code wiki / _hdl_build / nx_fw_capsule_gate.nx
nx_fw_capsule_gate.nx
buildroot/runtime/_hdl_build/nx_fw_capsule_gate.nx
about
nx_fw_capsule_gate.nx -- proves the signed capsule = Secure-Boot-grade integrity.
T1 authentic-verifies : a capsule signed by the platform key -> cap_verify == 1
N1 corrupted-rejected : flip a payload byte (signature no longer matches)-> cap_verify == 0
N2 FORGED-rejected : signed with a DIFFERENT key (forgery) -> cap_verify == 0
N3 garbage-rejected : a too-short / non-capsule blob -> cap_verify == 0
N2 is the capability sha256 LACKS: a forger can recompute a hash, but cannot forge a signature
without the platform private key. GREEN only if all four hold. Evidence -> knowledge/status/fw_capsule_gate.log.
Sovereign: imports nx_fw_capsule (-> nx_ed25519) + nx_framed_append + nx_syscalls. license_tier: ORIGINAL
dependencies 3 imports · 0 importers
imports: nx_fw_capsule.nxnx_framed_append.nxnx_syscalls.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| 15 | const CGC_LOG: *u8 = "knowledge/status/fw_capsule_gate.log" |
| 16 | const CGC_PAY: *u8 = "NISHI-fw-capsule-gate-payload-image" |
functions
| 18 | func cgc_len(s: *u8) -> i64 { var i: i64 = 0; while s[i] != 0 as u8 { i = i + 1 } return i } called by 1: main |
| 19 | func cgc_row(name: *u8, pass: i64) -> i64 |
| 32 | func main() -> i64 |