mirror of
https://github.com/luxfi/corona.git
synced 2026-09-24 00:25:54 +00:00
zeekay
49630bb398
wire/wire.go — pulsar's wire-format hardening boundary. Untrusted lattice Vector[Poly] frames now flow through luxfi/math/codec.Reader so the bounded-decode contract is centralized: no recursion, no hidden growth, no unbounded allocation. Replaces the test-only validateVectorPolyFrameInline walker that lived at threshold/fuzz_round_test.go with a production-grade equivalent on the canonical luxfi/math/codec substrate. Tests: * TestValidateVectorPolyFrame_RejectsHugeLength — regression for lattice issue #4 (70-trillion-element attack input). Same input the original fuzz finding produced, now rejected with codec.ErrLimitExceeded via the shared math substrate. * TestValidateVectorPolyFrame_HappyPath — 3-element accept. * TestValidateVectorPolyFrame_AtCap — exactly MaxLatticeUintSliceLen accepted. * TestValidateVectorPolyFrame_OverCap — MaxLatticeUintSliceLen+1 rejected. go.mod bumps luxfi/math v1.2.4 -> v1.3.0 (the LP-107 substrate release with codec/ + params/ + backend/ + modarith/ + ntt/ + poly/ + rns/ + sample/). This is the first downstream consumer of the math substrate. Lens, FHE, and lattice consumers follow.
28 lines
898 B
AMPL
28 lines
898 B
AMPL
module github.com/luxfi/pulsar
|
|
|
|
go 1.26.1
|
|
|
|
require (
|
|
github.com/luxfi/lattice/v7 v7.1.0
|
|
github.com/luxfi/math v1.3.0
|
|
github.com/montanaflynn/stats v0.9.0
|
|
github.com/spf13/cobra v1.10.2
|
|
github.com/zeebo/blake3 v0.2.4
|
|
golang.org/x/crypto v0.49.0
|
|
)
|
|
|
|
require (
|
|
github.com/ALTree/bigfloat v0.2.0 // indirect
|
|
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
|
|
github.com/google/go-cmp v0.7.0 // indirect
|
|
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
|
github.com/klauspost/cpuid/v2 v2.3.0 // indirect
|
|
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
|
|
github.com/spf13/pflag v1.0.10 // indirect
|
|
github.com/stretchr/testify v1.11.1 // indirect
|
|
github.com/zeebo/assert v1.3.0 // indirect
|
|
golang.org/x/exp v0.0.0-20260312153236-7ab1446f8b90 // indirect
|
|
golang.org/x/sys v0.42.0 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
)
|