mirror of
https://github.com/luxfi/security.git
synced 2026-10-30 15:17:20 +00:00
zooqueen
582ebad75d
- ADVERSARIAL-MATRIX.md: 5-verifier per-primitive attack matrix + the four assurances - RELEASE-MANIFEST.toml pinned to final SHAs (consensus ConsensusCert envelope now on main) - gate upgrades: ec-machine-check.sh (compiles every .ec), comment-aware axiom-budget, PASS_WITH_OPEN_ASSUMPTIONS verdict + open_assumptions; p3q redteam cmd fixed - EC-toolchain-live corrections; corona C11 = lemma; gate-results regenerated (verdict PASS_WITH_OPEN_ASSUMPTIONS)
20 lines
1.8 KiB
JSON
20 lines
1.8 KiB
JSON
{
|
|
"release": "2026-06-pq-threshold-stack",
|
|
"repos": {
|
|
"pulsar": { "commit": "b3959f1", "gate": "pass", "tests": "pass", "redteam": "na" },
|
|
"corona": { "commit": "7c102d2", "gate": "pass", "tests": "pass", "redteam": "na" },
|
|
"magnetar": { "commit": "378f29c", "gate": "pass", "tests": "pass", "redteam": "na" },
|
|
"consensus": { "commit": "f9ec127", "gate": "pass", "tests": "pass", "redteam": "pass" },
|
|
"p3q": { "commit": "96f7db4", "gate": "pass", "tests": "pass", "redteam": "pass" }
|
|
},
|
|
"open_assumptions": [
|
|
"reconstruct-then-sign byte-equality bridges (pulsar combine_body_axiom; corona combine_body_spec / sign_abs_op_lifted_eq_rlwe): EC-machine-checked CONDITIONAL on these, NOT discharged -- Jasmin byte-walk decomposition is the closure path. NOTE: corona's combine bridge combine_abs_op_lifted_eq_rlwe was DISCHARGED to a lemma (secret-bearing z-leg proven via the no_leak_z_aggregate keystone); its only residual is the narrow PUBLIC-commitment axiom threshold_public_commitment_eq_central (w=A*y agreement, no c*s)",
|
|
"no_leak_reduction (pulsar, corona): standard Module-LWE/Module-SIS reduction -- algebraic core machine-checked in Lean, full simulation-soundness open (v0.8.0)",
|
|
"FRI proximity-gap soundness (p3q): standard STARK assumption -- stated, not proven",
|
|
"honest-validator threshold (consensus): BFT majority assumption",
|
|
"SLH-DSA hash-family / FORS-WOTS+ EU-CMA (magnetar): standard hash-based assumption"
|
|
],
|
|
"verdict_meaning": "all framework gates (incl. EasyCrypt ec-machine-check) + tests + red-team PoCs hold at the pinned commits, and no claim drifted; the Bucket-C open_assumptions above are DISCLOSED, NOT discharged; this is NOT 'fully proven'; external cryptographic sign-off pending",
|
|
"verdict": "PASS_WITH_OPEN_ASSUMPTIONS"
|
|
}
|