code wiki / _hdl_build / nx_tor_aes_gate.nx

nx_tor_aes_gate.nx

buildroot/runtime/_hdl_build/nx_tor_aes_gate.nx

7279 B84 linesdepth 5pulls 5 transitivereach 0 importersview sourcekind gate/prooftopic tor
docsdependenciesstructsconstsfunctions

about

nx_tor_aes_gate.nx -- KAT for nx_tor_aes (AES-128-CTR, the Tor relay cipher) vs NIST SP 800-38A F.5. AT1 F.5.1 CTR-AES128.Encrypt byte-exact (64B, key/ICB/PT/CT from nx_aes_ctr_test.nx = on-disk NIST vector) AT2 F.5.2 CTR-AES128.Decrypt byte-exact (CT -> PT, symmetric) AT3 FULL-128-bit carry: a counter with low 32 bits = 0xffffffff carries into byte 11 (the 32-bit-only incrementer in nx_aes_ctr.nx would get this WRONG -- this is why Tor needs nx_tor_aes) AT4 round-trip on a block-crossing + partial-tail buffer license_tier: ORIGINAL expect_exit: 0

dependencies 3 imports · 0 importers

nx_syscalls.nx nx_aes.nx nx_tor_aes.nx nx_tor_aes_gate.nx

imports: nx_syscalls.nxnx_aes.nxnx_tor_aes.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main sys_mmap g_w sys_write tor_aes128_ctr sys_mmap ↻ aes128_expand_key _aes_sbox _aes_rcon tor_aes128_ctr_crypt sys_mmap ↻ aes128_encrypt_block tor_ctr_inc128 g_eq g_row g_w ↻ aes128_expand_key ↻ aes128_encrypt_block ↻ tor_ctr_inc128 ↻ tor_aes128_ctr_crypt ↻ g_n g_w ↻ sys_mmap ↻ sys_write ↻ sys_openat_append g_fw sys_write ↻ g_fn sys_mmap ↻ sys_write ↻ sys_now_realtime_sec sys_mmap ↻ sys_clock_gettime_real sys_close sys_exit

structs

none

consts

none

functions

12func g_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
called by 3: g_ng_rowmain calls 1: sys_write
13func g_n(v: i64) -> i64 { var m: i64=v; if m<0{g_w("-" as *u8);m=0-m} let t:*u8=sys_mmap(24); var k:i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} let o:*u8=sys_mmap(24); var i:i64=0; while i<k{o[i]=t[k-1-i];i=i+1} sys_write(1,o,k); return 0 }
called by 1: main calls 3: g_wsys_mmapsys_write
14func g_fw(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 }
called by 1: main calls 1: sys_write
15func g_fn(fd: i64, v: i64) -> i64 { var m: i64=v; let t:*u8=sys_mmap(24); var k:i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} let o:*u8=sys_mmap(24); var i:i64=0; while i<k{o[i]=t[k-1-i];i=i+1} sys_write(fd,o,k); return 0 }
called by 1: main calls 2: sys_mmapsys_write
16func g_row(id: *u8, ok: i64, pass: *i64, tot: *i64) -> i64 { tot[0]=tot[0]+1; g_w(" " as *u8); g_w(id); if ok==1 { g_w(": OK\n" as *u8); pass[0]=pass[0]+1 } else { g_w(": FAIL\n" as *u8) } return 0 }
called by 1: main calls 1: g_w
17func g_eq(a: *u8, b: *u8, n: i64) -> i64 { var i: i64=0; while i<n { if a[i]!=b[i] { return 0 } i=i+1 } return 1 }
called by 1: main
19func main() -> i64
calls 16: sys_mmapg_wtor_aes128_ctrg_eqg_rowaes128_expand_key+10