mirror of https://github.com/luxfi/precompile.git synced 2026-09-24 00:26:21 +00:00

Files

T

zeekay bcd46b7f76 fix: restore docs/ site and package READMEs

docs/ is the Fumadocs site for precompile.lux.network — should not
have been deleted. Package READMEs document input/output formats and
gas costs referenced by the docs site.

2026-03-02 20:35:56 +00:00

2.6 KiB

Raw Permalink Blame History

ML-KEM Precompile

Post-quantum key encapsulation mechanism precompile implementing FIPS 203 (ML-KEM).

Address

0x0200000000000000000000000000000000000007

Specification

See LP-4318: ML-KEM Post-Quantum Key Encapsulation

Operations

Encapsulate (0x01)

Generate a shared secret and ciphertext from a public key.

Input:

Offset	Size	Description
0	1	Operation (0x01)
1	1	Mode (0x00=512, 0x01=768, 0x02=1024)
2	varies	Public key

Output:

Offset	Size	Description
0	varies	Ciphertext
varies	32	Shared secret

Decapsulate (0x02)

Recover the shared secret from a ciphertext using a private key.

Input:

Offset	Size	Description
0	1	Operation (0x02)
1	1	Mode (0x00=512, 0x01=768, 0x02=1024)
2	varies	Private key
varies	varies	Ciphertext

Output:

Offset	Size	Description
0	32	Shared secret

Key Sizes

Mode	Public Key	Private Key	Ciphertext	Shared Secret
ML-KEM-512	800	1632	768	32
ML-KEM-768	1184	2400	1088	32
ML-KEM-1024	1568	3168	1568	32

Gas Costs

Operation	ML-KEM-512	ML-KEM-768	ML-KEM-1024
Encapsulate	50,000	75,000	100,000
Decapsulate	60,000	90,000	120,000

Security Levels

ML-KEM-512: 128-bit security (NIST Level 1)
ML-KEM-768: 192-bit security (NIST Level 3) - Recommended
ML-KEM-1024: 256-bit security (NIST Level 5)

Usage Example (Solidity)

import {MLKEMCaller} from "./IMLKEM.sol";

contract QuantumSecureExchange {
    using MLKEMCaller for *;

    function establishSecret(bytes calldata recipientPubKey)
        external view
        returns (bytes memory ciphertext, bytes32 sharedSecret)
    {
        return MLKEMCaller.encapsulate768(recipientPubKey);
    }

    function recoverSecret(
        bytes calldata privateKey,
        bytes calldata ciphertext
    ) external view returns (bytes32 sharedSecret) {
        return MLKEMCaller.decapsulate768(privateKey, ciphertext);
    }
}

2.6 KiB Raw Permalink Blame History