Phase E: MINT -- real keypair, Zuse-signed DER cert, working default identity
capsule_mint_identity() (new capsule_mint.h/.c): mints a fresh identity onto a blank/unminted thumbdrive -- real Ed25519 keypair from virtio_rng, a fresh drive_uuid (independent random draw, not derived from the identity seed, per FABRIC-3.md §F.8 decision 3), a Zuse-signed DER cert in the CERTVERIFY format, and a small working default personality (a real WELCOME word, not a stub -- FABRIC-3.md §F.6/§F.8's own "default personality content" question stays open, but whatever mints today must actually do something when RUNCAP births it). Refuses to overwrite a drive that already reads as a recognized home-blocks drive, mirroring WRITE(10)'s own refuse-on-non-blank posture (decided now, not just "reasonable by analogy" as §F.8 left it). x509_build_user_cert() (x509_ed25519.h/.c): the encode-side counterpart to the existing decode functions (x509_extract_ed25519_pubkey(), x509_verify_signature(), x509_extract_serial()) -- a minimal DER TLV writer producing exactly the fields those functions read. Host-tested round-trip against the real decoder before trusting it in the kernel, including a high-bit-serial case that exercises the DER integer-padding rule; all assertions pass (pubkey/serial round-trip, signature verifies against the real issuer, correctly rejects the wrong key and a corrupted signature). New user_identity_seed_t (user_identity_seed.h): the on-disk record for a minted identity's own keypair, same magic+version+fields+pad-to-4096+ real-CRC convention as zuse_cert_devblock_t and homeblocks_sig_t. Fixed devblock layout: sig(1), cert(2), seed record(3), default personality(4). New MINT word (mama_forth_words.c) and a small accessor (sk_repl_get_attached_blk_dev(), repl.h/.c) exposing the currently attached USB device regardless of home-blocks recognition -- MINT's own target is a blank drive, which by definition never sets Phase D's sk_repl_get_homeblocks_dev(). Verified end-to-end live in QEMU: MINT on a genuinely blank test drive, then (after a detach/reattach so the sig cache picks up the fresh header -- a known workflow gap, not fixed here, flagged for whoever builds the real Console onboarding flow) RUNCAP birthed a VM from that drive's own newly-minted content, and VM-EXECing its WELCOME word printed the default personality banner. The full mint-to-birth Tripod identity flow works end to end for the first time. Clean 3-architecture regression boot confirms no side effects on normal boot. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019ZGkimpfyh63EZyRkNbkPD
This commit is contained in:
Robert Allan James
co-authored by
Claude Sonnet 5
Claude Sonnet 5
parent
21c143dd28
commit
f6e2737f1e
@@ -0,0 +1,145 @@
|
||||
/*
|
||||
StarForth — Steady-State Virtual Machine Runtime
|
||||
|
||||
Copyright (c) 2023–2025 Robert A. James
|
||||
All rights reserved.
|
||||
|
||||
Licensed under the StarForth License, Version 1.0
|
||||
*/
|
||||
|
||||
#ifndef __STARKERNEL__
|
||||
#error "capsule_mint.c is kernel-only"
|
||||
#endif
|
||||
|
||||
#include "starkernel/capsule_mint.h"
|
||||
#include "starkernel/homeblocks_sig.h"
|
||||
#include "starkernel/user_identity_seed.h"
|
||||
#include "starkernel/x509_ed25519.h"
|
||||
#include "starkernel/ed25519.h"
|
||||
#include "starkernel/virtio_rng.h"
|
||||
#include "block_subsystem.h" /* compute_crc64() */
|
||||
#include "blkio.h"
|
||||
#include <string.h>
|
||||
#include <stddef.h>
|
||||
|
||||
/* Fixed layout, devblock offsets from the drive's own start -- see
|
||||
* capsule_mint.h's own doc comment. */
|
||||
#define MINT_CERT_DEVBLOCK 2u
|
||||
#define MINT_CERT_DEVBLOCKS 1u
|
||||
#define MINT_IDENTITY_SRC_OFFSET 3u
|
||||
#define MINT_IDENTITY_SRC_DEVBLOCKS 2u /* 1 seed record + 1 personality source */
|
||||
#define MINT_METADATA_DEVBLOCKS 5u /* devblocks 0..4 reserved */
|
||||
|
||||
/* Real, working, minimal default personality -- FABRIC-3.md §F.6/§F.8's
|
||||
* "default personality content" question stays open (mint-time-fixed vs.
|
||||
* user-editable), but the identity this mints must actually do something
|
||||
* when RUNCAP births it, not just exist. Needs the "Block NNNN" header
|
||||
* capsule_exec_payload() requires (§F.18) -- discovered live, not
|
||||
* optional. 4999 is an unused block number (see capsules/ block-map). */
|
||||
static const char MINT_DEFAULT_PERSONALITY[] =
|
||||
"Block 4999\n"
|
||||
": WELCOME ( -- ) .\" Minted identity -- default personality\" CR ;\n"
|
||||
"WELCOME\n";
|
||||
|
||||
/* Write exactly one devblock (4096 bytes) at devblock offset `devblock`,
|
||||
* as 4 consecutive 1KiB forth-block writes -- same convention
|
||||
* homeblocks_sig_check()'s own read loop already uses. */
|
||||
static int write_devblock(struct blkio_dev *dev, uint32_t devblock,
|
||||
const uint8_t *buf4096) {
|
||||
uint32_t base = devblock * 4u;
|
||||
for (uint32_t i = 0; i < 4u; i++) {
|
||||
if (blkio_write((blkio_dev_t *)dev, base + i,
|
||||
buf4096 + (size_t)i * BLKIO_FORTH_BLOCK_SIZE) != BLKIO_OK) {
|
||||
return -1;
|
||||
}
|
||||
}
|
||||
return 0;
|
||||
}
|
||||
|
||||
MintResult capsule_mint_identity(struct blkio_dev *dev, VM *issuer_vm) {
|
||||
if (!dev || !issuer_vm) return MINT_ERR_WRITE_FAIL;
|
||||
|
||||
/* Refuse to overwrite an already-recognized home-blocks drive --
|
||||
* mirrors WRITE(10)'s own refuse-on-non-blank-media posture (§F.8,
|
||||
* decided 2026-08-28: "reasonable by analogy" there, now decided). */
|
||||
{
|
||||
homeblocks_sig_t existing;
|
||||
if (homeblocks_sig_check(dev, HOMEBLOCKS_SIG_START_FBLOCK, &existing)
|
||||
== HOMEBLOCKS_SIG_OK) {
|
||||
return MINT_ERR_ALREADY_MINTED;
|
||||
}
|
||||
}
|
||||
|
||||
if (!issuer_vm->zuse_cert_installed) return MINT_ERR_NO_ZUSE_CERT;
|
||||
if (!virtio_rng_ready()) return MINT_ERR_NO_ENTROPY;
|
||||
|
||||
/* Fresh identity keypair. */
|
||||
uint8_t seed[32], pubkey[32];
|
||||
if (virtio_rng_get_bytes(seed, sizeof(seed)) != 0) return MINT_ERR_NO_ENTROPY;
|
||||
ed25519_keygen(seed, pubkey);
|
||||
|
||||
/* Fresh drive_uuid -- an independent random draw, not derived from
|
||||
* the identity seed (§F.8 decision 3: "which physical drive," not
|
||||
* "whose identity"). */
|
||||
uint8_t drive_uuid[16];
|
||||
if (virtio_rng_get_bytes(drive_uuid, sizeof(drive_uuid)) != 0)
|
||||
return MINT_ERR_NO_ENTROPY;
|
||||
|
||||
/* Cert: SubjectPublicKeyInfo = new pubkey, serialNumber = drive_uuid,
|
||||
* signed by Zuse's own on-device seed (§F.8 decision 4). */
|
||||
uint8_t cert[512];
|
||||
size_t cert_len = x509_build_user_cert(cert, sizeof(cert), pubkey,
|
||||
drive_uuid, issuer_vm->zuse_cert_seed);
|
||||
if (cert_len == 0 || cert_len > 4096) return MINT_ERR_CERT_BUILD;
|
||||
|
||||
uint8_t cert_block[4096];
|
||||
memset(cert_block, 0, sizeof(cert_block));
|
||||
memcpy(cert_block, cert, cert_len);
|
||||
if (write_devblock(dev, MINT_CERT_DEVBLOCK, cert_block) != 0)
|
||||
return MINT_ERR_WRITE_FAIL;
|
||||
|
||||
/* user_identity_seed_t record. */
|
||||
user_identity_seed_t idrec;
|
||||
memset(&idrec, 0, sizeof(idrec));
|
||||
idrec.magic = USER_IDENTITY_SEED_MAGIC;
|
||||
idrec.version = USER_IDENTITY_SEED_VERSION;
|
||||
memcpy(idrec.seed, seed, 32);
|
||||
memcpy(idrec.pubkey, pubkey, 32);
|
||||
idrec.crc = compute_crc64((const uint8_t *)&idrec, offsetof(user_identity_seed_t, crc));
|
||||
if (write_devblock(dev, MINT_IDENTITY_SRC_OFFSET, (const uint8_t *)&idrec) != 0)
|
||||
return MINT_ERR_WRITE_FAIL;
|
||||
|
||||
/* Default personality source, in the devblock right after the seed
|
||||
* record -- RUNCAP reads exactly this layout. */
|
||||
uint8_t personality_block[4096];
|
||||
memset(personality_block, 0, sizeof(personality_block));
|
||||
memcpy(personality_block, MINT_DEFAULT_PERSONALITY, sizeof(MINT_DEFAULT_PERSONALITY) - 1);
|
||||
if (write_devblock(dev, MINT_IDENTITY_SRC_OFFSET + 1u, personality_block) != 0)
|
||||
return MINT_ERR_WRITE_FAIL;
|
||||
|
||||
/* homeblocks_sig_t -- written last, so a crash/power-loss partway
|
||||
* through minting never leaves a drive that reads as a valid,
|
||||
* complete home-blocks drive with missing content behind it. */
|
||||
homeblocks_sig_t sig;
|
||||
memset(&sig, 0, sizeof(sig));
|
||||
sig.magic = HOMEBLOCKS_SIG_PACK(HOMEBLOCKS_SIG_VERSION_0);
|
||||
memcpy(sig.drive_uuid, drive_uuid, 16);
|
||||
sig.minted_time_ns = 0; /* no monotonic-ns source exists
|
||||
* anywhere in this codebase yet,
|
||||
* §F.8's own open item */
|
||||
sig.metadata_devblocks = MINT_METADATA_DEVBLOCKS;
|
||||
sig.cert_offset = MINT_CERT_DEVBLOCK;
|
||||
sig.cert_devblocks = MINT_CERT_DEVBLOCKS;
|
||||
sig.identity_src_offset = MINT_IDENTITY_SRC_OFFSET;
|
||||
sig.identity_src_devblocks = MINT_IDENTITY_SRC_DEVBLOCKS;
|
||||
sig.hdr_crc = homeblocks_sig_compute_crc(&sig);
|
||||
|
||||
uint8_t sig_block[4096];
|
||||
memcpy(sig_block, &sig, sizeof(sig));
|
||||
if (write_devblock(dev, HOMEBLOCKS_SIG_START_FBLOCK / 4u, sig_block) != 0)
|
||||
return MINT_ERR_WRITE_FAIL;
|
||||
|
||||
(void)blkio_flush((blkio_dev_t *)dev);
|
||||
|
||||
return MINT_OK;
|
||||
}
|
||||
@@ -40,6 +40,7 @@
|
||||
#include "starkernel/capsule.h"
|
||||
#include "starkernel/capsule_birth.h"
|
||||
#include "starkernel/capsule_runcap.h"
|
||||
#include "starkernel/capsule_mint.h"
|
||||
#include "starkernel/capsule_loader.h"
|
||||
#include "starkernel/capsule_run.h"
|
||||
#include "starkernel/capsule_loader.h"
|
||||
@@ -770,6 +771,53 @@ static void mama_word_vm_call(VM *vm)
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* @brief MINT ( -- ok? )
|
||||
* Mint a fresh identity onto the currently attached USB drive
|
||||
* (FABRIC-3.md §F.8/§F.19). Deliberately no name/string argument despite
|
||||
* F.8's original "S\" name\" MINT" sketch: this design never binds a VM
|
||||
* name at mint time -- the drive holds an anonymous, self-contained
|
||||
* identity, and a name is only assigned later, at RUNCAP birth (a
|
||||
* WIREBIND decision, not MINT's). Refuses cleanly (prints why) if
|
||||
* there's no attached drive, the drive already reads as a recognized
|
||||
* home-blocks drive, Zuse has no installed cert to sign with, or there's
|
||||
* no entropy source. Real, working code -- not the eventual Console
|
||||
* onboarding flow (§D.6), which will call this same C function.
|
||||
*/
|
||||
static void mama_word_mint(VM *vm)
|
||||
{
|
||||
struct blkio_dev *dev = sk_repl_get_attached_blk_dev();
|
||||
if (!dev) {
|
||||
console_println("MINT: no drive attached");
|
||||
vm_push(vm, 0);
|
||||
return;
|
||||
}
|
||||
|
||||
MintResult r = capsule_mint_identity(dev, vm);
|
||||
switch (r) {
|
||||
case MINT_OK:
|
||||
console_println("MINT: identity minted");
|
||||
vm_push(vm, 1);
|
||||
return;
|
||||
case MINT_ERR_ALREADY_MINTED:
|
||||
console_println("MINT: refused -- drive already a recognized home-blocks drive");
|
||||
break;
|
||||
case MINT_ERR_NO_ZUSE_CERT:
|
||||
console_println("MINT: refused -- Zuse has no installed cert to sign with");
|
||||
break;
|
||||
case MINT_ERR_NO_ENTROPY:
|
||||
console_println("MINT: refused -- no entropy source");
|
||||
break;
|
||||
case MINT_ERR_CERT_BUILD:
|
||||
console_println("MINT: FAILED -- cert construction error");
|
||||
break;
|
||||
case MINT_ERR_WRITE_FAIL:
|
||||
console_println("MINT: FAILED -- devblock write error (drive may be partially minted)");
|
||||
break;
|
||||
}
|
||||
vm_push(vm, 0);
|
||||
}
|
||||
|
||||
/**
|
||||
* @brief RUNCAP-TEST ( caddr u -- ok? rc )
|
||||
* Diagnostic-only word (FABRIC-3.md §F.6/§F.18): calls
|
||||
@@ -1168,6 +1216,7 @@ void register_mama_forth_words(VM *vm)
|
||||
register_word(vm, "CAPSULE-LEN@", mama_word_capsule_len_fetch);
|
||||
register_word(vm, "CAPSULE-BIRTH", mama_word_capsule_birth);
|
||||
register_word(vm, "CAPSULE-RUN", mama_word_capsule_run);
|
||||
register_word(vm, "MINT", mama_word_mint);
|
||||
register_word(vm, "RUNCAP-TEST", mama_word_runcap_test);
|
||||
register_word(vm, "MAMA-VM-ID", mama_word_mama_vm_id);
|
||||
register_word(vm, "VM-COUNT", mama_word_vm_count);
|
||||
@@ -1198,6 +1247,7 @@ void register_mama_forth_words(VM *vm)
|
||||
register_word(vm, "CAPSULE-LEN@", mama_word_capsule_len_fetch);
|
||||
register_word(vm, "CAPSULE-BIRTH", mama_word_capsule_birth);
|
||||
register_word(vm, "CAPSULE-RUN", mama_word_capsule_run);
|
||||
register_word(vm, "MINT", mama_word_mint);
|
||||
register_word(vm, "RUNCAP-TEST", mama_word_runcap_test);
|
||||
register_word(vm, "MAMA-VM-ID", mama_word_mama_vm_id);
|
||||
register_word(vm, "VM-COUNT", mama_word_vm_count);
|
||||
|
||||
Reference in New Issue
Block a user