code wiki / _hdl_build / nx_connect_keyx_vm_gate.nx
nx_connect_keyx_vm_gate.nx
buildroot/runtime/_hdl_build/nx_connect_keyx_vm_gate.nx
about
nx_connect_keyx_vm_gate.nx -- THE FULL-E2E KEY-AGREEMENT CROWN TOOTH: prove the Diffie-Hellman
property on the EXACT wasm bytes the browsers run (web_assets/_video_build/nx_x25519.wasm), inside the
sovereign nx_wasm_vm, against RFC 7748 section 6.1's complete Alice/Bob exchange:
T2 X25519(alice_priv, 9) == alice_pub (keygen half, Alice)
T3 X25519(bob_priv, 9) == bob_pub (keygen half, Bob)
T4 X25519(alice_priv, bob_pub) == K (Alice derives the shared key)
T5 X25519(bob_priv, alice_pub) == K and == T4 (Bob derives the SAME key = agreement)
If GREEN, the two browsers in the CONNECT E2E client MUST agree on a conversation key without the
server ever seeing a private key -- proven on the shipped artifact, not on a reimplementation.
license_tier: ORIGINAL expect_exit: 0
dependencies 3 imports · 0 importers
imports: nx_syscalls.nxnx_wasm_vm.nxnx_gate_verdict.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 15 | func g_puts(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } |
| 16 | func g_pn(v: i64) -> i64 |
| 25 | func g_check(name: *u8, cond: i64) -> i64 |
| 31 | func kx_mult(mod: *WasmMod, scalar: *i64, point: *i64, res: *i64) -> i64 called by 1: main |
| 39 | func kx_eq(a: *i64, b: *i64) -> i64 called by 1: main |
| 45 | func main() -> i64 |