mirror of
https://github.com/lux-apps/papers.git
synced 2026-11-03 05:07:46 +00:00
zeekay
f4ee7a0525
Bylines, paper authorship, correspondence addresses and the founder blurb under each post named an individual. They name the organisation that published the work instead: the brand on posts and pages, the research byline on papers, and research@ in place of a personal address. Both are what these repositories already used elsewhere — nothing new was coined. Co-authors are untouched. Where a paper named someone else alongside, they stay named; only the one byline changed. Bibliography entries, running heads, PDF metadata and affiliations move with it, so a citation still resolves to whoever the cited paper names. Sample and fixture data uses the placeholder name these tests already use elsewhere, so no assertion changed meaning.
87 lines
3.6 KiB
TeX
87 lines
3.6 KiB
TeX
\documentclass[11pt,a4paper]{article}
|
|
\usepackage{../shared/luxcover}
|
|
\usepackage[utf8]{inputenc}
|
|
\usepackage{amsmath,amssymb,amsfonts,amsthm}
|
|
\usepackage{graphicx}
|
|
\usepackage{hyperref}
|
|
\usepackage{algorithm}
|
|
\usepackage{algpseudocode}
|
|
\usepackage{xcolor}
|
|
\usepackage{booktabs}
|
|
\usepackage{enumitem}
|
|
\usepackage{tikz}
|
|
|
|
\hypersetup{colorlinks=true,linkcolor=black,citecolor=blue,urlcolor=blue}
|
|
|
|
\newtheorem{theorem}{Theorem}[section]
|
|
\newtheorem{lemma}[theorem]{Lemma}
|
|
\newtheorem{corollary}[theorem]{Corollary}
|
|
\newtheorem{proposition}[theorem]{Proposition}
|
|
\newtheorem{definition}{Definition}[section]
|
|
\newtheorem{remark}{Remark}[section]
|
|
|
|
\title{\textbf{Corona: Two-Round Module-LWE Threshold\\Signatures for Public Permissionless Chains}}
|
|
|
|
\author{
|
|
Lux Research\thanks{Corresponding author: [email protected]}
|
|
\quad
|
|
Vishnu Seesahai\\
|
|
\textit{Lux Industries, Inc.}\\
|
|
\texttt{[email protected]}
|
|
}
|
|
|
|
\date{2024}
|
|
|
|
\begin{document}
|
|
|
|
\luxcoverpage
|
|
|
|
\begin{abstract}
|
|
We present Corona, a two-round Module-LWE threshold signature scheme designed for
|
|
public, permissionless blockchain consensus. Corona enables any $t$-of-$n$ subset of
|
|
a validator set to collaboratively sign blocks without any single party ever holding
|
|
the full secret key, while providing security against quantum adversaries. The scheme
|
|
operates in two rounds: a message-independent precomputation and commitment round,
|
|
followed by a signing round, with a non-interactive combine producing the final
|
|
aggregate signature.
|
|
Corona is Lux's first-party fork of Ringtail~(Boschini et al., IACR ePrint 2024/1113).
|
|
It builds on the Module-LWE assumption over the cyclotomic ring
|
|
$R_q = \mathbb{Z}_q[X]/(X^N + 1)$ with $N = 256$ and a 48-bit prime modulus
|
|
$q = \texttt{0x1000000004A01}$, instantiated as a module of dimension $M = 8 \times N' = 7$:
|
|
the public key is a matrix relation $\mathbf{b} = \mathbf{A}\mathbf{s} + \mathbf{e}$ with
|
|
$\mathbf{A} \in R_q^{M \times N'}$, $\mathbf{s} \in R_q^{N'}$, and $\mathbf{e} \in R_q^{M}$,
|
|
with Module-SIS commitments. We prove that the scheme achieves existential unforgeability
|
|
under chosen-message attacks (EUF-CMA) in the random oracle model, reducing security to
|
|
the hardness of Module-LWE together with Module-SIS, at NIST security Category~1
|
|
($\sim$128-bit classical, $\sim$130-bit quantum). A Corona threshold signature is
|
|
approximately 33--35\,KB and verifies in approximately 1.6\,ms; it is \emph{not}
|
|
byte-equal to any FIPS standard (that byte-equality is a property of the sibling scheme
|
|
Pulsar, LP-4450, not of Corona).
|
|
Corona's distinguishing contribution is making the academic two-round lattice threshold
|
|
construction work for public, permissionless validator sets that change over time:
|
|
leaderless distributed key generation with no trusted dealer (Feldman/Pedersen
|
|
commitments), dynamic resharing across a changing validator set, and on-chain ceremony
|
|
binding anchored to the Lux Q-Chain. It is the intra-lattice diversity leg of the
|
|
Aurora certificate profile (Pulsar $\|$ Corona) under Quasar, verified by the raw EVM
|
|
precompile at \texttt{0x012206}. Corona is a distinct production artifact derived from
|
|
Ringtail.
|
|
\end{abstract}
|
|
|
|
\tableofcontents
|
|
\newpage
|
|
|
|
%% -----------------------------------------------------------------------
|
|
%% 1. INTRODUCTION
|
|
%% -----------------------------------------------------------------------
|
|
|
|
\input{sections/01-introduction}
|
|
\input{sections/02-preliminaries}
|
|
\input{sections/03-the-corona-scheme}
|
|
\input{sections/04-security-analysis}
|
|
\input{sections/05-integration-with-lux-quasar}
|
|
\input{sections/06-empirical-evaluation}
|
|
\input{sections/07-related-work}
|
|
\input{sections/99-conclusion}
|
|
|
|
\end{document}
|