mirror of
https://github.com/lux-apps/papers.git
synced 2026-10-30 18:15:21 +00:00
zooqueen
ac61e71667
Scrub residual Ring-LWE mislabels of the Corona/Pulsar threshold
signature family per canonical decision-b (source: ringtail/sign/config.go
M=8,N=7, q=0x1000000004A01).
- Corona = Module-LWE (Ringtail-derived parameter set, A in R_q^{8x7}),
not Ring-LWE / not "Module-LWE at rank 1".
- Pulsar = Module-LWE (ML-DSA-65, FIPS-204 byte-equal).
- Corona+Pulsar differ by parameter regime/codebase, NOT hardness family:
intra-lattice parameter/implementation diversity, NOT family-disjoint.
- True family-disjoint defense = Magnetar (hash, SLH-DSA) / HQC (codes).
Reframed the false Corona(R-LWE)-vs-Pulsar(M-LWE) family-independence
across lp-219/lp-220/lp-222/lp-223 (P3Q kinds), lux-quasar-composition
(profile hardness table + composition corollary/proof), lux-magnetar-pq,
and the superseded triple-proof/quasar drafts (anonymous lattice
threshold lane = Corona). Legitimate FHE/TFHE Ring-LWE, NTT citations,
and neutral "rank-1" lattice facts left intact. PDFs rebuilt.
16 lines
1.0 KiB
TeX
16 lines
1.0 KiB
TeX
\section{Introduction}
|
|
|
|
|
|
Post-quantum cryptography faces a fundamental tension: the most promising post-quantum signature schemes (ML-DSA, SLH-DSA) produce signatures 50--100$\times$ larger than classical schemes (ECDSA, BLS), making them impractical for per-block consensus in high-throughput blockchains. Signature aggregation, which makes BLS practical for consensus (N signatures $\to$ 48 bytes), has no known post-quantum equivalent.
|
|
|
|
We resolve this tension with a layered approach:
|
|
|
|
\begin{enumerate}[leftmargin=2em]
|
|
\item \textbf{Per-block}: Use BLS aggregation for speed (48 bytes, sub-millisecond).
|
|
\item \textbf{Per-epoch}: Use STARK proofs to compress N ML-DSA signatures into $\sim$200 bytes.
|
|
\item \textbf{Embedded}: Corona threshold signatures provide privacy within the STARK circuit at zero additional cost.
|
|
\end{enumerate}
|
|
|
|
The result is a consensus mechanism that is simultaneously fast (1ms blocks), compact (248 bytes/epoch), post-quantum secure (ML-DSA + Corona), and privacy-preserving (anonymous validator participation).
|
|
|