code wiki / _hdl_build / nx_fw_uefi_capsule_gate.nx
nx_fw_uefi_capsule_gate.nx
buildroot/runtime/_hdl_build/nx_fw_uefi_capsule_gate.nx
about
nx_fw_uefi_capsule_gate.nx -- proves the real-EFI-header signed capsule.
T1 authentic-verifies : a platform-signed UEFI capsule verifies
T2 valid-EFI-header : it is a well-formed EFI_CAPSULE_HEADER (Nishi GUID, HeaderSize==28, CapsuleImageSize==total)
N1 corrupted-rejected : flip a payload byte -> verify == 0
N2 forged-rejected : signed with a different key -> verify == 0
N3 wrong-GUID-rejected : corrupt the CapsuleGuid -> verify == 0
GREEN only if all five hold. Evidence -> knowledge/status/fw_uefi_capsule_gate.log.
Sovereign: imports nx_fw_uefi_capsule (-> nx_fw_capsule -> nx_ed25519) + nx_framed_append + nx_syscalls. license_tier: ORIGINAL
dependencies 3 imports · 0 importers
imports: nx_fw_uefi_capsule.nxnx_framed_append.nxnx_syscalls.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| 15 | const UCG_LOG: *u8 = "knowledge/status/fw_uefi_capsule_gate.log" |
| 16 | const UCG_PAY: *u8 = "NISHI-fw-uefi-capsule-payload-image" |
functions
| 18 | func ucg_len(s: *u8) -> i64 { var i: i64 = 0; while s[i] != 0 as u8 { i = i + 1 } return i } called by 1: main |
| 19 | func uc_copy(src: *u8, dst: *u8) -> i64 |
| 26 | func ucg_row(name: *u8, pass: i64) -> i64 |
| 39 | func main() -> i64 |