mirror of
https://github.com/lux-apps/papers.git
synced 2026-10-30 18:15:21 +00:00
zeekay
ca327f37cb
Pulsar (LP-073, LP-223): the dealer is DEAD AT BOTH ENDS. - Keygen: dealerless via Mithril short replicated secret sharing (Celi-del Pino-Espitau-Niot-Prest, ia.cr/2026/013, USENIX Sec 2026) -- the published escape from the naive-additive-S_eta wall; group key signs under the STOCK FIPS-204 verifier (compatibility PROVEN), per-subset mod-q reduction unblocks large committees (n=16,t=14). Replaces the old 'key generation stays trusted-dealer / provably unreachable' claim everywhere. - Signing: no-reconstruct hyperball 3-round signer (z_j=y_j+c*s1_(j); no party forms s1/s2/seed/sk; mask y never serialised), verifies under stock ML-DSA. CI invariant forbids trusted-dealer keygen in production files. - Claim discipline: (A) standard-FIPS-204-verifier-COMPATIBLE = PROVEN vs (B) full FIPS-204 KeyGen-distribution-EQUIVALENCE = labeled open residual; malicious-HARDENED != fully-malicious-secure-PROVEN. Versions -> pulsar v1.7.1, threshold v1.10.2, consensus v1.29.1, mlwe shared base. - Fixed pre-pivot staleness: Pulsar sig is byte-equal ML-DSA-65 (~3.3KB), not the ~33KB 48-bit (c,z,Delta) shared kernel; q=8380417 production. Corona (LP-220): Module-LWE (Ringtail/Raccoon, M=8 N=7, q=0x1000000004A01), natively dealerless (Pedersen-VSS noise-flooded), no-reconstruct signing, consumes shared luxfi/mlwe. Both lattice legs now dealerless -> Corona is defence-in-depth, NOT the sole permissionless-public carrier. P3Q kind-0x02 dispatch still abiFalse, but the library landed + dedicated 0x012206 wired. Dual-leg diversity (LP-020, LP-220, LP-magnetar): Corona + Pulsar BOTH Module-LWE -> distinct schemes/params, adversary must break BOTH, strictly stronger than either; NOT hardness-disjoint -- assumption-disjoint leg is hash-based Magnetar (SLH-DSA). Cite Mithril ia.cr/2026/013. Scan targets: lp-020 (Ring-LWE->Module-LWE, versions, residual B), lp-stricte2epq (canonical-status note: byte-equal FIPS-204, sampled small committees n=8/t=7/m=12/r=8 not single n=64; sig sizes), lp-magnetar (Corona Ring-LWE->Module-LWE). All 6 PDFs rebuilt clean (pdflatex+bibtex+pdflatex x2): lp-073 59pp, lp-220 8pp, lp-223 5pp, lp-020 32pp, lp-stricte2epq 47pp, lp-magnetar 13pp.
31 lines
1.7 KiB
TeX
31 lines
1.7 KiB
TeX
\section{Introduction}
|
|
|
|
P3Q (LP-219) is the unified-slot post-quantum verifier framework at
|
|
EVM precompile slot \texttt{0x012205}: one slot, one ABI, and a
|
|
leading \texttt{kind} byte that dispatches into a per-kind
|
|
threshold-signature verifier core. This paper specifies
|
|
\emph{kind $0x02$ Corona}, the Module-LWE member of the P3Q family.
|
|
|
|
For the slot allocation, the kind-byte dispatch ABI, the
|
|
\texttt{P3QVerifier} Go interface that registers each kind, and the
|
|
cross-family composition into LP-217 cert profile modes, see LP-219.
|
|
The sibling kinds are specified in LP-223 (Pulsar / rank-$k$
|
|
Module-LWE) and LP-222 (Magnetar / hash-based FIPS-205 SLH-DSA).
|
|
|
|
Corona reduces to the hardness of Module-LWE (Ringtail/Raccoon lineage,
|
|
built on the two-round construction of eprint 2024/1113). It shares the
|
|
Module-LWE \emph{hardness family} with its sibling Pulsar
|
|
(kind~$0x01$) --- the two differ in parameter regime and codebase, not
|
|
hardness family, so pairing them buys construction- and parameter-level
|
|
diversity (an adversary must break both), not hardness-family-disjoint
|
|
insurance; that comes only from the hash-based Magnetar kind
|
|
(kind~$0x03$, SHA-3 collision). Corona is the Module-LWE
|
|
parameter-diversity leg of the LP-217 PQ-strict posture, calibrated at
|
|
\SI{5000000}{gas}. Performance numbers are tagged \textbf{measured} or
|
|
\textbf{projected}. Corona's threshold library has landed (\texttt{corona
|
|
v0.10.x}; the dedicated Corona precompile at \texttt{0x012206} is wired);
|
|
the \emph{P3Q-family} kind-$0x02$ dispatch entry at \texttt{0x012205}
|
|
remains reserved and returns \texttt{abiFalse} via
|
|
\texttt{ErrKindNotImplemented} until that dispatch is wired, and GPU
|
|
dispatch is projected, not measured.
|