mirror of
https://github.com/luxfi/mpc.git
synced 2026-09-24 00:26:24 +00:00
zeekayandHanzo Dev
3ff4b4e9d9
mpcd implements only CGGMP21 (secp256k1 ECDSA), FROST (ed25519/ristretto), and LSS signing sessions — there is no bls12-381 threshold signing session. The KMS validator "bls" slot is secp256k1/CGGMP21; the "corona" slot is ed25519/FROST. Neither is bls12-381 aggregation nor post-quantum. A "post-quantum" claim over classical ed25519 is materially misleading. - deployments/customer-3of5/topology.yaml: the `bls` entry asserted curve=bls12-381, protocol=BLS-Threshold for "Lux consensus (validator signing)". Corrected to secp256k1/CGGMP21 (what is actually custodied) with a note that mpcd cannot threshold-sign bls12-381 and that Lux consensus BLS is a native per-validator key, never custodied here. (Customer manifest — highest priority.) - pkg/api/handlers_kms.go: the ValidatorKeySet doc called the custodied key a "Corona PQ-threshold key" — it is ed25519/FROST, not PQ and not the Corona R-LWE lattice protocol. Corrected. - README.md: added a "Validator key slots vs. engine protocols" note so the secp256k1/ed25519 custody slots are not read as the bls12-381/lattice engine protocols of the same name. Labeling only — no crypto change. The live 2-of-3 mpcd ECDSA is sound. Co-authored-by: Hanzo Dev <[email protected]>