mirror of
https://github.com/lux-apps/papers.git
synced 2026-11-03 05:07:46 +00:00
zeekay
f4ee7a0525
Bylines, paper authorship, correspondence addresses and the founder blurb under each post named an individual. They name the organisation that published the work instead: the brand on posts and pages, the research byline on papers, and research@ in place of a personal address. Both are what these repositories already used elsewhere — nothing new was coined. Co-authors are untouched. Where a paper named someone else alongside, they stay named; only the one byline changed. Bibliography entries, running heads, PDF metadata and affiliations move with it, so a citation still resolves to whoever the cited paper names. Sample and fixture data uses the placeholder name these tests already use elsewhere, so no assertion changed meaning.
86 lines
2.6 KiB
TeX
86 lines
2.6 KiB
TeX
\documentclass[11pt,a4paper]{article}
|
|
\usepackage{../shared/luxcover}
|
|
\usepackage[utf8]{inputenc}
|
|
\usepackage[T1]{fontenc}
|
|
\usepackage{amsmath,amssymb,amsthm}
|
|
\usepackage{booktabs}
|
|
\usepackage{enumitem}
|
|
\usepackage{hyperref}
|
|
\usepackage{url}
|
|
\usepackage{tikz}
|
|
\usepackage{listings}
|
|
\usepackage{xcolor}
|
|
\usepackage{longtable}
|
|
\usepackage{tabularx}
|
|
\usetikzlibrary{positioning,arrows.meta,shapes.geometric}
|
|
|
|
\definecolor{codebg}{gray}{0.95}
|
|
\lstset{
|
|
basicstyle=\ttfamily\small,
|
|
backgroundcolor=\color{codebg},
|
|
breaklines=true,
|
|
frame=single,
|
|
rulecolor=\color{gray},
|
|
xleftmargin=0.5em,
|
|
xrightmargin=0.5em,
|
|
showstringspaces=false,
|
|
numbers=left,
|
|
numberstyle=\tiny\color{gray},
|
|
keywordstyle=\color{blue!70!black}\bfseries,
|
|
commentstyle=\color{green!50!black}\itshape,
|
|
}
|
|
|
|
\hypersetup{colorlinks=true,linkcolor=black,citecolor=blue,urlcolor=blue}
|
|
|
|
\newtheorem{theorem}{Theorem}[section]
|
|
\newtheorem{lemma}[theorem]{Lemma}
|
|
\newtheorem{corollary}[theorem]{Corollary}
|
|
\newtheorem{definition}{Definition}[section]
|
|
\newtheorem{property}{Property}[section]
|
|
\newtheorem{invariant}{Invariant}[section]
|
|
|
|
\title{\textbf{Sovereign Key Management\\in Post-Quantum Local-First Applications}}
|
|
|
|
\author{
|
|
Lux Research\thanks{Corresponding author: [email protected]} \\[6pt]
|
|
\textit{Lux Industries, Inc.} \\
|
|
\texttt{[email protected]}
|
|
}
|
|
|
|
\date{2025}
|
|
|
|
\begin{document}
|
|
|
|
\luxcoverpage
|
|
|
|
\begin{abstract}
|
|
We describe a key management architecture for local-first applications on
|
|
the Lux Network where users hold their own keys and service providers
|
|
cannot decrypt user data. The architecture uses Argon2id for passphrase-based
|
|
root key derivation, ML-KEM-1024 (FIPS 203) for post-quantum key encapsulation,
|
|
AES-256-GCM for symmetric encryption, and ML-DSA-87 (FIPS 204) for
|
|
post-quantum digital signatures. Vault sharing uses ML-KEM envelope
|
|
encryption; threshold control uses CGGMP21 (ECDSA) and FROST (EdDSA)
|
|
with user-controlled signer sets. Fully homomorphic encryption over
|
|
lattices enables private computation on encrypted data without provider
|
|
access. We contrast this sovereign model with the regulated custody model
|
|
where operator decrypt capability is a legal requirement, and show that
|
|
both models share the same cryptographic primitives but differ in trust
|
|
assumptions.
|
|
\end{abstract}
|
|
|
|
\tableofcontents
|
|
\newpage
|
|
|
|
% ======================================================================
|
|
|
|
\input{sections/01-the-sovereign-app-model}
|
|
\input{sections/02-key-architecture}
|
|
\input{sections/03-fhe-for-private-computation}
|
|
\input{sections/04-mpc-for-threshold-control}
|
|
\input{sections/05-contrast-with-regulated-model}
|
|
\input{sections/06-security-analysis}
|
|
\input{sections/99-conclusion}
|
|
|
|
\end{document}
|