lux/chains
2
0
Fork 0
mirror of https://github.com/luxfi/chains.git synced 2026-09-24 00:26:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Cite the specs by the numbers they carry

Browse Source 
LP-134 was renumbered LP-1340 (lp-1340-lux-chain-topology); 21 citations
across 16 files still named the old number, which resolves to nothing.

Corona rests on Module-LWE, not Ring-LWE — LP-4805 says so in three places
and b17e086 already corrected one file, leaving evm/main.go and
schain/SECURITY_review.md claiming the wrong hardness assumption. The
two-family argument in LP-4900 depends on which lattice problem this is.

P3Q at 0x012205 is kind-byte signature dispatch; STARK/FRI is starkfri at
0x012220 (LP-7050). Naming P3Q for a scheme at another slot describes a
precompile that is not the one being imported.

Carries the substance of 2f22fa2, the one commit the parallel line held that
this history did not.
This commit is contained in:
zeekay
2026-09-01 01:40:34 -07:00
parent 6aa5b77a44
commit c0d4022c71
18 changed files with 24 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
LLM.md
+1 -1
View File
@@ -110,7 +110,7 @@ TheGapSinceTheLastBlock` measures exactly that. Removing it means counting
lifetimes in block heights, which no proposer can rewind — a change to the grant
API, not a patch.
T-Chain is gone entirely — LP-134 dissolves it with zero remainder (threshold
T-Chain is gone entirely — LP-1340 dissolves it with zero remainder (threshold
signing → M, FHE → F, cross-chain messaging/teleport → B). There is no
`teleportvm` here and no `teleportvm` VM ID in `luxfi/constants`.
PLUGGABLE.md
+1 -1
View File
@@ -19,7 +19,7 @@ operator daemons (no luxd validator required), the same way `mpcd` and
| I-Chain (identity) | `chains/identityvm/` | `luxfi/id` | n/a |
M and F are both canonical here — they are written in this repo, not shimmed
from another. They divide the work LP-134 took off T-Chain: M does threshold
from another. They divide the work LP-1340 took off T-Chain: M does threshold
signing and bridge custody, F coordinates confidential compute. F wraps the FHE
runtime library at `mpcvm/fhe/`, which stays where it is because `mpcvm` also
uses it; F reuses that package's types and threshold parameters and owns its own
README.md
+1 -1
View File
@@ -60,7 +60,7 @@ are the ten chains live on 96369.
| Name | Status |
|------|--------|
| `teleportvm` / T-Chain | **Removed.** LP-134 dissolves T-Chain with zero remainder: threshold signing → M-Chain, FHE → F-Chain, cross-chain messaging/teleport → B-Chain (`bridgevm`). LP-5013 and LP-7330 are deprecated by LP-134; see LP-7050 for the migration map. No `teleportvm` VM ID exists in `luxfi/constants`. |
| `teleportvm` / T-Chain | **Removed.** LP-1340 dissolves T-Chain with zero remainder: threshold signing → M-Chain, FHE → F-Chain, cross-chain messaging/teleport → B-Chain (`bridgevm`). LP-5013 and LP-7330 are deprecated by LP-1340; see LP-7050 for the migration map. No `teleportvm` VM ID exists in `luxfi/constants`. |
| `servicenodevm` | **Never existed.** The service-node registry was never built under this name; the S-Chain directory here is `schain/` and is object storage, not a registry. |
### Plugin filenames
bridgevm/vm.go
+1 -1
View File
@@ -871,7 +871,7 @@ func (vm *VM) RemoveSigner(nodeID ids.NodeID, replacementNodeID *ids.NodeID) *Si
log.String("reshareSession", reshareSession),
)
// Trigger the reshare on M-Chain (LP-134) over warp. A failure here is
// Trigger the reshare on M-Chain (LP-1340) over warp. A failure here is
// retryable and does not undo the removal: the signer is out either way.
if err := vm.triggerReshareProtocol(reshareSession, nodeID, replacement); err != nil {
vm.log.Warn("bridgevm: reshare protocol not triggered",
evm/main.go
+2 -2
View File
@@ -35,10 +35,10 @@ import (
_ "github.com/luxfi/precompile/vrf" // 0x3213 ECVRF verify (RFC 9381)
// ── Post-Quantum (FIPS 203/204/205) — LP-4200 unified block ──────────
_ "github.com/luxfi/precompile/corona" // 0x012206 Corona (Ring-LWE threshold)
_ "github.com/luxfi/precompile/corona" // 0x012206 Corona (Module-LWE threshold)
_ "github.com/luxfi/precompile/mldsa" // 0x012202 ML-DSA (FIPS 204 — Module-LWE signature)
_ "github.com/luxfi/precompile/mlkem" // 0x012201 ML-KEM (FIPS 203 — Module-LWE KEM)
_ "github.com/luxfi/precompile/p3q" // 0x012205 P3Q (strict-PQ STARK / FRI / cSHAKE256)
_ "github.com/luxfi/precompile/p3q" // 0x012205 P3Q (kind-byte PQ threshold-sig dispatch)
_ "github.com/luxfi/precompile/pulsar" // 0x012204 Pulsar (Module-LWE threshold FIPS 204)
_ "github.com/luxfi/precompile/slhdsa" // 0x012203 SLH-DSA (FIPS 205 — hash-based signature)
_ "github.com/luxfi/precompile/xwing" // 0x2221 X-Wing hybrid KEM (X25519+ML-KEM)
mpcvm/LLM.md
+1 -1
View File
@@ -50,7 +50,7 @@ resolves a `CreateChainTx`'s vmID. `TestVMID_IsCanonicalAndStable` pins it.
the state root; key shares live under `n/`, node-private.
- Do **not** make `Block.Verify` trust the proposer. Every operation carries a
verifiable artifact and the block carries its post-state root.
- Do **not** reintroduce `t-chain`/`tchain` types or a "T-Chain". Per LP-134 /
- Do **not** reintroduce `t-chain`/`tchain` types or a "T-Chain". Per LP-1340 /
LP-7050 it is removed with zero remainder: MPC→M-Chain, FHE→F-Chain
(`fhevm`), teleport→B-Chain (`bridgevm`).
- Do **not** derive an external custody address with anything but Keccak-256.
mpcvm/README.md
+1 -1
View File
@@ -16,7 +16,7 @@ to do that on-chain instead of in an off-chain signer cluster.
- **Genesis chain.** M-Chain is in the P-Chain chain set at height 0 on every
network (`genesis/configs/*/mchain.json`), tracked by validators from boot —
not created later by a `CreateChainTx` someone has to remember to submit.
- Per LP-134 / LP-7050 there is no T-Chain and no `teleportvm`: teleport IS
- Per LP-1340 / LP-7050 there is no T-Chain and no `teleportvm`: teleport IS
`bridgevm` (B-Chain, LP-6000), and the FHE half of the retired ThresholdVM is
`fhevm` (F-Chain, LP-8200). Any identifier still naming "T-Chain" or
"ThresholdVM-as-a-chain" is stale.
mpcvm/cert/lane_test.go
+1 -1
View File
@@ -183,7 +183,7 @@ func TestRegistry_UnownedRegistryRefusesEveryLane(t *testing.T) {
// they are Quasar's own consensus and attestation lanes. Sweeping all 256
// encodable lane values rather than the ten named ones is deliberate: the lane
// arrives on the wire as a byte, so the ownership predicate has to answer for
// values LP-134 never assigned.
// values LP-1340 never assigned.
func TestRegistry_OwnerPartitionsTheLaneSpace(t *testing.T) {
for _, owner := range []struct {
owner Owner
mpcvm/cert/subject.go
+4 -4
View File
@@ -9,7 +9,7 @@ import (
)
// Roots is the set of upstream roots a Quasar 3.0 certificate_subject
// binds, mirroring the QuasarRoundDescriptor in LP-134.
// binds, mirroring the QuasarRoundDescriptor in LP-1340.
//
// All ten roots are required, including both MChain and FChain —
// this is the structural property that makes cross-chain replay
@@ -31,11 +31,11 @@ type Roots struct {
// BindSubject computes certificate_subject = H(... all roots ...).
// The hash domain is sha256 with a 1-byte version tag (0x01 for
// LP-134 v3.1) so future descriptor extensions can change the input
// LP-1340 v3.1) so future descriptor extensions can change the input
// set without colliding.
func BindSubject(r Roots) [32]byte {
h := sha256.New()
h.Write([]byte{0x01}) // LP-134 v3.1 descriptor version
h.Write([]byte{0x01}) // LP-1340 v3.1 descriptor version
h.Write(r.ParentBlock[:])
h.Write(r.StateRoot[:])
h.Write(r.ExecRoot[:])
@@ -62,7 +62,7 @@ func VerifySubject(claimed [32]byte, r Roots) error {
}
// RequireBothChains reports an error if either MChainCeremony or
// FChainFHE is zero — the LP-134 invariant that every round binds
// FChainFHE is zero — the LP-1340 invariant that every round binds
// **both** chain roots, even on rounds where one chain does not
// finalize a ceremony (the unchanged root from the previous round
// satisfies the binding).
mpcvm/cert/subject_test.go
+1 -1
View File
@@ -105,7 +105,7 @@ func TestSubject_VerifyAcceptsOnlyTheDerivedClaim(t *testing.T) {
// Each chain root is required on its own.
//
// LP-134 binds mchain_ceremony_root and fchain_fhe_root on every round, even
// LP-1340 binds mchain_ceremony_root and fchain_fhe_root on every round, even
// the rounds where one chain finalizes nothing (its unchanged root satisfies
// the binding). A check that only fired when *both* were zero would let a round
// that omits one chain through, and the subject would then attest to a single
mpcvm/fhe/relayer.go
+1 -1
View File
@@ -56,7 +56,7 @@ type CiphertextStorage interface {
Delete(handle common.Hash) error
}
// Relayer coordinates threshold decryption between C-Chain and F-Chain (FHE compute per LP-134; legacy: T-Chain)
// Relayer coordinates threshold decryption between C-Chain and F-Chain (FHE compute per LP-1340; legacy: T-Chain)
type Relayer struct {
logger log.Logger
decryptor *ThresholdDecryptor
mpcvm/service.go
+1 -1
View File
@@ -3,7 +3,7 @@
// service.go carves the (currently single, overloaded) threshold VM into
// three orthogonal SERVICE surfaces — ThresholdService, MPCService, FHEService
// — per LP-134 / LP-7050. This is the "separate what the primitive IS from
// — per LP-1340 / LP-7050. This is the "separate what the primitive IS from
// where it is APPLIED" decomposition (Hammock-driven composition, not
// inheritance).
//
mpcvm/service_test.go
+1 -1
View File
@@ -5,7 +5,7 @@ package mpcvm
import "testing"
// TestServiceSurfaces_Decomposition documents and locks the LP-134 / LP-7050
// TestServiceSurfaces_Decomposition documents and locks the LP-1340 / LP-7050
// service decomposition: the single *VM satisfies all three orthogonal
// surfaces today (compatibility bridge), and — critically — the layering is
// real, not cosmetic: MPCService and FHEService each EMBED ThresholdService,
mpcvm/state.go
+1 -1
View File
@@ -41,7 +41,7 @@ package mpcvm
// proves two nodes agree on the whole registry, but it cannot prove to a third
// party that one particular key is in it without replaying the log. That is
// enough for M-Chain's job (validators must agree on custody), and it is what
// LP-134's mchain_ceremony_root asks for. A Merkle registry root is the upgrade
// LP-1340's mchain_ceremony_root asks for. A Merkle registry root is the upgrade
// if external membership proofs are ever needed; it is deliberately not built
// on speculation.
mpcvm/types/share.go
+2 -2
View File
@@ -8,9 +8,9 @@ import (
"fmt"
)
// CertLane mirrors LP-134 §QuasarCertLane. We declare it here in the
// CertLane mirrors LP-1340 §QuasarCertLane. We declare it here in the
// substrate because the share envelope is the wire form on which
// every chain's verifier dispatches. The values must match LP-134
// every chain's verifier dispatches. The values must match LP-1340
// exactly. New lanes append; values never move.
type CertLane uint8
mpcvm/vm.go
+1 -1
View File
@@ -4,7 +4,7 @@
// Package mpcvm implements the shared threshold VM substrate — a LIBRARY,
// not a chain — consumed by M-Chain (MPC: CGGMP21/FROST/Pulsar-general threshold
// signing for bridge custody of external wallets, LP-7100) and F-Chain (FHE:
// TFHE compute / threshold decrypt, LP-8200). Per LP-134 / LP-7050 there is NO
// TFHE compute / threshold decrypt, LP-8200). Per LP-1340 / LP-7050 there is NO
// T-Chain and NO teleportvm; teleport IS bridgevm (B-Chain, LP-6000). Any live
// identifier still naming "T-Chain" or "ThresholdVM-as-a-chain" is stale.
// See ../README.md.
schain/SECURITY_review.md
+1 -1
View File
@@ -66,7 +66,7 @@ Note the 20-byte (160-bit) NodeID truncation: collision security ~80-bit classic
### 2.2 Validator / block / vote signatures — **PQ-ready HYBRID, strong design** ✅
`~/work/lux/consensus/protocol/quasar/`:
- Per-validator vote evidence can be **Pulsar (ML-DSA-65)**, **Corona (Ring-LWE threshold)**, **Magnetar (SLH-DSA / FIPS-205)**, or **classical BLS12-381** (`consensus_cert.go:178-191`).
- Per-validator vote evidence can be **Pulsar (ML-DSA-65)**, **Corona (Module-LWE threshold)**, **Magnetar (SLH-DSA / FIPS-205)**, or **classical BLS12-381** (`consensus_cert.go:178-191`).
- The finality certificate is a **policy-gated envelope** (`ConsensusCert`, `:296-340`). **Invariant I11** (`:80-83`, enforced `:741-750`): a classical-only cert is **rejected** under any policy requiring a PQ leg; classical (BLS) is accepted *only after every required PQ leg is already satisfied by PQ evidence* → `ErrMissingRequiredPQLeg`.
- Production profiles (`polaris.go:11-13`): **Pulsar** = BLS‖Puls‖ZK, **Aurora** = +Corona, **Polaris** = +Magnetar (cross-family). All require ≥1 PQ leg.
- Hybrid is explicit: `PolarisLegs.BLS *bls.Signature` is **optional / nil for pure-PQ** (`polaris.go:56-59`), always verified when present (`cert_policy_verify.go:122-128`).
zkvm/fhe/processor.go
+2 -2
View File
@@ -71,7 +71,7 @@ type Processor struct {
// Keys
publicKey *rlwe.PublicKey
secretKey *rlwe.SecretKey // Only for keygen - shares distributed to M-Chain (MPC) per LP-134
secretKey *rlwe.SecretKey // Only for keygen - shares distributed to M-Chain (MPC) per LP-1340
evalKeys *rlwe.MemEvaluationKeySet
// Threshold components
@@ -163,7 +163,7 @@ func (p *Processor) GenerateKeys() error {
}
// GenerateThresholdShares splits the secret key into threshold shares
// These shares should be distributed to M-Chain signers (per LP-134; legacy: T-Chain)
// These shares should be distributed to M-Chain signers (per LP-1340; legacy: T-Chain)
func (p *Processor) GenerateThresholdShares(partyPoints []multiparty.ShamirPublicPoint) ([]multiparty.ShamirSecretShare, error) {
if p.secretKey == nil {
return nil, errors.New("secret key not generated")