Files
pulsar/estimator
zeekay 6fd38d451f pulsar-m: bootstrap NIST MPTC submission package
Initial commit. Holds the technical specification (LaTeX), the design
docs, the build/test/bench scripts, the package layout, and the empty
ref/go/pkg/pulsarm skeleton.

The spec at spec/pulsar-m.tex (11,300 words of LaTeX) is the canonical
description of the protocol. docs/nist-mptc-category.md states the
Class N1 + N4 claim. CONTRIBUTING.md and SECURITY.md pin the IP and
disclosure posture.

Subsequent commits land the reference implementation in stages.

Signed-off-by: Lux Industries <[email protected]>
2026-05-10 20:25:09 -07:00
..

Lattice estimator

Concrete classical and post-quantum security-strength tables for each Pulsar-M parameter set, generated by Albrecht et al.'s lattice-estimator (https://github.com/malb/lattice-estimator).

Workflow

  1. Pin the estimator commit hash in params.sage.
  2. Run via SageMath:
    sage estimator/params.sage > estimator/results.md
    
  3. Commit params.sage, results.md, and the estimator commit hash together so reviewers can reproduce.

Targets

NIST MPTC §4.5 minimum:

  • Required: classical ≥ 128 bits, NIST PQ Cat ≥ 1, statistical ≥ 40 bits.
  • Suggested: classical ≥ 192 bits, NIST PQ Cat ≥ 3, statistical ≥ 64 bits.

Pulsar-M parameter sets:

  • Pulsar-M-44 → required tier
  • Pulsar-M-65 → suggested tier (default for Hanzo / Lux)
  • Pulsar-M-87 → highest NIST PQ Cat 5

Each parameter set's M-LWE instance is restated from FIPS 204 §4 with the same (q, k, ℓ, η) so estimator output is comparable to ML-DSA.

Status

  • params.sage skeleton with FIPS 204 parameters
  • First estimator run on Pulsar-M-65
  • Full table for all three parameter sets
  • Sanity comparison with FIPS 204 published security levels