nx_pw_rotate_gate.nx source

1// nx_pw_rotate_gate.nx -- re-runnable GATE for vault secret rotation (Engineer verb: VERIFY). 2// Operates ONLY on a throwaway secret name (rotate_gate_tmp) so nas.nv is NEVER touched. 3// K1 seed: secret_cli put rotate_gate_tmp = a known value -> open returns it 4// K2 rotate: nx_pw_rotate rotate_gate_tmp -> exit 0 + /tmp/nxnewpw exists, 24 chars 5// K3 store changed: secret_cli get rotate_gate_tmp == /tmp/nxnewpw (the NEW value), != seed 6// K4 backup exists and DECODES to the old seed (rollback material is real, not a stub) 7// K5 idempotent re-rotate: a second rotate succeeds + value changes again (no nonce reuse) 8// Cleans up the throwaway secret + backup. Exit 0 only on 5/5. license_tier: ORIGINAL 9import "nx_syscalls.nx" 10 11const AT_FDCWD: i64 = 0 - 100 12func _p(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } 13func _pn(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48;k=1}; while m>0{t[k]=48+(m%10);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 } 14func rg_unlink(path: *u8) -> i64 { __syscall(263, AT_FDCWD, path, 0, 0, 0, 0) return 0 } 15 16func rg_read(path: *u8, buf: *u8, cap: i64) -> i64 { 17 let fd: i64 = sys_openat_rd(path) 18 if fd < 0 { return 0 - 1 } 19 var n: i64 = 0 20 var go: i64 = 1 21 while go == 1 { 22 let base: i64 = buf as i64 23 let r: i64 = sys_read(fd, (base + n) as *u8, cap - n) 24 if r <= 0 { go = 0 } else { n = n + r } 25 if n >= cap { go = 0 } 26 } 27 sys_close(fd) 28 return n 29} 30func rg_write(path: *u8, buf: *u8, n: i64) -> i64 { 31 let fd: i64 = sys_openat_wr(path, 0x180) 32 if fd < 0 { return 0 - 1 } 33 sys_write(fd, buf, n) 34 sys_close(fd) 35 return 0 36} 37func rg_run(path: *u8, a1: *u8, a2: *u8) -> i64 { 38 let pid: i64 = sys_fork() 39 if pid == 0 { 40 let dn: i64 = sys_openat_wr("/dev/null" as *u8, 0x1a4) 41 if dn >= 0 { sys_dup3(dn, 1, 0); sys_dup3(dn, 2, 0) } 42 let argv: *i64 = sys_mmap(64) as *i64 43 argv[0] = path as i64 44 var ai: i64 = 1 45 if (a1 as i64) != 0 { argv[ai] = a1 as i64; ai = ai + 1 } 46 if (a2 as i64) != 0 { argv[ai] = a2 as i64; ai = ai + 1 } 47 argv[ai] = 0 48 let envp: *i64 = sys_mmap(16) as *i64 49 envp[0] = 0 50 sys_execve(path, argv, envp) 51 sys_exit(127) 52 } 53 let st: *i64 = sys_mmap(16) as *i64 54 sys_wait4(pid, st, 0) 55 let raw: i64 = st[0] 56 if (raw & 0x7f) != 0 { return 128 + (raw & 0x7f) } 57 return (raw >> 8) & 0xff 58} 59func rg_eqn(a: *u8, an: i64, b: *u8, bn: i64) -> i64 { 60 if an != bn { return 0 } 61 var i: i64 = 0 62 while i < an { if a[i] != b[i] { return 0 } i = i + 1 } 63 return 1 64} 65 66func main() -> i64 { 67 _p("=== PW ROTATE GATE: rollback-safe CSPRNG rotation on a throwaway secret ===\n" as *u8) 68 let nm: *u8 = "rotate_gate_tmp" as *u8 69 let vpath: *u8 = "/home/elderwesto/.nishi/secrets/rotate_gate_tmp.nv" as *u8 70 let bpath: *u8 = "/home/elderwesto/.nishi/secrets/rotate_gate_tmp.nv.rotatebak" as *u8 71 rg_unlink(vpath); rg_unlink(bpath) 72 var pass: i64 = 0 73 74 let seed: *u8 = "ROTGATE-seed-value-7" as *u8 75 let seedn: i64 = 20 76 let secret_cli: *u8 = "_offc/nx_secret_cli.elf" as *u8 77 let rotate: *u8 = "_offc/nx_pw_rotate.elf" as *u8 78 79 // K1 seed: put then get == seed 80 rg_write("/tmp/nxsecret.in" as *u8, seed, seedn) 81 let p1: i64 = rg_run(secret_cli, "put" as *u8, nm) 82 rg_unlink("/tmp/nxsecret.out" as *u8) 83 let g1: i64 = rg_run(secret_cli, "get" as *u8, nm) 84 let buf: *u8 = sys_mmap(512) 85 let gn: i64 = rg_read("/tmp/nxsecret.out" as *u8, buf, 512) 86 var ok1: i64 = 0 87 if p1 == 0 { if g1 == 0 { if rg_eqn(buf, gn, seed, seedn) == 1 { ok1 = 1 } } } 88 if ok1 == 1 { pass = pass + 1; _p("K1 seed-put-get OK\n" as *u8) } else { _p("K1 FAIL put=" as *u8); _pn(p1); _p(" get=" as *u8); _pn(g1); _p(" n=" as *u8); _pn(gn); _p("\n" as *u8) } 89 90 // K2 rotate -> exit 0, /tmp/nxnewpw 24 chars 91 rg_unlink("/tmp/nxnewpw" as *u8) 92 let r2: i64 = rg_run(rotate, nm, 0 as *u8) 93 let np: *u8 = sys_mmap(512) 94 let npn: i64 = rg_read("/tmp/nxnewpw" as *u8, np, 512) 95 if r2 == 0 { if npn == 24 { pass = pass + 1; _p("K2 rotate-exit0-newpw24 OK\n" as *u8) } else { _p("K2 FAIL newpw len=" as *u8); _pn(npn); _p("\n" as *u8) } } 96 else { _p("K2 FAIL rotate rc=" as *u8); _pn(r2); _p("\n" as *u8) } 97 98 // K3 store now holds the NEW value (== nxnewpw), != seed 99 rg_unlink("/tmp/nxsecret.out" as *u8) 100 let g3: i64 = rg_run(secret_cli, "get" as *u8, nm) 101 let cur: *u8 = sys_mmap(512) 102 let cn: i64 = rg_read("/tmp/nxsecret.out" as *u8, cur, 512) 103 var ok3: i64 = 0 104 if g3 == 0 { if rg_eqn(cur, cn, np, npn) == 1 { if rg_eqn(cur, cn, seed, seedn) == 0 { ok3 = 1 } } } 105 if ok3 == 1 { pass = pass + 1; _p("K3 store-holds-new-value OK\n" as *u8) } else { _p("K3 FAIL\n" as *u8) } 106 107 // K4 backup is real rollback material: it OPENS to the OLD seed. 108 // (copy backup over the live vault, open, compare to seed -- then we re-rotate in K5 anyway) 109 let bb: *u8 = sys_mmap(65536) 110 let bn: i64 = rg_read(bpath, bb, 65536) 111 var ok4: i64 = 0 112 if bn > 40 { 113 rg_write(vpath, bb, bn) // restore backup into place 114 rg_unlink("/tmp/nxsecret.out" as *u8) 115 let g4: i64 = rg_run(secret_cli, "get" as *u8, nm) 116 let ob: *u8 = sys_mmap(512) 117 let on: i64 = rg_read("/tmp/nxsecret.out" as *u8, ob, 512) 118 if g4 == 0 { if rg_eqn(ob, on, seed, seedn) == 1 { ok4 = 1 } } 119 } 120 if ok4 == 1 { pass = pass + 1; _p("K4 backup-decodes-to-old-seed OK\n" as *u8) } else { _p("K4 FAIL\n" as *u8) } 121 122 // K5 re-rotate (vault now holds the restored seed): succeeds + value changes again 123 rg_unlink("/tmp/nxnewpw" as *u8) 124 let r5: i64 = rg_run(rotate, nm, 0 as *u8) 125 let np5: *u8 = sys_mmap(512) 126 let np5n: i64 = rg_read("/tmp/nxnewpw" as *u8, np5, 512) 127 var ok5: i64 = 0 128 if r5 == 0 { if np5n == 24 { if rg_eqn(np5, np5n, seed, seedn) == 0 { ok5 = 1 } } } 129 if ok5 == 1 { pass = pass + 1; _p("K5 re-rotate-distinct OK\n" as *u8) } else { _p("K5 FAIL rc=" as *u8); _pn(r5); _p("\n" as *u8) } 130 131 // cleanup throwaway 132 rg_unlink(vpath); rg_unlink(bpath) 133 rg_unlink("/tmp/nxnewpw" as *u8); rg_unlink("/tmp/nxsecret.in" as *u8); rg_unlink("/tmp/nxsecret.out" as *u8) 134 135 _p("GATE-VERDICT pw_rotate " as *u8); _pn(pass); _p("/5" as *u8) 136 if pass == 5 { _p(" GREEN\n" as *u8); sys_exit(0); return 0 } 137 _p(" RED\n" as *u8) 138 sys_exit(1) 139 return 1 140}