Orkuncakilkaya
9ae69e64b4
All checks were successful
docs / build-and-deploy (push) Successful in 3s
The security-sensitive counterpart to the fast, non-cryptographic Hash.* library: standard, test-vector-backed hashing for signed saves and message integrity, kept in its own namespace so nobody reaches for the wrong tool. Crypto.sha256(s) SHA-256 -> 64-char lowercase hex Crypto.hmac_sha256(key, msg) HMAC-SHA256 -> 64-char hex Crypto.verify_hmac(key, msg, mac) recompute + constant-time compare -> bool Crypto.hex(s) lowercase hex of a string's bytes Crypto.ct_equal(a, b) constant-time string equality The primitives are implemented from scratch in plain integer LLVM IR (FIPS 180-4 / RFC 2104): no libc crypto, no data-dependent branches in the compression rounds, so a given input hashes to the same 32 bytes on every platform and run. Digests are returned as hex strings, not raw bytes, because a `str` is null-terminated and a raw digest can contain a NUL. MAC checks use a non-short-circuiting compare so timing does not leak how much of a forged tag was correct. Emitted on demand via g_uses_cryptort, mirroring the emit_hash prelude gate. Scoped to the deterministic, known-answer-testable core; OS-backed random_bytes (the one piece that can't be validated by test vectors) is left for a follow-up. Tested against published SHA-256 vectors (empty/"abc"/fox + 55/56/64-byte multi-block padding) and HMAC-SHA256 vectors; wired into the self-host suite as `crypto`. Docs: a new Crypto section with honest "what this protects / does not" guidance, one page per method, all fences checked and in the inventory. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
76 lines
4.6 KiB
Text
76 lines
4.6 KiB
Text
# selfhost_test.ludic — the self-hosting suite: the compiler is correct (compiles
|
|
# diverse programs to working binaries) and self-reproducing (the bootstrap
|
|
# fixpoint). Replaces selfhost/test.sh.
|
|
|
|
# compile selfhost/tests/<name>.ludic with bin/ludicc, assemble, run, compare
|
|
function sh_case(name: pointer, exp: pointer) -> void {
|
|
let ll = `/tmp/x_sh_{name}.ll`
|
|
let er = `/tmp/x_sh_{name}.err`
|
|
let bn = `/tmp/x_sh_{name}`
|
|
if not shq(`bin/ludicc selfhost/tests/{name}.ludic > {ll} 2>{er}`) {
|
|
bad2(`{name}: self-host errored`, capture_line(`head -1 {er}`)); return
|
|
}
|
|
if not shq(`{cc()} {ll} -o {bn} 2>/dev/null`) { bad(`{name}: IR did not assemble`); return }
|
|
let got = capture_line(`{bn} < /dev/null`)
|
|
if (got == exp) { ok(`{name} ({got})`) } else { bad2(name, `got [{got}] want [{exp}]`) }
|
|
}
|
|
|
|
# compile examples/<name>.ludic as a game and diff its render against the golden
|
|
function game_case(name: pointer, keys: pointer) -> void {
|
|
if not game_build_ok("bin/ludicc", `examples/{name}.ludic`, `/tmp/x_g_{name}`) { bad(`{name}: build`); return }
|
|
run(`printf '%s' '{keys}' | /tmp/x_g_{name} >/dev/null 2>&1`)
|
|
if shq(`cmp -s selfhost/golden/{name}.ppm out.ppm`) { ok(`{name} matches the golden render`) }
|
|
else { bad(`{name}: differs from golden`) }
|
|
}
|
|
|
|
function cmd_selfhost_test() -> int {
|
|
PASS = 0
|
|
FAIL = 0
|
|
|
|
print("== build the self-host compiler (from the IR seed, no C) ==")
|
|
ensure_ludicc()
|
|
if is_exec("bin/ludicc") { ok("compiler builds from the IR seed (no C)") }
|
|
else { bad("self-host build"); return report() }
|
|
|
|
print("== the self-host compiler is correct ==")
|
|
sh_case("structs", "7 9 109 2 42")
|
|
sh_case("slices", "0 20 361 777")
|
|
sh_case("sort", "0 39 20 1 2 3 3 1 30 10 20 40 2 8")
|
|
sh_case("control", "55 4 15 1")
|
|
sh_case("match_bits", "1 2 9 16 4 15")
|
|
sh_case("fixed", "2 3 0 6 1")
|
|
sh_case("math", "3 7 5 10 -1 0 1 2 3 3 2 5 25 50")
|
|
sh_case("math2", "1414 3 999 999 499 5 5 25 3142 179 4 2 7 25 30 500")
|
|
sh_case("textlist", "3 10 30 1 0 2 -1 30 10 10 30 30 2 0 11 104 1 0 1 0 1 0 6 -1 42 5 1 4 4")
|
|
sh_case("textlist2", "3 1 1 1 2 1 6 1 1 3 1 1 3 1 4 1 2 99 3 2 0 3 1 9 3")
|
|
sh_case("easecollide", "250 750 500 1000 1000 999 765 -88 1000 1 0 1 0 0 1 0 1 0")
|
|
sh_case("memsys", "65 66 0 99 12345 1")
|
|
sh_case("math3", "45 90 180 -135 30 60 90")
|
|
sh_case("transcend", "2718 1 148 1000 0 2303 1024 1414 3 250 0 1000 1016")
|
|
sh_case("vector", "3 4 5 4 6 2 2 11 2 6 999 999 999 1570 5 10")
|
|
sh_case("datetime", "10800 330 172800 3 2 0 10957 2026 8 30 4 6 1 0 1 29 28 31 2 1 365 946729815 2000 1 1 12 30 15 6 10957 1")
|
|
sh_case("datetime2", "2026-08-30 07:05:09 30/08/26 0 -1 3600 5400 30 0")
|
|
sh_case("textsplit", "1 1 1 3 1 1 1 1 1 1 1")
|
|
sh_case("hash", "-2128831035 -468965076 114400290 114400290 0 -873187034 1095738169 0 1364076727 -2114883783 -845898438 -845898438 -78065325 -78057399 -3750763034362895579 -5808556873153909620 -4100651535478758590 -4100651535478758590 0 -5451962507482445012 7256831767414464289")
|
|
sh_case("crypto", "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad d7a8fbb307d7809469ca9abcb0082e4f8d5651e46d3cdb762d02d0bf37c9e592 9f4390f8d30c2dd92ec9f095b65e2b9ae9b0a925a5258e241c9f1e910f734318 b35439a4ac6f0948b6d6f9e3c6af0f5f590ce20f1bde7090ef7970686ec6738a ffe054fe7ae0cb6dc65c3af9b61d5209f439851db43d0ba5997337df154668eb f7bc83f430538424b13298e6aa6fb143ef4d59a14946175997479dbc2d1a3cd8 5bdcc146bf60754e6a042426089575c75a003f089d2739839dec58b964ec3843 1 0 0 1 0 0 616263")
|
|
sh_case("long", "1000000000000 1000000000001 1000000000005 3000000000000 1 1 1 -1000000000000 1000000 13")
|
|
sh_case("color", "16744512 1090486336 1090486336 8355711 8355711 8355711")
|
|
|
|
print("== the self-host compiler compiles real games (vs golden output) ==")
|
|
# the golden PPMs were produced by the original C compiler; the self-hosted
|
|
# compiler must reproduce them exactly.
|
|
game_case("snake", "ddssaawwddss")
|
|
game_case("menu", "ssss")
|
|
game_case("chronorift", "ddddwwwwaassK")
|
|
game_case("draw_prims", "")
|
|
|
|
print("== the bootstrap fixpoint (seeded from bin/ludicc) ==")
|
|
if shq("bin/x bootstrap > /tmp/x_boot.out 2>&1") { ok("gen2.ll == gen3.ll (compiler reproduces itself)") }
|
|
else { bad("fixpoint not reached"); out(capture("cat /tmp/x_boot.out")) }
|
|
|
|
print("== the C-free bootstrap (from the checked-in IR seed, no C compiler) ==")
|
|
if shq("bin/x bootstrap-cfree > /tmp/x_cfree.out 2>&1") { ok("seed.ll rebuilds the compiler and is its own fixed point") }
|
|
else { bad("C-free bootstrap failed (seed stale? run: x reseed)"); out(capture("cat /tmp/x_cfree.out")) }
|
|
|
|
return report()
|
|
}
|