65 lines
2.1 KiB
Python
65 lines
2.1 KiB
Python
|
#!/usr/bin/env python3
|
||
|
|
"""Phase 0 gate #1 — deterministic RNS identity from the Archy seed (NO radio needed).
|
||
|
|
|
||
|
|
Proves the load-bearing assumption behind the whole "derive RNS identity from Archy
|
||
|
|
keys" decision: a node's Reticulum/LXMF destination hash is a stable, reproducible
|
||
|
|
function of its 32-byte Archy Ed25519 seed.
|
||
|
|
|
||
|
|
Run:
|
||
|
|
reticulum-daemon/.venv/bin/python reticulum-daemon/spike_identity.py
|
||
|
|
|
||
|
|
Exits non-zero (and prints FAIL) if any invariant breaks.
|
||
|
|
"""
|
||
|
|
|
||
|
|
from __future__ import annotations
|
||
|
|
|
||
|
|
import sys
|
||
|
|
|
||
|
|
from archy_rns_identity import lxmf_destination_hash, rns_private_blob
|
||
|
|
|
||
|
|
# Two fixed, non-secret test seeds (32 bytes each). Real seeds come from node_key.
|
||
|
|
SEED_A = bytes(range(32))
|
||
|
|
SEED_B = bytes((i * 7 + 3) & 0xFF for i in range(32))
|
||
|
|
|
||
|
|
|
||
|
|
def _hex(b: bytes) -> str:
|
||
|
|
return b.hex()
|
||
|
|
|
||
|
|
|
||
|
|
def main() -> int:
|
||
|
|
ok = True
|
||
|
|
|
||
|
|
# 1. The 64-byte private blob is deterministic and well-formed.
|
||
|
|
blob1 = rns_private_blob(SEED_A)
|
||
|
|
blob2 = rns_private_blob(SEED_A)
|
||
|
|
if blob1 != blob2 or len(blob1) != 64:
|
||
|
|
print(f"FAIL: private blob not deterministic/64B (len={len(blob1)})")
|
||
|
|
ok = False
|
||
|
|
else:
|
||
|
|
print(f"ok : private blob deterministic, 64B ({_hex(blob1)[:16]}…)")
|
||
|
|
|
||
|
|
# 2. Same seed -> same LXMF destination hash, across two independent builds.
|
||
|
|
h1 = lxmf_destination_hash(SEED_A)
|
||
|
|
h2 = lxmf_destination_hash(SEED_A)
|
||
|
|
if h1 != h2 or len(h1) != 16:
|
||
|
|
print(f"FAIL: destination hash not stable/16B: {_hex(h1)} vs {_hex(h2)}")
|
||
|
|
ok = False
|
||
|
|
else:
|
||
|
|
print(f"ok : destination hash stable, 16B <{_hex(h1)}>")
|
||
|
|
|
||
|
|
# 3. Different seed -> different destination (no accidental collision/constant).
|
||
|
|
h3 = lxmf_destination_hash(SEED_B)
|
||
|
|
if h3 == h1:
|
||
|
|
print(f"FAIL: distinct seeds produced the same destination <{_hex(h3)}>")
|
||
|
|
ok = False
|
||
|
|
else:
|
||
|
|
print(f"ok : distinct seed -> distinct dest <{_hex(h3)}>")
|
||
|
|
|
||
|
|
print("\nPASS — RNS identity is deterministic from the Archy seed."
|
||
|
|
if ok else "\nFAILED — see above.")
|
||
|
|
return 0 if ok else 1
|
||
|
|
|
||
|
|
|
||
|
|
if __name__ == "__main__":
|
||
|
|
sys.exit(main())
|