mirror of
https://github.com/lux-apps/papers.git
synced 2026-11-03 05:07:46 +00:00
zooqueen
ed0d9cabdf
Scrub residual Ring-LWE mislabels of the Corona/Pulsar threshold
signature family per canonical decision-b (source: ringtail/sign/config.go
M=8,N=7, q=0x1000000004A01).
- Corona = Module-LWE (Ringtail-derived parameter set, A in R_q^{8x7}),
not Ring-LWE / not "Module-LWE at rank 1".
- Pulsar = Module-LWE (ML-DSA-65, FIPS-204 byte-equal).
- Corona+Pulsar differ by parameter regime/codebase, NOT hardness family:
intra-lattice parameter/implementation diversity, NOT family-disjoint.
- True family-disjoint defense = Magnetar (hash, SLH-DSA) / HQC (codes).
Reframed the false Corona(R-LWE)-vs-Pulsar(M-LWE) family-independence
across lp-219/lp-220/lp-222/lp-223 (P3Q kinds), lux-quasar-composition
(profile hardness table + composition corollary/proof), lux-magnetar-pq,
and the superseded triple-proof/quasar drafts (anonymous lattice
threshold lane = Corona). Legitimate FHE/TFHE Ring-LWE, NTT citations,
and neutral "rank-1" lattice facts left intact. PDFs rebuilt.
27 lines
1.4 KiB
TeX
27 lines
1.4 KiB
TeX
\section{Introduction}
|
|
|
|
P3Q (LP-219) is the unified-slot post-quantum verifier framework at
|
|
EVM precompile slot \texttt{0x012205}: one slot, one ABI, and a
|
|
leading \texttt{kind} byte that dispatches into a per-kind
|
|
threshold-signature verifier core. This paper specifies
|
|
\emph{kind $0x01$ Pulsar}, the Module-LWE member of the P3Q family.
|
|
|
|
For the slot allocation, the kind-byte dispatch ABI, the
|
|
\texttt{P3QVerifier} Go interface that registers each kind, and the
|
|
cross-family composition into LP-217 cert profile modes, see LP-219.
|
|
The sibling kinds are specified in LP-220 (Corona / Module-LWE) and
|
|
LP-222 (Magnetar / hash-based FIPS-205 SLH-DSA).
|
|
|
|
Pulsar reduces to the hardness of Module-LWE --- the
|
|
assumption underlying the FIPS-204 ML-DSA standard --- which it
|
|
shares with its sibling Corona (Module-LWE at the Ringtail
|
|
parameter set); the two differ in parameter regime and codebase,
|
|
not hardness family. Pulsar's family-independent sibling is the
|
|
hash-based Magnetar kind, whose SHA-3 collision assumption is
|
|
disjoint from the lattice family. It is the lowest-gas P3Q kind
|
|
(\SI{50000}{gas}), the first wired on-chain, and the PQ-fast leg of
|
|
the LP-217 cert profile ladder. Its CPU verifier is byte-equal to
|
|
the FIPS-204 standard and is wired today; throughout this paper
|
|
performance numbers are tagged \textbf{measured} or
|
|
\textbf{projected}, and GPU dispatch is projected, not measured.
|