sk_v4_mint_zuse wiped seed and rseed only when the real Zuse was minted; its refusals and every failure after YES left them in stack memory. Option 1 (Captain Bob, 2026-11-12: "1 is great"): the seeds are in a 64-byte buffer the caller owns. sk_v4_mint_zuse_with(seeds) runs the mint (now a private mint()) and then wipes the buffer, whichever way it returned -- one place, every exit; sk_v4_mint_zuse() gives it a buffer of its own. kernel/tests/test_sk_v4_mint.c, 17 checks: the real gpt.c on the RAM disk, the identity code, key mint, signature checks, marker and keyboard faked; each of the mint's eight exits run with the buffer filled with 0xEE first -- no stick, under 64 MiB, not YES, the key mint failing, the read-back not hers, no marker, the marker write failing, and minted. Against the mint as it was: 7 failures (every exit but success). Now: 0. Both runs in logs/20261112-181719/. Built for amd64, aarch64, riscv64. The identity code's two (sk_v4_genesis, sk_v4_real_zuse_arrived) follow. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017RzZgrf7V7Zk2iczBXDRbm
15 lines
1.1 KiBLFS
Plaintext
15 lines
1.1 KiBLFS
Plaintext
=== test_sk_v4_mint against the mint that wiped the seeds on success only
|
|
test_sk_v4_mint
|
|
FAIL /home/user/LithosAnanke/kernel/tests/test_sk_v4_mint.c:68: #176: no stick offered -- the seed buffer is zero after
|
|
FAIL /home/user/LithosAnanke/kernel/tests/test_sk_v4_mint.c:68: #176: a stick under 64 MiB -- the seed buffer is zero after
|
|
FAIL /home/user/LithosAnanke/kernel/tests/test_sk_v4_mint.c:68: #176: not YES -- the seed buffer is zero after
|
|
FAIL /home/user/LithosAnanke/kernel/tests/test_sk_v4_mint.c:68: #176: the key mint fails -- the seed buffer is zero after
|
|
FAIL /home/user/LithosAnanke/kernel/tests/test_sk_v4_mint.c:68: #176: the read-back is not hers -- the seed buffer is zero after
|
|
FAIL /home/user/LithosAnanke/kernel/tests/test_sk_v4_mint.c:68: #176: no marker on the system stick -- the seed buffer is zero after
|
|
FAIL /home/user/LithosAnanke/kernel/tests/test_sk_v4_mint.c:68: #176: the marker write fails -- the seed buffer is zero after
|
|
17 checks, 7 failures
|
|
make: *** [Makefile:41: run-test_sk_v4_mint] Error 1
|
|
=== test_sk_v4_mint now
|
|
test_sk_v4_mint
|
|
17 checks, 0 failures
|