code wiki / _hdl_build / nx_cmos_signed_gate.nx

nx_cmos_signed_gate.nx

buildroot/runtime/_hdl_build/nx_cmos_signed_gate.nx

4670 B100 linesdepth 11pulls 17 transitivereach 0 importersview sourcekind gate/prooftopic cmos
docsdependenciesstructsconstsfunctions

about

nx_cmos_signed_gate.nx -- proves authenticated CMOS config recovery. T0 golden-capsule-verifies : a platform-signed CMOS golden capsule verifies T1 restore-authentic : restoring from the signed golden recovers a checksum-valid CMOS N1 tampered-golden-refused : a byte-tampered golden capsule -> restore REFUSED (signature fails) N2 forged-golden-refused : a golden signed by a DIFFERENT key -> restore REFUSED N3 signed-but-invalid-refused: a validly-signed capsule whose payload is a BAD CMOS -> REFUSED (defense-in-depth) GREEN only if all five hold. ed25519 signs minimized. Evidence -> knowledge/status/cmos_signed_gate.log. Sovereign: imports nx_cmos_signed (-> nx_cmos + nx_fw_capsule -> nx_ed25519) + nx_framed_append + nx_syscalls. license_tier: ORIGINAL

dependencies 3 imports · 0 importers

nx_cmos_signed.nx nx_framed_append.nx nx_syscalls.nx nx_cmos_signed_gate.nx

imports: nx_cmos_signed.nxnx_framed_append.nxnx_syscalls.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main sys_now_realtime_sec sys_mmap sys_clock_gettime_real sys_mmap ↻ cap_plat_seed cmos_golden cmos_fix cmos_cksum cmos_corrupt_raw cmos_golden_capsule cap_make sys_mmap ↻ cp_wr_u32 ed25519_sign_full sys_mmap ↻ ed25519_sha512 sys_mmap ↻ sha512_init sha512_update sha512_blk_set_byte sha512_compress sha512_final sha512_blk_set_byte ↻ sha512_compress ↻ ge_p3_alloc sys_mmap ↻ fe_alloc nx_scratch fe_zero ed25519_basepoint_p3 sys_mmap ↻ ge_p3_decompress sys_mmap ↻ fe_from_bytes fe_alloc ↻ fe_sq fe_one fe_sub ed25519_d_fe

structs

none

consts

15const CSG_LOG: *u8 = "knowledge/status/cmos_signed_gate.log"

functions

17func cs_copy(src: *u8, dst: *u8) -> i64
called by 1: main calls 2: sys_mmapcp_write
24func csg_row(name: *u8, pass: i64) -> i64
called by 1: main calls 2: sys_mmapfa_appendz
37func main() -> i64
calls 13: sys_now_realtime_secsys_mmapcap_plat_seedcmos_goldencmos_corrupt_rawcmos_golden_capsule+7