nx_install_attest_signed_test.nx
buildroot/runtime/nx_install_attest_signed_test.nx
about
nx_install_attest_signed_test.nx -- smoke for EM-9 Ed25519 signing.
Uses the RFC 8032 ยง7.1 Test 1 keypair (the only canonical Ed25519
test vector pair that's bit-stable across implementations):
priv = 9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60
pub = d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a
Test plan:
1. Sign a known install_hash; verify with correct pub -> OK
2. Tamper install_hash bytes -> verify returns TAMPERED
3. Tamper signature bytes -> verify returns TAMPERED
4. Use WRONG public key -> verify returns TAMPERED
5. Bad-input gates (null hash / null priv / null pub / null sig /
null out)
6. Sealed-enum verdict gate
7. Plan-level sign + verify roundtrip (compose with
nx_install_hash_compute on a real NxInstallPlan)
dependencies 9 imports · 0 importers
imports: nx_syscalls.nxnx_probe.nxnx_calibrate.nxnx_select.nxnx_select_joint.nxnx_install_plan.nxnx_install_hash.nxnx_install_pipeline.nxnx_install_attest_signed.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 30 | func _rfc_priv(buf: *u8) -> i64 called by 1: main |
| 67 | func _rfc_pub(buf: *u8) -> i64 called by 1: main |
| 105 | func _make_hash(buf: *u8) -> i64 called by 1: main |
| 114 | func _make_probe() -> *NxProbeRecord |
| 126 | func _make_calib() -> *NxCalibrationRecord |
| 139 | func _mk(variant_id: i64, cost: i64, in_lay: i64, out_lay: i64) -> *NxManifest |
| 150 | func main() -> i64 |