code wiki / (root) / nx_tls13_transcript_test.nx

nx_tls13_transcript_test.nx

buildroot/runtime/nx_tls13_transcript_test.nx

5093 B152 linesdepth 6pulls 7 transitivereach 0 importersview sourcekind gate/prooftopic tls13
docsdependenciesstructsconstsfunctions

about

nx_tls13_transcript_test.nx -- KAT + internal consistency for the TLS 1.3 transcript hash. Verification: A. Empty transcript snapshot == SHA-256("") well-known constant (e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855). B. 3-message transcript snapshot == sha256_digest of the concatenated bytes (round-trip vs the underlying primitive). C. Snapshot is non-destructive: snapshot, update with more data, snapshot again -- the two snapshots differ. D. HRR replace produces a transcript whose snapshot equals SHA-256(synthetic_record), where synthetic_record = 0xfe || 0x00 0x00 0x20 || SHA-256(CH1). expect_exit: 0 license_tier: ORIGINAL

dependencies 3 imports · 0 importers

nx_syscalls.nx nx_sha256.nx nx_tls13_transcript.nx nx_tls13_transcript_test.nx

imports: nx_syscalls.nxnx_sha256.nxnx_tls13_transcript.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main nx_tls13_transcript_new sys_mmap sha256_init sys_mmap ↻ sha256_k sha384_init sys_mmap ↻ nx_tls13_transcript_snapsh sys_mmap ↻ sha256_final blk_set_byte sha256_compress sha256_compress_ni blk_word blk_byte nx_tls13_transcript_update sha256_update sha256_compress_ni_blocks blk_set_byte ↻ sha256_compress ↻ sha512_update sha512_blk_set_byte blk_get_i64 blk_set_i64 sha512_compress sys_mmap ↻ blk_get_i64 ↻ sha512_gamma0 rotr64_v nx_bits_rotr64 shr64_v sha512_gamma1 rotr64_v ↻ shr64_v ↻ sha512_sigma1 rotr64_v ↻ sha512_ch sha512_k sha512_sigma0

structs

none

consts

none

functions

26func main() -> i64
calls 7: nx_tls13_transcript_newsys_mmapnx_tls13_transcript_snapshotnx_tls13_transcript_updatesha256_digestnx_tls13_transcript_replace_with_hrr+1