mirror of
https://github.com/lux-apps/papers.git
synced 2026-11-03 05:07:46 +00:00
zeekay
ced35b03ed
Quasar Horizon (consensus composition over Pulsar / ML-DSA / BLS lanes
under Prism + LSS lifecycle), Warp 2.0 (Pulse-backed cross-chain envelope
with forward-only v1->v2 migration and lattigo ReadUint64Slice DoS fix),
benchmark report (microbench, reshare, activation, Warp 2.0 verify, Prism
composition, GPU headroom, cross-WAN latency), and NIST IR 8214C-style
submission package (spec, parameter sets, domain separation, serialization,
reference-impl pointers, evaluation report, security analysis, side-channel
considerations).
All four deliverables compile cleanly via pdflatex+bibtex and reference
the canonical proof bucket files at proofs/{definitions,pulsar,lss,quasar}.
No duplication of proof bodies; cite by file path.
60 lines
2.8 KiB
TeX
60 lines
2.8 KiB
TeX
\section{Conclusion}
|
|
|
|
\label{sec:conclusion}
|
|
%% =====================================================================
|
|
|
|
The architecture specified in this paper is a complete, auditable,
|
|
and operationally tractable custody design for an institutional
|
|
digital-asset fund at the eight-billion-dollar tier. Its load-bearing
|
|
properties are:
|
|
|
|
\begin{enumerate}[nosep]
|
|
\item \textbf{No single point of authority.} No custodian, cloud,
|
|
jurisdiction, vendor, or operator can move the fund's assets alone.
|
|
The minimum collusion required is three independent parties at the
|
|
cold tier, two at the warm tier, and two with a 24-hour delay at
|
|
the hot tier.
|
|
\item \textbf{No on-chain custody footprint.} Threshold MPC over
|
|
secp256k1 produces a single canonical signature on every chain; the
|
|
custody policy is invisible to the chain.
|
|
\item \textbf{Vendor and jurisdiction diversity.} Five HSM
|
|
share-holders span four vendor lines (Thales, Utimaco, Marvell,
|
|
Yubico) and at least three jurisdictions on the cold tier; warm tier
|
|
spans three jurisdictions.
|
|
\item \textbf{Post-quantum hedge.} Lux Triple Consensus
|
|
(LP-020 \cite{lp020}) on the M-Chain custody ledger
|
|
(LP-006 \cite{lp006}) provides forward security against future
|
|
quantum break of secp256k1.
|
|
\item \textbf{Compliance-ready.} The architecture maps directly to
|
|
SOC 2 Type II, ISO 27001:2022, CCSS Level 3, FIPS 140-2 Level 3,
|
|
MiCA, MAS PSN02, and US OCC trust-charter or NYDFS BitLicense
|
|
fiduciary controls.
|
|
\item \textbf{Operationally cheap.} Steady-state cost is
|
|
approximately 6.7 bps of AUM, comfortably below the 5--12 bps
|
|
typical of incumbent custodians and competitive even against the
|
|
low end of that band.
|
|
\end{enumerate}
|
|
|
|
The migration from any of the four leading incumbents (BitGo,
|
|
Fireblocks, Anchorage Digital, Coinbase Custody) is a 90-day
|
|
operation; the architecture can be in steady-state operation by
|
|
day 90 and fully audit-attested by day 180.
|
|
|
|
We emphasise that the design contains no novel cryptography. Every
|
|
component -- CGGMP21 threshold ECDSA, Feldman VSS distributed
|
|
key generation, Shamir secret sharing, vendor-attested HSM-resident
|
|
keys, BLS+ML-DSA hybrid audit log -- is published, peer-reviewed,
|
|
and deployed in production at multiple institutions. The
|
|
contribution of this paper is the integration: the specification
|
|
that places each component on the path that does the most work, and
|
|
the operational policy that ensures the integration's properties
|
|
hold under realistic adversaries and realistic ops teams.
|
|
|
|
The architecture is implemented end-to-end in the
|
|
\texttt{luxfi/mpc} and \texttt{luxfi/hsm} reference codebases.
|
|
Reference deployment manifests, ceremony run-books, SOC 2 control
|
|
narratives, and CCSS evidence packages are available to
|
|
implementors under the licence terms of those repositories.
|
|
|
|
%% =====================================================================
|