mirror of https://github.com/luxfi/corona.git synced 2026-07-27 02:50:34 +00:00

Files

T

zeekay df1db68bd0 docs/comments: correct lattice-family label Ring-LWE -> Module-LWE (Corona is Module-LWE)

Corona is Module-LWE (threshold-Raccoon/Ringtail), NOT Ring-LWE. Confirmed in code: sign/sign.go samples A in R_q^{8x7} (sign.go:87 SamplePolyMatrix M=8,N=7), secret s a rank-7 ring vector, b=A*s+e (sign.go:106-107) over R_q=Z_q[X]/(X^256+1) (LogN=8), q=0x1000000004A01 -- rank>1 module structure, not rank-1 ring-LWE. threshold/threshold.go:4-5 already said Module-LWE.

Fixed the family label across README, SPEC, SUBMISSION, NIST-SUBMISSION, PATENTS, LLM, CONTRIBUTING, SECURITY, CHANGELOG, DEPLOYMENT-RUNBOOK, Makefile, AXIOM-INVENTORY, PROOF-CLAIMS, BLOCKERS, CRYPTOGRAPHER-SIGN-OFF, FIPS-TRACEABILITY, TRUSTED-COMPUTING-BASE, AUDIT-2026-05/06, docs/mptc/*, jasmin/README, 3 Go comments + cli help string.

Also corrected the downstream false claim that Corona (Ring-LWE) and Pulsar (Module-LWE) are 'different lattice families' giving 'structural/family diversity': both are Module-LWE, so the Double-Lattice defense is construction/implementation diversity (threshold-Raccoon vs ML-DSA), not hardness-family diversity; a Module-LWE break affects both legs (hash-based Magnetar is the assumption-diversifier). Fixed companion R-SIS -> Module-SIS where it was the module scheme's SIS assumption; added the Langlois-Stehle (DCC 2015) Module-LWE citation alongside LPR 2010.

Delicate artifacts: proof identifiers (rlwe_sign_op, RLWE_Functional theory/file, *_eq_rlwe bridges, CentralRLWESign, RLWESign, rlwe_compute_*) were NOT renamed -- EasyCrypt/jasmin toolchains are absent here so a rename cannot be compile-verified, and .assurance/ gates parse those names. Added clarifying naming notes to the 5 prominent .ec files, proofs/easycrypt/README.md, AXIOM-INVENTORY.md, and jasmin/rlwe/sign.jazz. .assurance/*.txt left untouched (already say Module-LWE/Module-SIS; rlwe tokens are gate-parsed identifiers). Left AUDIT-2026-06.md:463 historical rename-log and the ProtoStar-LWE paper-title substring untouched.

go build ./... and go test ./... green (GOWORK=off; all packages ok).

2026-06-27 16:12:24 -07:00

4.9 KiB

Raw Blame History

Contributing to Corona

What we accept

This repository is both a production Module-LWE threshold signature library for Quasar consensus AND a NIST-MPTC-track submission package. Until the 2026-Nov-16 package submission, contributions that align with the MPTC submission are highest priority:

Specification clarity — text edits that disambiguate SPEC.md, DESIGN.md, and the LaTeX paper sections at papers/lp-073-pulsar/.
Reference implementation — sign/, threshold/, dkg2/, reshare/, primitives/, hash/. Boring, clear, no assembly, no clever abstractions. Match the spec section-by-section.
Test vectors — cmd/*_oracle*/. KAT-deterministic regeneration via scripts/regen-kats.sh; cross-runtime byte-equality with the C++ port at ~/work/luxcpp/crypto/corona/.
Constant-time analysis — CONSTANT-TIME-REVIEW.md. Show, don't claim. New entries must cite the relevant Go source line + the upstream primitive's CT guarantee.
Fuzz harness expansion — reshare/fuzz_*_test.go, dkg2/fuzz_round_test.go, threshold/fuzz_round_test.go.
Cryptanalysis of the Boschini et al. construction or Corona's production lifecycle additions — open an issue. We track external review explicitly.

What we don't accept

Until after the MPTC submission lands:

New protocol features beyond what the Boschini et al. construction
- Corona's production lifecycle layers specify.
Optimized implementations (AVX2, SIMD, hand-rolled assembly) in the reference. Optimized implementations belong in a separate build tag and require independent CT audit.
HSM integration patches in the reference (those belong in a separate consumer-side adapter library).
Production-deployment patches in the reference (use the consuming consensus layer for deployment-specific orchestration).
BLAKE3 hash-suite expansions — the NIST profile uses cSHAKE256 / KMAC256 / TupleHash256 exclusively (Corona-SHA3). The legacy Corona-BLAKE3 suite is retained for cross-port byte checks only; new BLAKE3 deltas should NOT land.
Patches that introduce Pulsar (ML-DSA) types into Corona (threshold-Raccoon). Both are Module-LWE, but they are distinct constructions in independent libraries with no shared types; keep them that way.

These reopen post-submission.

Process

Open an issue first. Discuss the change before implementing.
One concern per PR. Don't bundle spec edits with implementation changes. The MPTC review process treats them as separate artifacts.
CI must pass. Build, test, KAT regeneration, KAT cross-runtime verify, lattice-estimator (when wired) all green before merge.
Sign your commits. GPG-signed, real name in Signed-off-by. Patent-claim disclosures attach to commits.

Development setup

git clone https://github.com/luxfi/corona
cd corona
./scripts/build.sh
./scripts/test.sh
./scripts/gen_vectors.sh
./scripts/regen-kats.sh --verify    # cross-runtime byte-equality check

LaTeX spec build (paper sections):

cd papers/lp-073-pulsar/
pdflatex lp-073-pulsar-pedersen-dkg.tex
pdflatex lp-073-pulsar-resharing.tex

Coding standards (Go reference)

Go 1.26.3+ (per go.mod).
All logging via github.com/luxfi/log (consumer-supplied; the reference itself avoids logging on secret-touching paths). No log.Println, log.Fatalf, fmt.Printf in code that touches a secret.
All secret-byte comparison via crypto/subtle.ConstantTimeCompare or the local constTimePolyEqual helper in dkg2/dkg2.go:560.
All Gaussian sampling via lattigo's KeyedPRNG-backed ring.NewGaussianSampler. Direct math/rand is forbidden.
All hash usage via hash.HashSuite injection — never hardcode cSHAKE256 / KMAC256 / TupleHash256 outside hash/sp800_185.go. Direct golang.org/x/crypto/sha3 use is restricted to that file and the legacy hash/blake3.go for the cross-port byte-check suite only.
All Sign-path primitives take suite hash.HashSuite as their first argument (per F22 closure in CHANGELOG.md).
Errors carry context via fmt.Errorf("%w", err) not bare panics.
Patch-bump only — v0.4.1 → v0.4.2. Minor/major bumps require explicit approval (per CLAUDE.md rules).

Hash-suite discipline

Production: hash.Default() resolves to Corona-SHA3.
Legacy: hash.NewCoronaBLAKE3() for cross-port byte checks ONLY.
Adding a new suite requires updating hash/sp800_185.go with the customization strings, regenerating ALL KAT vectors, and updating the spec (SPEC.md §13).

License

By contributing, you agree your contribution is licensed under Apache-2.0 and grant the patent license described in the Apache 2.0 §3, AND the Corona-specific patent grant in PATENTS.md §3.

For NIST MPTC submission: contributions are subject to the patent-claim disclosures collected in docs/patent-claims.md.

4.9 KiB Raw Blame History