPairJSON, err := json.Marshal(keyPair)
+	if err != nil {
+		t.Fatalf("Failed to marshal key pair: %v", err)
+	}
+
+	// Test JSON unmarshaling
+	var unmarshaledKeyPair KeyPair
+	if err := json.Unmarshal(keyPairJSON, &unmarshaledKeyPair); err != nil {
+		t.Fatalf("Failed to unmarshal key pair: %v", err)
+	}
+
+	// Verify unmarshaled values match original
+	if unmarshaledKeyPair.PrivateKey != keyPair.PrivateKey {
+		t.Error("Unmarshaled PrivateKey does not match original")
+	}
+	if unmarshaledKeyPair.PublicKey != keyPair.PublicKey {
+		t.Error("Unmarshaled PublicKey does not match original")
+	}
+	if unmarshaledKeyPair.DIDKey != keyPair.DIDKey {
+		t.Error("Unmarshaled DIDKey does not match original")
+	}
+}
+
+func TestSaveKeyPair(t *testing.T) {
+	// Generate key pair
+	keyPair, err := GenerateKeyPair()
+	if err != nil {
+		t.Fatalf("Failed to generate key pair: %v", err)
+	}
+
+	// Create temporary directory for test
+	tempDir := t.TempDir()
+	keysDir := filepath.Join(tempDir, "keys")
+
+	// Save key pair
+	if err := SaveKeyPair(keyPair, keysDir); err != nil {
+		t.Fatalf("Failed to save key pair: %v", err)
+	}
+
+	// Verify file exists
+	keyPairPath := filepath.Join(keysDir, "keypair.json")
+	if _, err := os.Stat(keyPairPath); os.IsNotExist(err) {
+		t.Fatalf("Key pair file was not created")
+	}
+
+	// Read and verify the saved file
+	readJSON, err := os.ReadFile(keyPairPath)
+	if err != nil {
+		t.Fatalf("Failed to read key pair file: %v", err)
+	}
+
+	var readKeyPair KeyPair
+	if err := json.Unmarshal(readJSON, &readKeyPair); err != nil {
+		t.Fatalf("Failed to unmarshal read key pair: %v", err)
+	}
+
+	// Verify read values match original
+	if readKeyPair.PrivateKey != keyPair.PrivateKey {
+		t.Error("Read PrivateKey does not match original")
+	}
+	if readKeyPair.PublicKey != keyPair.PublicKey {
+		t.Error("Read PublicKey does not match original")
+	}
+	if readKeyPair.DIDKey != keyPair.DIDKey {
+		t.Error("Read DIDKey does not match original")
+	}
+}
+
+func TestLoadAndVerifyKeyPair(t *testing.T) {
+	// Generate key pair
+	keyPair, err := GenerateKeyPair()
+	if err != nil {
+		t.Fatalf("Failed to generate key pair: %v", err)
+	}
+
+	// Test verification
+	if err := LoadAndVerifyKeyPair(keyPair); err != nil {
+		t.Fatalf("Failed to verify key pair: %v", err)
+	}
+
+	// Test with invalid private key
+	invalidKeyPair := *keyPair
+	invalidKeyPair.PrivateKey = "invalid"
+	if err := LoadAndVerifyKeyPair(&invalidKeyPair); err == nil {
+		t.Error("Expected error with invalid private key, got nil")
+	}
+
+	// Test with invalid DID key
+	invalidKeyPair = *keyPair
+	invalidKeyPair.DIDKey = "invalid"
+	if err := LoadAndVerifyKeyPair(&invalidKeyPair); err == nil {
+		t.Error("Expected error with invalid DID key, got nil")
+	}
+}

cmd/verify/sign_verify.go

···
+package main
+
+import (
+	"encoding/base64"
+	"encoding/json"
+	"fmt"
+
+	"github.com/bluesky-social/indigo/atproto/crypto"
+)
+
+// LexiconRecord represents a simple lexicon record that we want to sign
+type LexiconRecord struct {
+	Type      string `json:"$type"`
+	Text      string `json:"text"`
+	CreatedAt string `json:"createdAt"`
+	Author    string `json:"author"`
+	Signature string `json:"signature,omitempty"`
+}
+
+// UnsignedBytes returns the bytes of the record without the signature field
+func (r *LexiconRecord) UnsignedBytes() ([]byte, error) {
+	// Create a copy of the record
+	recordCopy := *r
+	recordCopy.Signature = ""
+
+	return json.Marshal(&recordCopy)
+}
+
+// Sign signs the record using the provided private key
+func (r *LexiconRecord) Sign(privateKey crypto.PrivateKey) error {
+	if privateKey == nil {
+		return fmt.Errorf("private key cannot be nil")
+	}
+	bytes, err := r.UnsignedBytes()
+	if err != nil {
+		return err
+	}
+	signature, err := privateKey.HashAndSign(bytes)
+	if err != nil {
+		return err
+	}
+	r.Signature = base64.RawStdEncoding.EncodeToString(signature)
+	return nil
+}
+
+// VerifySignature verifies the record's signature using the provided public key
+func (r *LexiconRecord) VerifySignature(publicKey crypto.PublicKey) error {
+	if publicKey == nil {
+		return fmt.Errorf("public key cannot be nil")
+	}
+	if r.Signature == "" {
+		return fmt.Errorf("cannot verify unsigned record")
+	}
+	bytes, err := r.UnsignedBytes()
+	if err != nil {
+		return err
+	}
+	signature, err := base64.RawStdEncoding.DecodeString(r.Signature)
+	if err != nil {
+		return err
+	}
+	return publicKey.HashAndVerify(bytes, signature)
+}

cmd/verify/sign_verify_test.go

···
+package main
+
+import (
+	"log"
+	"testing"
+
+	"github.com/bluesky-social/indigo/atproto/crypto"
+	"github.com/stretchr/testify/assert"
+)
+
+func generateKeys() (crypto.PublicKey, *crypto.PrivateKeyP256) {
+	// Generate a new private key (or load an existing one)
+	// For demonstration, we'll generate a new P-256 key
+	privateKey, err := crypto.GeneratePrivateKeyP256()
+	if err != nil {
+		log.Fatalf("Failed to generate private key: %v", err)
+	}
+
+	// Get the public key for verification
+	publicKey, err := privateKey.PublicKey()
+	if err != nil {
+		log.Fatalf("Failed to get public key: %v", err)
+	}
+
+	return publicKey, privateKey
+}
+
+func TestBrokenRecord(t *testing.T) {
+	publicKey, _ := generateKeys()
+
+	record := LexiconRecord{
+		Type:      "app.bsky.feed.post",
+		Text:      "This is a post with a hardcoded signature - DO NOT TRUST THIS!",
+		CreatedAt: "2023-04-10T12:00:00Z",
+		Author:    "did:plc:example123",
+		Signature: "THIS_IS_A_TERRIBLE_IDEA",
+	}
+
+	err := record.VerifySignature(publicKey)
+	assert.Error(t, err, "verification should fail with invalid signature")
+}
+
+func TestLexiconRecordSignAndVerify(t *testing.T) {
+	publicKey, privateKey := generateKeys()
+
+	record := LexiconRecord{
+		Type:      "app.bsky.feed.post",
+		Text:      "Hello, AT Protocol! This is a signed lexicon record.",
+		CreatedAt: "2023-04-10T12:00:00Z",
+		Author:    "did:plc:example123",
+	}
+
+	// Sign the record
+	signErr := record.Sign(privateKey)
+	assert.NoError(t, signErr, "should sign record without error")
+
+	// Verify the signature
+	verifyErr := record.VerifySignature(publicKey)
+	assert.NoError(t, verifyErr, "should verify signature without error")
+}
+
+// TestUnsignedRecord verifies that attempting to verify an unsigned record returns an error
+func TestUnsignedRecord(t *testing.T) {
+	publicKey, _ := generateKeys()
+
+	record := LexiconRecord{
+		Type:      "app.bsky.feed.post",
+		Text:      "This is an unsigned record",
+		CreatedAt: "2023-04-10T12:00:00Z",
+		Author:    "did:plc:example123",
+		// Signature is intentionally omitted
+	}
+
+	err := record.VerifySignature(publicKey)
+	assert.Error(t, err, "verification should fail for unsigned record")
+	assert.Contains(t, err.Error(), "cannot verify unsigned record")
+}
+
+// TestInvalidBase64Signature verifies that attempting to verify a record with invalid base64 signature returns an error
+func TestInvalidBase64Signature(t *testing.T) {
+	publicKey, _ := generateKeys()
+
+	record := LexiconRecord{
+		Type:      "app.bsky.feed.post",
+		Text:      "This is a record with invalid base64 signature",
+		CreatedAt: "2023-04-10T12:00:00Z",
+		Author:    "did:plc:example123",
+		Signature: "not-valid-base64!@#$%", // Invalid base64 string
+	}
+
+	err := record.VerifySignature(publicKey)
+	assert.Error(t, err, "verification should fail for invalid base64 signature")
+}
+
+// TestSignWithNilPrivateKey verifies that attempting to sign with a nil private key returns an error
+func TestSignWithNilPrivateKey(t *testing.T) {
+	record := LexiconRecord{
+		Type:      "app.bsky.feed.post",
+		Text:      "This is a record that should fail to sign",
+		CreatedAt: "2023-04-10T12:00:00Z",
+		Author:    "did:plc:example123",
+	}
+
+	err := record.Sign(nil)
+	assert.Error(t, err, "signing should fail with nil private key")
+}
+
+// TestVerifyWithNilPublicKey verifies that attempting to verify with a nil public key returns an error
+func TestVerifyWithNilPublicKey(t *testing.T) {
+	_, privateKey := generateKeys()
+
+	record := LexiconRecord{
+		Type:      "app.bsky.feed.post",
+		Text:      "This is a record that should fail to verify",
+		CreatedAt: "2023-04-10T12:00:00Z",
+		Author:    "did:plc:example123",
+	}
+
+	// First sign the record
+	err := record.Sign(privateKey)
+	assert.NoError(t, err, "should sign record without error")
+
+	// Then try to verify with nil public key
+	err = record.VerifySignature(nil)
+	assert.Error(t, err, "verification should fail with nil public key")
+}

go.mod

···
 
 require (
 	github.com/bluesky-social/indigo v0.0.0-20250410071450-15337ff3600d
-	github.com/mr-tron/base58 v1.2.0
-	github.com/stretchr/testify v1.9.0
-	gitlab.com/yawning/secp256k1-voi v0.0.0-20230925100816-f2616030848b
-	golang.org/x/crypto v0.21.0
+	github.com/stretchr/testify v1.10.0
 )
 
 require (
+	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/mr-tron/base58 v1.2.0 // indirect
+	github.com/pmezard/go-difflib v1.0.0 // indirect
+	gitlab.com/yawning/secp256k1-voi v0.0.0-20230925100816-f2616030848b // indirect
 	gitlab.com/yawning/tuplehash v0.0.0-20230713102510-df83abbf9a02 // indirect
+	golang.org/x/crypto v0.21.0 // indirect
 	golang.org/x/sys v0.22.0 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
 )

go.sum

···
 github.com/bluesky-social/indigo v0.0.0-20250410071450-15337ff3600d h1:gFSxEaFD8okEyKDhVf9kvBcutaCV7NV9D1fL4atxvmk=
 github.com/bluesky-social/indigo v0.0.0-20250410071450-15337ff3600d/go.mod h1:yjdhLA1LkK8VDS/WPUoYPo25/Hq/8rX38Ftr67EsqKY=
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/mr-tron/base58 v1.2.0 h1:T/HDJBh4ZCPbU39/+c3rRvE0uKBQlU27+QI8LJ4t64o=
 github.com/mr-tron/base58 v1.2.0/go.mod h1:BinMc/sQntlIE1frQmRFPUoPA1Zkr8VRgBdjWI2mNwc=
-github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
-github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
+github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
 gitlab.com/yawning/secp256k1-voi v0.0.0-20230925100816-f2616030848b h1:CzigHMRySiX3drau9C6Q5CAbNIApmLdat5jPMqChvDA=
 gitlab.com/yawning/secp256k1-voi v0.0.0-20230925100816-f2616030848b/go.mod h1:/y/V339mxv2sZmYYR64O07VuCpdNZqCTwO8ZcouTMI8=
 gitlab.com/yawning/tuplehash v0.0.0-20230713102510-df83abbf9a02 h1:qwDnMxjkyLmAFgcfgTnfJrmYKWhHnci3GjDqcZp1M3Q=
 gitlab.com/yawning/tuplehash v0.0.0-20230713102510-df83abbf9a02/go.mod h1:JTnUj0mpYiAsuZLmKjTx/ex3AtMowcCgnE7YNyCEP0I=
-golang.org/x/crypto v0.17.0 h1:r8bRNjWL3GshPW3gkd+RpvzWrZAwPS49OmTGZ/uhM4k=
-golang.org/x/crypto v0.17.0/go.mod h1:gCAAfMLgwOJRpTjQ2zCCt2OcSfYMTeZVSRtQlPC7Nq4=
 golang.org/x/crypto v0.21.0 h1:X31++rzVUdKhX5sWmSOFZxx8UW/ldWx55cbf08iNAMA=
 golang.org/x/crypto v0.21.0/go.mod h1:0BP7YvVV9gBbVKyeTG0Gyn+gZm94bibOW5BjDEYAOMs=
-golang.org/x/sys v0.15.0 h1:h48lPFYpsTvQJZF4EKyI4aLHaev3CxivZmv7yZig9pc=
-golang.org/x/sys v0.15.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.22.0 h1:RI27ohtqKCnwULzJLqkv897zojh5/DwS/ENaMzUOaWI=
 golang.org/x/sys v0.22.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=

sign_verify.go

···
-package main
-
-import (
-	"encoding/base64"
-	"encoding/json"
-	"fmt"
-	"log"
-
-	"github.com/bluesky-social/indigo/atproto/crypto"
-)
-
-// LexiconRecord represents a simple lexicon record that we want to sign
-type LexiconRecord struct {
-	Type      string `json:"$type"`
-	Text      string `json:"text"`
-	CreatedAt string `json:"createdAt"`
-	Author    string `json:"author"`
-	Signature string `json:"signature,omitempty"`
-}
-
-// UnsignedBytes returns the bytes of the record without the signature field
-func (r *LexiconRecord) UnsignedBytes() ([]byte, error) {
-	// Store the signature temporarily
-	sig := r.Signature
-	// Clear the signature
-	r.Signature = ""
-	// Marshal the record
-	bytes, err := json.Marshal(r)
-	// Restore the signature
-	r.Signature = sig
-	return bytes, err
-}
-
-// Sign signs the record using the provided private key
-func (r *LexiconRecord) Sign(privateKey crypto.PrivateKey) error {
-	bytes, err := r.UnsignedBytes()
-	if err != nil {
-		return err
-	}
-	signature, err := privateKey.HashAndSign(bytes)
-	if err != nil {
-		return err
-	}
-	r.Signature = base64.RawStdEncoding.EncodeToString(signature)
-	return nil
-}
-
-// VerifySignature verifies the record's signature using the provided public key
-func (r *LexiconRecord) VerifySignature(publicKey crypto.PublicKey) error {
-	if r.Signature == "" {
-		return fmt.Errorf("cannot verify unsigned record")
-	}
-	bytes, err := r.UnsignedBytes()
-	if err != nil {
-		return err
-	}
-	signature, err := base64.RawStdEncoding.DecodeString(r.Signature)
-	if err != nil {
-		return err
-	}
-	return publicKey.HashAndVerify(bytes, signature)
-}
-
-func testWorkingRecord(privateKey crypto.PrivateKey, publicKey crypto.PublicKey) {
-	fmt.Println("\n=== Testing Working Record ===")
-
-	// Create a lexicon record
-	record := LexiconRecord{
-		Type:      "app.bsky.feed.post",
-		Text:      "Hello, AT Protocol! This is a signed lexicon record.",
-		CreatedAt: "2023-04-10T12:00:00Z",
-		Author:    "did:plc:example123",
-	}
-
-	// Sign the record
-	if err := record.Sign(privateKey); err != nil {
-		log.Fatalf("Failed to sign record: %v", err)
-	}
-
-	// Verify the signature
-	if err := record.VerifySignature(publicKey); err != nil {
-		log.Fatalf("Signature verification failed: %v", err)
-	}
-
-	fmt.Println("Successfully verified signature!")
-}
-
-func testBrokenRecord(publicKey crypto.PublicKey) {
-	fmt.Println("\n=== Testing Broken Record ===")
-
-	// Create a record with a hardcoded signature
-	record := LexiconRecord{
-		Type:      "app.bsky.feed.post",
-		Text:      "This is a post with a hardcoded signature - DO NOT TRUST THIS!",
-		Signature: "THIS_IS_A_TERRIBLE_IDEA",
-	}
-
-	// Try to verify the record with the hardcoded signature
-	if err := record.VerifySignature(publicKey); err != nil {
-		fmt.Printf("Expected verification failure: %v\n", err)
-	} else {
-		fmt.Println("WARNING: Hardcoded signature was verified!")
-	}
-}
-
-func main() {
-	// Generate a new private key (or load an existing one)
-	// For demonstration, we'll generate a new P-256 key
-	privateKey, err := crypto.GeneratePrivateKeyP256()
-	if err != nil {
-		log.Fatalf("Failed to generate private key: %v", err)
-	}
-
-	// Get the public key for verification
-	publicKey, err := privateKey.PublicKey()
-	if err != nil {
-		log.Fatalf("Failed to get public key: %v", err)
-	}
-
-	// Print the public key in DID format for reference
-	fmt.Printf("Public Key (DID): %s\n", publicKey.DIDKey())
-	fmt.Printf("Public Key (Multibase): %s\n", publicKey.Multibase())
-
-	// Run the tests
-	testWorkingRecord(privateKey, publicKey)
-	testBrokenRecord(publicKey)
-}