code wiki / (root) / nx_ice_check_gate.nx

nx_ice_check_gate.nx

buildroot/runtime/nx_ice_check_gate.nx

8095 B147 linesdepth 6pulls 6 transitivereach 0 importersview sourcekind gate/prooftopic ice
docsdependenciesstructsconstsfunctions

about

nx_ice_check_gate.nx -- proves the ICE connectivity-CHECK EXCHANGE end to end: PART A (pure): a check request built with an ICE password verifies its MESSAGE-INTEGRITY under that password and FAILS under a wrong one (the auth is real, not decorative); FINGERPRINT self-consistent; USE-CANDIDATE detected; a success response built with the password verifies too. PART B (LIVE, real UDP): two sovereign endpoints run a full check -- controlling A sends a check request, controlled B validates it under the shared password and answers with a success response carrying A's reflexive address, and A validates that response. This is how two Nishi peers confirm a working path. license_tier: ORIGINAL expect_exit: 0

dependencies 2 imports · 0 importers

nx_syscalls.nx nx_ice.nx nx_ice_check_gate.nx

imports: nx_syscalls.nxnx_ice.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main sys_mmap gw sys_write ic_build_check st_write_header st_put16 st_put32 ic_write_attr st_put16 ↻ ic_write_priority st_put16 ↻ st_put32 ↻ ic_write_role st_put16 ↻ st_put16 ↻ sys_mmap ↻ st_message_integrity hmac_sha1 sys_mmap ↻ sha1 sys_mmap ↻ sha1_process_block if_ge st_fingerprint nx_crc32 st_put32 ↻ ic_priority ic_verify_fingerprint ic_find_attr st_len st_get16 st_get16 ↻ st_fingerprint ↻ st_get32 ic_verify_mi ic_find_attr ↻ st_len ↻ st_put16 ↻ sys_mmap ↻

structs

none

consts

23const CK_SPORT: i64 = 53240

functions

12func gw(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
called by 2: gckmain calls 1: sys_write
13func gn(v: i64) -> i64
called by 1: main calls 2: sys_mmapsys_write
18func gck(pass: i64, name: *u8, fails: *i64) -> i64
called by 1: main calls 1: gw
25func main() -> i64