mirror of
https://github.com/luxfi/corona.git
synced 2026-09-24 00:25:54 +00:00
zeekay
fbe2bc5a88
Adds the NIST MPTC Class N1 + N4 submission package for Corona (R-LWE
threshold signing). Pattern mirrors luxfi/pulsar (M-LWE byte-equal
FIPS 204 path), adapted HONESTLY to Corona's lighter proof tier:
- SUBMISSION.md / NIST-SUBMISSION.md — cover sheet + 1-page exec
summary. Cite Boschini-Kaviani-Lai-Malavolta-Takahashi-Tibouchi
ePrint 2024/1113 (IEEE S&P 2025) as the underlying construction.
Construction-level N1 claim (no FIPS standard target for R-LWE
threshold — Boschini et al. IS the spec). N4 = (A, bTilde)
preserved across reshare within a key era.
- SPEC.md — standalone construction specification consolidating
existing material (papers/lp-073-pulsar/, DESIGN.md). Full
single-doc spec/corona.tex is roadmap v0.6.0.
- PATENTS.md — royalty-free patent grant + defensive termination.
Claim scope EXCLUDES the published Boschini et al. construction;
claims limited to Corona's production lifecycle additions
(Pedersen DKG over R_q, proactive resharing, activation cert
circuit-breaker, constant-time Pedersen slot equality, hash-suite
injection).
- PROOF-CLAIMS.md — HONEST framing. Corona ships NO mechanized
refinement (no EasyCrypt, no Lean, no Jasmin) — unlike Pulsar.
Correctness reduces to code review + KAT cross-runtime byte-equality
+ academic construction analysis + per-path constant-time static
audit. Mechanized refinement is roadmap v0.7.0.
- TRUSTED-COMPUTING-BASE.md — implementation TCB. Structurally
simpler than Pulsar's; no EC/Lean/Jasmin tools in scope.
- DEPLOYMENT-RUNBOOK.md — operator-facing trust-model disclosure.
- LICENSING.md / CONTRIBUTING.md / SECURITY.md — standard NIST-MPTC
artifacts.
- docs/mptc/ — submission-package docs subdir (kept separate from
docs/ Next.js docs site):
- evaluation.md, ietf-draft-skeleton.md, nist-mptc-category.md,
patent-claims.md, design-decisions.md, family-architecture.md,
threat-model.md
- scripts/{build,test,bench,gen_vectors,check-high-assurance,
cut-submission}.sh — submission gates mirroring Pulsar's
orchestrator pattern, adapted to Corona's reality (no EC/Lean/
Jasmin checks because the artifacts do not exist).
- LLM.md + CHANGELOG.md — updated with submission scaffolding
context and v0.5.0 entry. NO fabricated prior history; CHANGELOG
v0.5.0 entry covers only the actual submission documentation.
DOES NOT FABRICATE: no CRYPTOGRAPHER-SIGN-OFF (Pulsar has one;
Corona's lighter proof tier does not yet warrant it — roadmap
v0.7.0+v0.8.0). No AXIOM-INVENTORY or FIPS-TRACEABILITY (Corona is
not anchored to a FIPS standard). No proof claims Corona does not
actually have.
Build/test verification: GOWORK=off go build ./... clean; sign/,
primitives/, hash/ unit tests pass; scripts/build.sh + scripts/
check-high-assurance.sh exit 0.
46 lines
1.6 KiB
Bash
Executable File
46 lines
1.6 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Corona reproducible build.
|
|
#
|
|
# Builds the Go reference implementation. Exits non-zero on any
|
|
# failure. Designed to be the CI gate.
|
|
|
|
set -euo pipefail
|
|
|
|
REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
cd "$REPO_ROOT"
|
|
|
|
# Build in module-only mode. A surrounding workspace (e.g. ~/work/lux/go.work)
|
|
# does not own this repo's deps and must be bypassed deliberately so reviewers
|
|
# get the same view CI gets.
|
|
export GOWORK=off
|
|
|
|
echo "==> Go reference build"
|
|
go build ./...
|
|
|
|
# LaTeX paper-section build is optional — the canonical at this submission
|
|
# revision is SPEC.md (Markdown) + LaTeX paper sections at
|
|
# papers/lp-073-pulsar/. Build them only if latexmk is available.
|
|
if [[ -d "$REPO_ROOT/papers/lp-073-pulsar" ]]; then
|
|
if [[ -x /Library/TeX/texbin/latexmk ]] && ! command -v latexmk >/dev/null 2>&1; then
|
|
export PATH="/Library/TeX/texbin:$PATH"
|
|
fi
|
|
if command -v latexmk >/dev/null 2>&1; then
|
|
echo "==> LaTeX paper-section build"
|
|
(
|
|
cd papers/lp-073-pulsar
|
|
for tex in lp-073-pulsar-pedersen-dkg.tex lp-073-pulsar-resharing.tex; do
|
|
if [[ -f "$tex" ]]; then
|
|
latexmk -pdf -interaction=nonstopmode -file-line-error "$tex" || {
|
|
echo " [warn] $tex failed to build (continuing — paper sections are non-blocking at this submission revision)"
|
|
}
|
|
fi
|
|
done
|
|
)
|
|
else
|
|
echo " [info] latexmk not found; skipping paper-section PDF build"
|
|
echo " [info] (paper PDFs are non-blocking; submission canonical spec is SPEC.md at this revision)"
|
|
fi
|
|
fi
|
|
|
|
echo "==> done"
|