code wiki / _hdl_build / nx_connect_keyx_vm_gate.nx

nx_connect_keyx_vm_gate.nx

buildroot/runtime/_hdl_build/nx_connect_keyx_vm_gate.nx

6762 B107 linesdepth 3pulls 4 transitivereach 0 importersview sourcekind gate/prooftopic connect
docsdependenciesstructsconstsfunctions

about

nx_connect_keyx_vm_gate.nx -- THE FULL-E2E KEY-AGREEMENT CROWN TOOTH: prove the Diffie-Hellman property on the EXACT wasm bytes the browsers run (web_assets/_video_build/nx_x25519.wasm), inside the sovereign nx_wasm_vm, against RFC 7748 section 6.1's complete Alice/Bob exchange: T2 X25519(alice_priv, 9) == alice_pub (keygen half, Alice) T3 X25519(bob_priv, 9) == bob_pub (keygen half, Bob) T4 X25519(alice_priv, bob_pub) == K (Alice derives the shared key) T5 X25519(bob_priv, alice_pub) == K and == T4 (Bob derives the SAME key = agreement) If GREEN, the two browsers in the CONNECT E2E client MUST agree on a conversation key without the server ever seeing a private key -- proven on the shipped artifact, not on a reimplementation. license_tier: ORIGINAL expect_exit: 0

dependencies 2 imports · 0 importers

nx_syscalls.nx nx_wasm_vm.nx nx_connect_keyx_vm_gate.nx

imports: nx_syscalls.nxnx_wasm_vm.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main g_puts sys_write sys_mmap sys_read_file sys_openat_rd sys_lseek sys_mmap ↻ sys_read sys_close sys_exit wm_new sys_mmap ↻ wm_parse sys_mmap ↻ wv_u8 wv_uleb wm_find_export wm_name_eq g_check g_puts ↻ kx_mult wm_run wm_find_export ↻ sys_mmap ↻ wm_call sys_mmap ↻ wv_u8 ↻ wm_memo_get wm_match_end sys_mmap ↻ sys_write ↻ sys_exit ↻ wv_u8 ↻ wm_skip_imm wv_u8 ↻ wv_uleb ↻ wv_sleb sys_munmap wm_memo_put

structs

none

consts

none

functions

14func g_puts(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
called by 2: g_checkmain calls 1: sys_write
15func g_pn(v: i64) -> i64
called by 1: main calls 2: sys_mmapsys_write
24func g_check(name: *u8, cond: i64) -> i64
called by 1: main calls 1: g_puts
30func kx_mult(mod: *WasmMod, scalar: *i64, point: *i64, res: *i64) -> i64
called by 1: main calls 1: wm_run
38func kx_eq(a: *i64, b: *i64) -> i64
called by 1: main
44func main() -> i64
calls 11: g_putssys_mmapsys_read_filesys_exitwm_newwm_parse+5