code wiki / _hdl_build / nx_vault_shamir.nx

nx_vault_shamir.nx

buildroot/runtime/_hdl_build/nx_vault_shamir.nx

2323 B60 linesdepth 2pulls 2 transitivereach 8 importersview sourcekind librarytopic vault

docs dependencies structs consts functions

about

nx_vault_shamir.nx -- sovereign SHAMIR threshold secret sharing (HashiCorp Vault "Shamir seal/unseal" gap from vault_capability_census.tsv) -- the iconic multi-operator unseal: split a master key into N shares; ANY K reconstruct it; K-1 shares reveal a WRONG value (no quorum -> no unseal). Real finite-field math over GF(p), p = 2^31-1 (Mersenne prime): products of two field elements stay < 2^62 so they fit i64 with no overflow. Shares = poly(1..N); reconstruct = Lagrange interpolation at x=0. license_tier: ORIGINAL

dependencies 1 imports · 3 importers

imports: nx_syscalls.nx

imported by: nx_social_recovery.nxnx_vault_shamir_test.nxnx_vault_suite_test.nx

structs

none

consts

8	const SH_P: i64 = 2147483647 // 2^31 - 1 (Mersenne prime); secrets must be < SH_P

functions

10	func sh_mod(x: i64) -> i64 { var r: i64 = x % SH_P; if r < 0 { r = r + SH_P } return r } called by 5: nx_sr_split sh_add sh_sub sh_mul sh_inv
11	func sh_add(a: i64, b: i64) -> i64 { return sh_mod(a + b) } called by 3: sh_eval sh_reconstruct main calls 1: sh_mod
12	func sh_sub(a: i64, b: i64) -> i64 { return sh_mod(a - b) } called by 1: sh_reconstruct calls 1: sh_mod
13	func sh_mul(a: i64, b: i64) -> i64 { return sh_mod(a * b) } // a,b < 2^31 -> a*b < 2^62, fits i64 called by 2: sh_eval sh_reconstruct calls 1: sh_mod
16	func sh_inv(a: i64) -> i64 called by 1: sh_reconstruct calls 1: sh_mod
33	func sh_eval(coeffs: *i64, k: i64, x: i64) -> i64 called by 3: nx_sr_split main main calls 2: sh_add sh_mul
41	func sh_reconstruct(xs: i64, ys: i64, k: i64) -> i64 called by 4: nx_sr_reconstruct sg_recon3 sg_recon2 su_recon3 calls 4: sh_mul sh_sub sh_inv sh_add