mirror of
https://github.com/luxfi/crypto.git
synced 2026-10-30 16:59:13 +00:00
zeekay
d235c41435
Private key material must never appear in EVM calldata — it is visible to all nodes and permanently stored on-chain. - Remove ML-DSA Sign + KeyGen precompiles (0x0113-0x0118) - Remove ML-KEM Decapsulate + KeyGen precompiles (0x0123-0x0128) - Remove SLH-DSA Sign precompiles (0x0136-0x0138) - Add BLSVerifyPoP precompile (0x0167) to prevent rogue key attacks - Cap BLSFastAggregate and BLSAggregateVerify to 64 keys/sigs max - Precompile set is now verify-only + encapsulate-only
92 lines
2.4 KiB
Go
92 lines
2.4 KiB
Go
// Copyright (C) 2025, Lux Industries Inc. All rights reserved.
|
|
// Package precompile exports all post-quantum cryptography precompiles
|
|
// for easy integration into EVM implementations
|
|
|
|
package precompile
|
|
|
|
import (
|
|
// "github.com/luxfi/crypto" // removed to avoid import cycle
|
|
)
|
|
|
|
// GetAllPostQuantumPrecompiles returns all post-quantum and BLS precompiles.
|
|
// This includes SHAKE, Lamport, the three NIST standards (verify/encapsulate
|
|
// only), and BLS12-381 operations.
|
|
func GetAllPostQuantumPrecompiles() map[Address]PrecompiledContract {
|
|
registry := NewRegistry()
|
|
|
|
RegisterSHAKE(registry)
|
|
RegisterLamport(registry)
|
|
RegisterMLDSA(registry)
|
|
RegisterMLKEM(registry)
|
|
RegisterSLHDSA(registry)
|
|
RegisterBLS(registry)
|
|
|
|
return registry.Contracts()
|
|
}
|
|
|
|
// GetPrecompileAddresses returns all registered addresses
|
|
func GetPrecompileAddresses() []Address {
|
|
return PostQuantumRegistry.Addresses()
|
|
}
|
|
|
|
// EnableCGO checks if CGO optimizations are available
|
|
func EnableCGO() bool {
|
|
// This will be determined at build time
|
|
// CGO implementations will override this
|
|
return false
|
|
}
|
|
|
|
// GetGasEstimate returns an estimated gas cost for a precompile
|
|
func GetGasEstimate(addr Address, inputSize int) uint64 {
|
|
contract, exists := PostQuantumRegistry.Get(addr)
|
|
if !exists {
|
|
return 0
|
|
}
|
|
|
|
// Create dummy input of the specified size for estimation
|
|
dummyInput := make([]byte, inputSize)
|
|
return contract.RequiredGas(dummyInput)
|
|
}
|
|
|
|
// Info returns information about all registered precompiles
|
|
func Info() map[string]interface{} {
|
|
return map[string]interface{}{
|
|
"total_precompiles": len(PostQuantumRegistry.Addresses()),
|
|
"cgo_enabled": EnableCGO(),
|
|
"standards": []string{
|
|
"FIPS 202 (SHAKE)",
|
|
"FIPS 203 (ML-KEM, encapsulate only)",
|
|
"FIPS 204 (ML-DSA, verify only)",
|
|
"FIPS 205 (SLH-DSA, verify only)",
|
|
"Lamport OTS",
|
|
"BLS12-381",
|
|
},
|
|
"address_ranges": map[string]string{
|
|
"ml_dsa": "0x0110-0x0112",
|
|
"ml_kem": "0x0120-0x0122",
|
|
"slh_dsa": "0x0130-0x0135",
|
|
"shake": "0x0140-0x0149",
|
|
"lamport": "0x0150-0x0159",
|
|
"bls": "0x0160-0x0167",
|
|
},
|
|
"shake_precompiles": []string{
|
|
"SHAKE128 (variable)",
|
|
"SHAKE128-256",
|
|
"SHAKE128-512",
|
|
"SHAKE256 (variable)",
|
|
"SHAKE256-256",
|
|
"SHAKE256-512",
|
|
"SHAKE256-1024",
|
|
"cSHAKE128",
|
|
"cSHAKE256",
|
|
},
|
|
"lamport_precompiles": []string{
|
|
"Verify SHA256",
|
|
"Verify SHA512",
|
|
"Batch Verify",
|
|
"Merkle Root",
|
|
"Merkle Verify",
|
|
},
|
|
}
|
|
}
|