nx_opaque_login_gate.nx
buildroot/runtime/nx_opaque_login_gate.nx
about
nx_opaque_login_gate.nx -- KAT for the no-cookie OPAQUE login seam. Drives the FULL over-the-wire flow
in-process: server-key/ctx setup -> register (BIP39 mnemonic) -> login (base64 token) -> whoami(valid)
-> tamper-reject -> expiry-reject -> wrong-passphrase-reject -> ghost-user-reject. Proves the base64
token survives the wire round-trip and every reject path fires. exit 0 = pass, N = assertion N failed.
(Light argon2id KSF here for test speed; the daemon runs production 64 MiB/t3/p4 -- KSF strength itself
is separately proven by the OPAQUE RFC 9807 KAT.)
dependencies 2 imports · 0 importers
imports: nx_opaque_login.nxnx_assert.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 10 | func olg_trunc(path: *u8) -> i64 { let fd: i64 = sys_openat_wr(path, 0x1a4); if fd >= 0 { sys_close(fd) } return 0 } called by 1: main |
| 12 | func main() -> i64 |