code wiki / (root) / nx_x509_verify_under_issuer_test.nx

nx_x509_verify_under_issuer_test.nx

buildroot/runtime/nx_x509_verify_under_issuer_test.nx

11065 B211 linesdepth 13pulls 65 transitivereach 0 importersview sourcekind gate/prooftopic x509
docsdependenciesstructsconstsfunctions

about

nx_x509_verify_under_issuer_test.nx -- KAT for the per-cert verify orchestrator. We synthesize cert + issuer-cert struct CONTENTS (not real DER) by manually setting X509Cert offset fields to point at hand-built byte buffers. This isolates the orchestrator's dispatch logic from x509_parse, which has its own coverage via leaf_check. Test vectors: ECDSA path: RFC 6979 §A.2.5 (NIST P-256 + SHA-256, msg="sample") Ed25519 path: RFC 8032 §7.1 TEST 1 (empty message) expect_exit: 0 license_tier: ORIGINAL

dependencies 6 imports · 0 importers

nx_syscalls.nx nx_u256.nx nx_x509.nx nx_x509_sig_alg.nx nx_x509_pubkey_alg.nx nx_x509_verify_under_issuer.nx nx_x509_verify_under_issuer_te

imports: nx_syscalls.nxnx_u256.nxnx_x509.nxnx_x509_sig_alg.nxnx_x509_pubkey_alg.nxnx_x509_verify_under_issuer.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main sys_mmap nx_x509_verify_under_issue nx_x509_sig_alg_identify sys_mmap ↻ asn1_expect_tag sys_mmap ↻ asn1_read_tlv_header asn1_read_tag asn1_read_length nx_x509_sig_alg_is_support nx_x509_pubkey_alg_identif sys_mmap ↻ asn1_expect_tag ↻ oid_is_ed25519 oid_is_rsa_encryption oid_is_id_ec_public_key oid_is_prime256v1 oid_is_secp384r1 nx_x509_pubkey_alg_is_supp u256_alloc nx_scratch nx_scratch_init sys_mmap ↻ nx_scratch_oom sys_write sys_exit sys_mmap ↻ nx_x509_pubkey_extract_ec_ sys_mmap ↻ u256_load_be nx_x509_verify_ecdsa_p256 sys_mmap ↻ sha256_digest sys_mmap ↻ sha256_init sys_mmap ↻ sha256_k sha256_update sha256_compress_ni_blocks

structs

none

consts

none

functions

23func main() -> i64
calls 3: sys_mmapnx_x509_verify_under_issuernx_x509_vui_verdict_is_valid