mirror of
https://github.com/fenleon/open-madrid.git
synced 2026-10-22 16:12:35 +00:00
NacValidationTest.mintReproducesLiveVendoredStamp reproduces the accepted genuine prefpane stamp byte-for-byte from recovered live inputs: the rngPad130 is recoverable from the stamp itself (domergestep2 is XOR-invertible — dm(x, in2) = state(in2) XOR x), session250 is the genuine descrambler's own inversion, and the scramble pad is thread-RNG filled inside scramble_body (second code path, disasm 0x179654d) — the session-32 'rng_pad130' verdict is corrected. Live A/Bs eliminate the TLS transport (ClientHello byte-equivalence), request shape, and staleness; the prefpane ICLOUD_INVALID_DEVICE_TOKEN blocker narrows to the machine's IDS registration freshness (the reference runs wa/register x2 before the delegate sign-in; a pre-prefpane register on our side answers 6004 transient-retry). Spec rev 47 + NAC-NOTES session-33 addendum.