mirror of
https://github.com/luxfi/precompile.git
synced 2026-09-24 00:26:21 +00:00
zeekay
1362566d34
Both sides carried work. Ours is the security pass: the stableswap amp=0 and empty-pool halts, the wei-per-swap leak, uint256 truncation in math, three verifiers that returned a verdict without verifying, the cgo/non-cgo consensus split in cggmp21, and the starkfri soundness floor. Theirs is the fhe parameter set, the mldsa crafted-length refusal, and the naming sweep. Resolved per hunk rather than by side. Where both fixed one defect the better fix survives alone, never two guards for one bug.
38 lines
1.1 KiB
Go
38 lines
1.1 KiB
Go
package pq
|
|
|
|
import (
|
|
"github.com/cloudflare/circl/sign/mldsa/mldsa65"
|
|
"github.com/luxfi/precompile/examples"
|
|
"github.com/luxfi/precompile/mldsa"
|
|
)
|
|
|
|
// MLDSADemo exercises the ML-DSA verify precompile (0x0200..06).
|
|
func MLDSADemo() []examples.Result {
|
|
// Generate ML-DSA-65 key pair
|
|
pub, priv, _ := mldsa65.GenerateKey(nil)
|
|
|
|
msg := []byte("Lux precompile ML-DSA-65 demo")
|
|
sig := mldsa65.Sign(priv, msg, nil)
|
|
|
|
pubBytes, _ := pub.MarshalBinary()
|
|
sigBytes := sig
|
|
|
|
// Input format: mode(1) + pubkey + msglen(32) + sig + msg
|
|
input := make([]byte, 0, 1+len(pubBytes)+32+len(sigBytes)+len(msg))
|
|
input = append(input, mldsa.ModeMLDSA65) // mode byte
|
|
input = append(input, pubBytes...) // public key
|
|
input = append(input, examples.Uint256(uint64(len(msg)))...)
|
|
input = append(input, sigBytes...)
|
|
input = append(input, msg...)
|
|
|
|
return []examples.Result{
|
|
examples.CallPrecompileResult(
|
|
"ML-DSA-65 Verify",
|
|
mldsa.MLDSAVerifyPrecompile,
|
|
mldsa.ContractMLDSAVerifyAddress,
|
|
input,
|
|
func(out []byte) bool { return examples.LastByte32IsOne(out) },
|
|
),
|
|
}
|
|
}
|