nx_x509_verify_ecdsa_p384.nx
buildroot/runtime/nx_x509_verify_ecdsa_p384.nx
about
nx_x509_verify_ecdsa_p384.nx -- X.509 outer-signature verification
for ECDSA-P384-with-SHA-384 signed certs.
Parallel to nx_x509_verify_ecdsa.nx (commit 6bd3fdf3 family) but
targets the P-384 / SHA-384 combination used by many Web PKI
intermediates (e.g. DigiCert Global Root G3, Sectigo P384).
Composes:
- sha384_digest (48-byte SHA-384 hash of tbs)
- nx_ecdsa_sig_parse_der_384 (DER SEQUENCE -> r, s U384)
- nx_ecdsa_p384_verify (verify under issuer's pubkey)
Public API:
nx_x509_verify_ecdsa_p384(tbs, tbs_len, sig_der, sig_len,
pub_x, pub_y) -> verdict
Sealed verdict enum mirrors nx_x509_verify_ecdsa's; same shape so
the caller's switch-case stays uniform.
Per Cardinals 9 (single-responsibility), 22 (composition),
23 (preamble names what caller MUST verify separately).
license_tier: INDEPENDENT_REDERIVE
genealogy_id: international-research-sources/ietf/rfc_5280 + rfc_5480 + nist_fips_186_5
lineage_id: nishi_x509_verify_ecdsa_p384_q10
dependencies 6 imports · 3 importers
imports: nx_syscalls.nxnx_u384.nxnx_sha512.nxnx_ecdsa_sig_der.nxnx_ecdsa_sig_der_384.nxnx_ecdsa_p384.nx
imported by: nx_ecdsa_p384_real_bisect_test.nxnx_tls13_client_verify_cv.nxnx_x509_verify_under_issuer.nx
structs
| none |
consts
| 40 | const NX_X509_ECDSA_P384_OK: i64 = 1 |
| 41 | const NX_X509_ECDSA_P384_BAD_SIG_DER: i64 = 2 |
| 42 | const NX_X509_ECDSA_P384_BAD_SIG: i64 = 3 |
| 43 | const NX_X509_ECDSA_P384_BAD_PUBKEY: i64 = 4 |
| 44 | const NX_X509_ECDSA_P384_INFINITY: i64 = 5 |
| 45 | const NX_X509_ECDSA_P384_VERDICT_N: i64 = 6 |
functions
| 47 | func nx_x509_verify_ecdsa_p384_verdict_is_valid(v: i64) -> i64 |
| 58 | func nx_x509_verify_ecdsa_p384(tbs: *u8, tbs_len: i64, |
| 87 | func main() -> i64 |