code wiki / _hdl_build / nx_x509_pubkey_ed_kat.nx
nx_x509_pubkey_ed_kat.nx
buildroot/runtime/_hdl_build/nx_x509_pubkey_ed_kat.nx
about
nx_x509_pubkey_ed_kat.nx -- gate for nx_x509_pubkey_extract_ed25519 (HONESTY SYSTEM weak point reach=479,
TLS trust path, no direct test). Proves the extractor returns a USABLE key, not just 32 copied bytes:
synthesise a real self-signed cert with the RFC 8032 test-vector keypair (sign a TBS with ed25519_sign_full),
extract the pubkey THROUGH the organ, and verify the real signature with the EXTRACTED key -> if extract is
wrong by even one byte, verification FAILS (self-validating). Plus byte-exact extraction, tamper rejection,
and both length-guard negatives. license_tier: ORIGINAL expect_exit:0
dependencies 4 imports · 0 importers
imports: nx_syscalls.nxnx_x509.nxnx_ed25519_signature.nxnx_x509_pubkey_ed.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 12 | func ew(s: *u8) -> i64 { var n:i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } |
| 13 | func en(v: i64) -> i64 { let b:*u8=sys_mmap(24); var m:i64=v; if m<0{sys_write(1,"-" as *u8,1);m=0-m} let t:*u8=sys_mmap(24); var k:i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var j:i64=0; while j<k{b[j]=t[k-1-j];j=j+1} sys_write(1,b,k); return 0 } |
| 15 | func main() -> i64 |