luxfi/crypto
1
0
Fork 0
mirror of https://github.com/luxfi/crypto.git synced 2026-07-27 01:54:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

crypto: PQ canonical terminology (FIPS 203/204/205 + Pulsar + Lamport)

Browse Source
This commit is contained in:
Hanzo AI
2026-05-05 17:55:42 -07:00
parent 005e773adb
commit d8de0bab87
13 changed files with 90 additions and 90 deletions
Download Patch File Download Diff File Expand all files Collapse all files
AUDIT.md
+3 -3
View File
@@ -55,7 +55,7 @@ Legend: V = vanilla Go, C = cgo, G = GPU via lux/accel, T = tests.
| kem | Y | Y | - | - | circl ML-KEM + hybrid X-Wing | | kem | Y | Y | - | - | circl ML-KEM + hybrid X-Wing |
| kzg4844 | Y | Y | G* | Y | gokzg (`!ckzg`) + ckzg (`cgo,ckzg`). GPU added (batch verify). | | kzg4844 | Y | Y | G* | Y | gokzg (`!ckzg`) + ckzg (`cgo,ckzg`). GPU added (batch verify). |
| lamport | Y | - | - | Y | Hash-based OTS — pure Go | | lamport | Y | - | - | Y | Hash-based OTS — pure Go |
| mldsa | Y | - | G* | Y | circl FIPS-204. GPU added (batch sign/verify) when accel exposes Dilithium. | | mldsa | Y | - | G* | Y | circl FIPS-204. GPU added (batch sign/verify) when accel exposes ML-DSA. |
| mlkem | Y | * | G* | Y | circl FIPS-203. cgo file is currently a placeholder (mlkem_c.go). GPU added (batch encaps/decaps). | | mlkem | Y | * | G* | Y | circl FIPS-203. cgo file is currently a placeholder (mlkem_c.go). GPU added (batch encaps/decaps). |
| pq | Y | - | - | - | Re-export aggregator over mldsa+mlkem+slhdsa | | pq | Y | - | - | - | Re-export aggregator over mldsa+mlkem+slhdsa |
| precompile | Y | - | - | Y | EVM precompile impls — pure Go | | precompile | Y | - | - | Y | EVM precompile impls — pure Go |
@@ -65,7 +65,7 @@ Legend: V = vanilla Go, C = cgo, G = GPU via lux/accel, T = tests.
| secp256r1 | Y | - | - | - | NIST P-256 verifier (RIP-7212) | | secp256r1 | Y | - | - | - | NIST P-256 verifier (RIP-7212) |
| secret | Y | - | - | Y | Go 1.26 runtime/secret wrapper | | secret | Y | - | - | Y | Go 1.26 runtime/secret wrapper |
| sign | - | - | - | - | Empty placeholder | | sign | - | - | - | - | Empty placeholder |
| signer | Y | - | - | Y | Hybrid BLS+Corona signer | | signer | Y | - | - | Y | Hybrid BLS+Pulsar signer |
| signify | Y | - | - | Y | OpenBSD-style signify | | signify | Y | - | - | Y | OpenBSD-style signify |
| slhdsa | Y | - | - | Y | circl FIPS-205 — pure Go | | slhdsa | Y | - | - | Y | circl FIPS-205 — pure Go |
| threshold | Y | - | - | Y | Threshold scheme registry + BLS impl | | threshold | Y | - | - | Y | Threshold scheme registry + BLS impl |
@@ -138,7 +138,7 @@ alias `LUX_CRYPTO_BACKEND` is honored for one release.
2. **GPU coverage**: `lux/accel` exposes batch kernels for 2. **GPU coverage**: `lux/accel` exposes batch kernels for
SHA256, Keccak256, Poseidon, ECDSA, Ed25519, BLS verify+aggregate, SHA256, Keccak256, Poseidon, ECDSA, Ed25519, BLS verify+aggregate,
Merkle, plus Kyber and Dilithium. Algorithms without a kernel Merkle, plus ML-KEM and ML-DSA. Algorithms without a kernel
(slhdsa, verkle, kzg4844 single-blob path) keep vanilla/cgo only — (slhdsa, verkle, kzg4844 single-blob path) keep vanilla/cgo only —
gpu.go in those packages reports `accel.ErrNotSupported` and the gpu.go in those packages reports `accel.ErrNotSupported` and the
public API transparently falls back to the next backend. public API transparently falls back to the next backend.
LLM.md
+34 -34
View File
@@ -27,7 +27,7 @@ cd docs && pnpm build # Build static site
### Consensus Cryptography (Lux Quasar) ### Consensus Cryptography (Lux Quasar)
| Package | Purpose | Notes | | Package | Purpose | Notes |
|---------|---------|-------| |---------|---------|-------|
| **signer/** | Hybrid BLS + Corona signing | Lux consensus | | **signer/** | Hybrid BLS + Pulsar signing | Lux consensus |
| **bls/** | BLS12-381 aggregatable signatures | Classical layer | | **bls/** | BLS12-381 aggregatable signatures | Classical layer |
| **corona/** | Lattice-based threshold signatures | Post-quantum layer | | **corona/** | Lattice-based threshold signatures | Post-quantum layer |
@@ -81,12 +81,12 @@ Key changes:
| Type | Example | Use Case | | Type | Example | Use Case |
|------|---------|----------| |------|---------|----------|
| **Threshold** | Corona, BLS-Threshold, FROST, CGGMP21 | t-of-n validators sign collaboratively | | **Threshold** | Pulsar, BLS-Threshold, FROST, CGGMP21 | t-of-n validators sign collaboratively |
| **Regular** | ML-DSA, BLS | Single party signs | | **Regular** | ML-DSA, BLS | Single party signs |
Lux consensus uses **BLS + Corona**: Lux consensus uses **BLS + Pulsar**:
- BLS: Classical, aggregatable signatures - BLS: Classical, aggregatable signatures
- Corona: Lattice-based threshold for post-quantum security - Pulsar: Lattice-based threshold for post-quantum security
ML-DSA is a separate NIST standard (not used in consensus, potential future validator messages). ML-DSA is a separate NIST standard (not used in consensus, potential future validator messages).
@@ -129,7 +129,7 @@ threshold/
| `SchemeFROST` | FROST (Schnorr) | Interface only | No | No | | `SchemeFROST` | FROST (Schnorr) | Interface only | No | No |
| `SchemeCMP` | CGGMP21 (ECDSA) | Partial in cggmp21/ | No | No | | `SchemeCMP` | CGGMP21 (ECDSA) | Partial in cggmp21/ | No | No |
| `SchemeBLS` | BLS Threshold | Skeleton impl | No | Yes | | `SchemeBLS` | BLS Threshold | Skeleton impl | No | Yes |
| `SchemeCorona` | Corona (Lattice) | Interface only | Yes | No | | `SchemeCorona` | Pulsar (Lattice) | Interface only | Yes | No |
### Usage Pattern ### Usage Pattern
@@ -313,7 +313,7 @@ err := ring.VerifyAndRecord(sig, message, ringMembers, store)
| TestLatticeSignatureInvalidMessage | Post-quantum wrong message | | TestLatticeSignatureInvalidMessage | Post-quantum wrong message |
| TestLatticeSignatureInvalidRing | Post-quantum modified ring | | TestLatticeSignatureInvalidRing | Post-quantum modified ring |
### Distinction from Corona ### Distinction from Pulsar
| Package | Type | Purpose | | Package | Type | Purpose |
|---------|------|---------| |---------|------|---------|
@@ -336,7 +336,7 @@ lux key ring generate --size 5 # Generate decoy keys
``` ```
**Scheme Flags:** **Scheme Flags:**
- `--scheme lsag` (default) - Uses Corona keys from `~/.lux/keys/<name>/rt/` - `--scheme lsag` (default) - Uses Pulsar keys from `~/.lux/keys/<name>/rt/`
- `--scheme lattice` - Uses ML-DSA keys from `~/.lux/keys/<name>/mldsa/` - `--scheme lattice` - Uses ML-DSA keys from `~/.lux/keys/<name>/mldsa/`
**File Locations:** **File Locations:**
@@ -415,11 +415,11 @@ Static docs site at `docs/` using fumadocs:
5. hash-functions - SHA, BLAKE, Keccak 5. hash-functions - SHA, BLAKE, Keccak
6. key-management - HD wallets, KDF 6. key-management - HD wallets, KDF
7. security - Best practices 7. security - Best practices
8. ring-signatures - Corona (lattice threshold) 8. ring-signatures - Pulsar (lattice threshold)
9. lamport - One-time signatures 9. lamport - One-time signatures
10. kzg4844 - Polynomial commitments 10. kzg4844 - Polynomial commitments
11. verkle-ipa - Inner product arguments 11. verkle-ipa - Inner product arguments
12. signer - Hybrid BLS + Corona 12. signer - Hybrid BLS + Pulsar
13. precompiles - EVM contracts 13. precompiles - EVM contracts
## Key Technologies ## Key Technologies
@@ -433,7 +433,7 @@ Static docs site at `docs/` using fumadocs:
| Algorithm | Security Level | Quantum Resistant | Type | | Algorithm | Security Level | Quantum Resistant | Type |
|-----------|---------------|-------------------|------| |-----------|---------------|-------------------|------|
| Corona | Lattice-based | Yes | Threshold | | Pulsar | Lattice-based | Yes | Threshold |
| ML-DSA-65 | 192-bit (NIST Level 3) | Yes | Regular | | ML-DSA-65 | 192-bit (NIST Level 3) | Yes | Regular |
| ML-KEM-768 | 192-bit (NIST Level 3) | Yes | KEM | | ML-KEM-768 | 192-bit (NIST Level 3) | Yes | KEM |
| SLH-DSA-SHA2-128f | 128-bit (NIST Level 1) | Yes | Regular | | SLH-DSA-SHA2-128f | 128-bit (NIST Level 1) | Yes | Regular |
@@ -447,7 +447,7 @@ Static docs site at `docs/` using fumadocs:
3. Follow Go coding standards 3. Follow Go coding standards
4. Test all implementations before claiming completion 4. Test all implementations before claiming completion
5. Cross-reference LPs when discussing specifications 5. Cross-reference LPs when discussing specifications
6. Corona = lattice threshold (NOT ring signatures, NOT ML-DSA) 6. Pulsar = lattice threshold (NOT ring signatures, NOT ML-DSA)
7. ML-DSA = NIST FIPS 204 regular signatures (NOT threshold) 7. ML-DSA = NIST FIPS 204 regular signatures (NOT threshold)
--- ---
@@ -917,7 +917,7 @@ consensus/protocol/quasar/
`crypto/threshold/corona/scheme.go` is an **adapter layer** that: `crypto/threshold/corona/scheme.go` is an **adapter layer** that:
1. Imports `github.com/luxfi/corona/sign` and `github.com/luxfi/corona/primitives` 1. Imports `github.com/luxfi/corona/sign` and `github.com/luxfi/corona/primitives`
2. Creates wrapper types (KeyShare, PublicKey, Signer, etc.) that wrap real Corona types 2. Creates wrapper types (KeyShare, PublicKey, Signer, etc.) that wrap real Pulsar types
3. Translates between `threshold.*` interfaces and `corona.sign.*` types 3. Translates between `threshold.*` interfaces and `corona.sign.*` types
4. Duplicates type definitions with conversion logic 4. Duplicates type definitions with conversion logic
@@ -954,7 +954,7 @@ This violates the design goal of having implementations be **native** to the int
└─────────────┘ └─────────────┘ └───────────────┘ └─────────────┘ └─────────────┘ └───────────────┘
│ │
No more adapter layer! No more adapter layer!
Corona implements threshold.Scheme Pulsar implements threshold.Scheme
directly in the corona repo directly in the corona repo
``` ```
@@ -974,7 +974,7 @@ The entire `crypto/threshold/corona/` directory was removed.
**Created:** `corona/threshold/threshold.go` **Created:** `corona/threshold/threshold.go`
The Corona package now implements threshold signatures natively (2-round protocol): The Pulsar package now implements threshold signatures natively (2-round protocol):
```go ```go
// corona/threshold/threshold.go // corona/threshold/threshold.go
@@ -1032,9 +1032,9 @@ import (
**Key additions:** **Key additions:**
- `HybridConfig` struct with `CoronaShares` and `CoronaGroupKey` fields - `HybridConfig` struct with `CoronaShares` and `CoronaGroupKey` fields
- `DualSignRound1()` - Returns BLS share + Corona Round1 data in parallel - `DualSignRound1()` - Returns BLS share + Pulsar Round1 data in parallel
- `CoronaRound1/Round2/Finalize()` - Exposes 2-round protocol methods - `CoronaRound1/Round2/Finalize()` - Exposes 2-round protocol methods
- `GenerateDualKeys()` - Generates both BLS and Corona threshold keys - `GenerateDualKeys()` - Generates both BLS and Pulsar threshold keys
### ARCHITECTURE DIAGRAM (Clean State) ### ARCHITECTURE DIAGRAM (Clean State)
@@ -1121,12 +1121,12 @@ Move and adapt tests.
Change: Change:
```go ```go
_ "github.com/luxfi/crypto/threshold/corona" // Register Corona threshold scheme _ "github.com/luxfi/crypto/threshold/corona" // Register Pulsar threshold scheme
``` ```
To: To:
```go ```go
_ "github.com/luxfi/corona/threshold" // Register Corona threshold scheme _ "github.com/luxfi/corona/threshold" // Register Pulsar threshold scheme
``` ```
#### 4. MODIFY (corona repo go.mod) #### 4. MODIFY (corona repo go.mod)
@@ -1142,12 +1142,12 @@ require github.com/luxfi/crypto v1.x.x
1. **No Duplication**: Types are defined once, in corona, implementing threshold interfaces 1. **No Duplication**: Types are defined once, in corona, implementing threshold interfaces
2. **No Interpretation**: No translation layer between two type systems 2. **No Interpretation**: No translation layer between two type systems
3. **Single Source**: Corona logic lives in corona repo 3. **Single Source**: Pulsar logic lives in corona repo
4. **Clean Dependencies**: 4. **Clean Dependencies**:
- crypto/threshold -> defines interfaces - crypto/threshold -> defines interfaces
- corona -> implements interfaces - corona -> implements interfaces
- consensus -> uses interfaces - consensus -> uses interfaces
5. **Consistent Pattern**: Both BLS and Corona now follow same pattern 5. **Consistent Pattern**: Both BLS and Pulsar now follow same pattern
### WHAT TO KEEP (Unchanged) ### WHAT TO KEEP (Unchanged)
@@ -1179,7 +1179,7 @@ The `adapter.go` file is confusingly named but it's actually a **convenience wra
### TEST RESULTS (2025-12-19) ### TEST RESULTS (2025-12-19)
**Corona Threshold Tests (4 tests):** **Pulsar Threshold Tests (4 tests):**
- TestGenerateKeys ✅ - TestGenerateKeys ✅
- TestThresholdSigningFlow ✅ (2-round protocol verified) - TestThresholdSigningFlow ✅ (2-round protocol verified)
- TestThresholdWrongMessage ✅ - TestThresholdWrongMessage ✅
@@ -1190,15 +1190,15 @@ The `adapter.go` file is confusingly named but it's actually a **convenience wra
- TestBLSThresholdInsufficientShares ✅ - TestBLSThresholdInsufficientShares ✅
- TestBLSThresholdWrongMessage ✅ - TestBLSThresholdWrongMessage ✅
- TestDualThresholdKeyGeneration ✅ - TestDualThresholdKeyGeneration ✅
- **TestDualSigningFlow ✅** - Full BLS + Corona 2-round protocol - **TestDualSigningFlow ✅** - Full BLS + Pulsar 2-round protocol
### KEY ACHIEVEMENT ### KEY ACHIEVEMENT
**Dual Threshold Signing Flow** - Validators can now sign blocks with both: **Dual Threshold Signing Flow** - Validators can now sign blocks with both:
1. **BLS** (1 round): Immediate aggregation for classical security 1. **BLS** (1 round): Immediate aggregation for classical security
2. **Corona** (2 rounds): Post-quantum security via lattice-based threshold signatures 2. **Pulsar** (2 rounds): Post-quantum security via lattice-based threshold signatures
Both run in parallel, with BLS completing in Round 1 while Corona completes after Round 2. Both run in parallel, with BLS completing in Round 1 while Pulsar completes after Round 2.
### PENDING WORK ### PENDING WORK
@@ -1210,7 +1210,7 @@ Both run in parallel, with BLS completing in Round 1 while Corona completes afte
### Overview ### Overview
The `EpochManager` in `consensus/protocol/quasar/epoch.go` manages Corona key epochs for validator sets with rate limiting to prevent excessive key churn while still rotating frequently enough to frustrate quantum attacks. The `EpochManager` in `consensus/protocol/quasar/epoch.go` manages Pulsar key epochs for validator sets with rate limiting to prevent excessive key churn while still rotating frequently enough to frustrate quantum attacks.
### Key Constants ### Key Constants
@@ -1230,7 +1230,7 @@ The epoch uses `uint64` which supports values up to 18,446,744,073,709,551,615.
### Core Types ### Core Types
```go ```go
// EpochManager manages Corona key epochs for the validator set. // EpochManager manages Pulsar key epochs for the validator set.
type EpochManager struct { type EpochManager struct {
mu sync.RWMutex mu sync.RWMutex
currentEpoch uint64 currentEpoch uint64
@@ -1242,7 +1242,7 @@ type EpochManager struct {
threshold int threshold int
} }
// EpochKeys holds the Corona keys for a specific epoch. // EpochKeys holds the Pulsar keys for a specific epoch.
type EpochKeys struct { type EpochKeys struct {
Epoch uint64 Epoch uint64
CreatedAt time.Time CreatedAt time.Time
@@ -1314,9 +1314,9 @@ func (q *Quasar) AddValidator(validatorID string, coronaShare ...) error {
} }
``` ```
### Critical Bug Fix: Corona Verify Function ### Critical Bug Fix: Pulsar Verify Function
**Issue**: The Corona `Verify` function in `/Users/z/work/lux/corona/sign/sign.go:290` was **destructive** - it modified the input signature's `z` vector in-place with `utils.ConvertVectorFromNTT(r, z)`. **Issue**: The Pulsar `Verify` function in `/Users/z/work/lux/corona/sign/sign.go:290` was **destructive** - it modified the input signature's `z` vector in-place with `utils.ConvertVectorFromNTT(r, z)`.
**Symptom**: Epoch 0 signatures failed to verify after rotation because the first verification call mutated the signature. **Symptom**: Epoch 0 signatures failed to verify after rotation because the first verification call mutated the signature.
@@ -1336,7 +1336,7 @@ utils.MatrixVectorMul(r, A, zCopy, Az_bc)
// ... // ...
``` ```
### 3-Second Quantum Bundles (Parallel BLS + Corona) ### 3-Second Quantum Bundles (Parallel BLS + Pulsar)
**Architecture (parallel execution):** **Architecture (parallel execution):**
``` ```
@@ -1345,10 +1345,10 @@ BLS Layer: [B1]--[B2]--[B3]--[B4]--[B5]--[B6]--[B7]--[B8]--...
|___________________________________| |___________________________________|
| |
Quantum Layer: [QB1: Merkle(B1-B6)]--------[QB2: Merkle(B7-B12)] Quantum Layer: [QB1: Merkle(B1-B6)]--------[QB2: Merkle(B7-B12)]
| 3-second interval, async Corona signing | 3-second interval, async Pulsar signing
``` ```
**NTT Corona benchmarks (IEEE S&P 2025):** **NTT Pulsar benchmarks (IEEE S&P 2025):**
- 0.6s online signing phase (2-round protocol) - 0.6s online signing phase (2-round protocol)
- 2.5s total including offline prep across 5 continents - 2.5s total including offline prep across 5 continents
- Our 3-second interval provides comfortable margin - Our 3-second interval provides comfortable margin
@@ -1388,7 +1388,7 @@ valid := bs.VerifyBundle(bundle)
**Async Signing (for production):** **Async Signing (for production):**
```go ```go
// AsyncBundleSigner runs Corona signing in background // AsyncBundleSigner runs Pulsar signing in background
signer := NewAsyncBundleSigner(epochManager) signer := NewAsyncBundleSigner(epochManager)
// BundleRunner automates the 3-second production loop // BundleRunner automates the 3-second production loop
@@ -1405,7 +1405,7 @@ runner.Stop()
**Key Features:** **Key Features:**
- BLS finality continues at 500ms - no latency impact - BLS finality continues at 500ms - no latency impact
- Corona signing runs async, doesn't block BLS - Pulsar signing runs async, doesn't block BLS
- ~6 BLS blocks per quantum bundle (3s / 500ms) - ~6 BLS blocks per quantum bundle (3s / 500ms)
- Merkle root provides compact proof of all BLS blocks - Merkle root provides compact proof of all BLS blocks
- Bundle chain via `PreviousHash` linkage - Bundle chain via `PreviousHash` linkage
README.md
+4 -4
View File
@@ -14,9 +14,9 @@ go get github.com/luxfi/crypto
| Package | Algorithm | Standard | Security | Key Sizes | | Package | Algorithm | Standard | Security | Key Sizes |
|---------|-----------|----------|----------|-----------| |---------|-----------|----------|----------|-----------|
| `mldsa/` | ML-DSA (Dilithium) | FIPS 204 | 128/192/256-bit (Levels 2/3/5) | 44: 1312/2560 B, 65: 1952/4032 B, 87: 2592/4896 B | | `mldsa/` | ML-DSA | FIPS 204 | 128/192/256-bit (Levels 2/3/5) | 44: 1312/2560 B, 65: 1952/4032 B, 87: 2592/4896 B |
| `mlkem/` | ML-KEM (Kyber) | FIPS 203 | 128/192/256-bit | 512: 800/1632 B, 768: 1184/2400 B, 1024: 1568/3168 B | | `mlkem/` | ML-KEM | FIPS 203 | 128/192/256-bit | 512: 800/1632 B, 768: 1184/2400 B, 1024: 1568/3168 B |
| `slhdsa/` | SLH-DSA (SPHINCS+) | FIPS 205 | 128/192/256-bit (12 variants) | SHA2/SHAKE, fast/small tradeoff | | `slhdsa/` | SLH-DSA (FIPS 205, formerly SPHINCS+) | FIPS 205 | 128/192/256-bit (12 variants) | SHA2/SHAKE, fast/small tradeoff |
| `pq/` | Unified PQ interface | -- | Wraps mldsa, mlkem, slhdsa | Mode selection at runtime | | `pq/` | Unified PQ interface | -- | Wraps mldsa, mlkem, slhdsa | Mode selection at runtime |
ML-DSA and ML-KEM wrap Cloudflare's circl with ergonomic key serialization. SLH-DSA provides hash-based signatures as a conservative fallback (no lattice assumptions). ML-DSA and ML-KEM wrap Cloudflare's circl with ergonomic key serialization. SLH-DSA provides hash-based signatures as a conservative fallback (no lattice assumptions).
@@ -136,7 +136,7 @@ Compiled test binaries are provided for quick verification:
- [Lux PQ Crypto Suite](https://github.com/luxfi/papers/blob/main/lux-pq-crypto-suite.pdf) -- parameter selection and security analysis for ML-DSA, ML-KEM, SLH-DSA - [Lux PQ Crypto Suite](https://github.com/luxfi/papers/blob/main/lux-pq-crypto-suite.pdf) -- parameter selection and security analysis for ML-DSA, ML-KEM, SLH-DSA
- [Lux Hybrid PQ Architecture](https://github.com/luxfi/papers/blob/main/lux-hybrid-pq-architecture.pdf) -- hybrid classical/PQ transition strategy - [Lux Hybrid PQ Architecture](https://github.com/luxfi/papers/blob/main/lux-hybrid-pq-architecture.pdf) -- hybrid classical/PQ transition strategy
- [Lux Crypto Agility](https://github.com/luxfi/papers/blob/main/lux-crypto-agility.pdf) -- algorithm negotiation and migration framework - [Lux Crypto Agility](https://github.com/luxfi/papers/blob/main/lux-crypto-agility.pdf) -- algorithm negotiation and migration framework
- [Lux Corona PQ](https://github.com/luxfi/papers/blob/main/lux-corona-pq.pdf) -- post-quantum ring signatures - [Lux Pulsar PQ](https://github.com/luxfi/papers/blob/main/lux-corona-pq.pdf) -- post-quantum ring signatures
- [Lux Universal Threshold Signatures](https://github.com/luxfi/papers/blob/main/lux-universal-threshold-signatures.pdf) -- multi-curve threshold framework - [Lux Universal Threshold Signatures](https://github.com/luxfi/papers/blob/main/lux-universal-threshold-signatures.pdf) -- multi-curve threshold framework
## References ## References
docs/content/docs/cpp-libraries.mdx
+3 -3
View File
@@ -144,8 +144,8 @@ Core cryptography with GPU-accelerated BLS pairings.
**Features**: **Features**:
- BLS12-381 pairings with GPU acceleration - BLS12-381 pairings with GPU acceleration
- ML-DSA (CRYSTALS-Dilithium) post-quantum signatures - ML-DSA (FIPS 204, formerly CRYSTALS-Dilithium) post-quantum signatures
- ML-KEM (CRYSTALS-Kyber) post-quantum key encapsulation - ML-KEM (FIPS 203, formerly CRYSTALS-Kyber) post-quantum key encapsulation
- secp256k1 for Ethereum compatibility - secp256k1 for Ethereum compatibility
**Installation**: **Installation**:
@@ -284,5 +284,5 @@ done
## Next Steps ## Next Steps
- [BLS Signatures](/docs/bls) - BLS cryptography with Go - [BLS Signatures](/docs/bls) - BLS cryptography with Go
- [Post-Quantum Crypto](/docs/post-quantum) - Dilithium and Kyber - [Post-Quantum Crypto](/docs/post-quantum) - ML-DSA and ML-KEM
- [Precompiles](/docs/precompiles) - EVM precompiled contracts - [Precompiles](/docs/precompiles) - EVM precompiled contracts
docs/content/docs/index.mdx
+13 -13
View File
@@ -10,7 +10,7 @@ A comprehensive cryptographic library providing BLS signatures, post-quantum alg
## Features ## Features
- **BLS Signatures**: Efficient signature aggregation for consensus - **BLS Signatures**: Efficient signature aggregation for consensus
- **Post-Quantum Cryptography**: ML-DSA (Dilithium) signatures and ML-KEM (Kyber) key exchange - **Post-Quantum Cryptography**: ML-DSA signatures and ML-KEM key exchange
- **Fully Homomorphic Encryption**: Compute on encrypted data (TFHE, CKKS, BGV) - **Fully Homomorphic Encryption**: Compute on encrypted data (TFHE, CKKS, BGV)
- **GPU Acceleration**: Metal (Apple Silicon) and CUDA (NVIDIA) backends - **GPU Acceleration**: Metal (Apple Silicon) and CUDA (NVIDIA) backends
- **Hash Functions**: SHA-256, SHA-3, BLAKE2b, Keccak - **Hash Functions**: SHA-256, SHA-3, BLAKE2b, Keccak
@@ -52,7 +52,7 @@ func main() {
} }
``` ```
### Post-Quantum Signatures (Dilithium) ### Post-Quantum Signatures (ML-DSA)
```go ```go
package main package main
@@ -74,7 +74,7 @@ func main() {
} }
``` ```
### Key Exchange (Kyber) ### Key Exchange (ML-KEM)
```go ```go
package main package main
@@ -99,9 +99,9 @@ func main() {
### Cryptographic Primitives ### Cryptographic Primitives
1. **Signatures**: BLS, ECDSA, Ed25519, Dilithium 1. **Signatures**: BLS, ECDSA, Ed25519, ML-DSA
2. **Hash Functions**: SHA-256, SHA-3, BLAKE2b, Keccak 2. **Hash Functions**: SHA-256, SHA-3, BLAKE2b, Keccak
3. **Key Exchange**: ECDH, Kyber 3. **Key Exchange**: ECDH, ML-KEM
4. **Encryption**: AES-GCM, ChaCha20-Poly1305 4. **Encryption**: AES-GCM, ChaCha20-Poly1305
5. **Random Number Generation**: CSPRNG 5. **Random Number Generation**: CSPRNG
@@ -146,7 +146,7 @@ func AggregatePublicKeys(pks []PublicKey) (PublicKey, error)
func VerifyAggregate(pks []PublicKey, message []byte, sig Signature) bool func VerifyAggregate(pks []PublicKey, message []byte, sig Signature) bool
``` ```
### Dilithium Package (Post-Quantum) ### ML-DSA Package (Post-Quantum)
```go ```go
// Generate key pair // Generate key pair
@@ -159,7 +159,7 @@ func Sign(sk PrivateKey, message []byte) ([]byte, error)
func Verify(pk PublicKey, message []byte, sig []byte) bool func Verify(pk PublicKey, message []byte, sig []byte) bool
``` ```
### Kyber Package (Post-Quantum Key Exchange) ### ML-KEM Package (Post-Quantum Key Exchange)
```go ```go
// Generate key pair // Generate key pair
@@ -224,7 +224,7 @@ for _, pk := range publicKeys {
// Use hybrid signatures during transition period // Use hybrid signatures during transition period
type HybridSignature struct { type HybridSignature struct {
BLS bls.Signature BLS bls.Signature
Dilithium []byte ML-DSA []byte
} }
func SignHybrid(message []byte, blsKey *bls.PrivateKey, pqKey dilithium.PrivateKey) (*HybridSignature, error) { func SignHybrid(message []byte, blsKey *bls.PrivateKey, pqKey dilithium.PrivateKey) (*HybridSignature, error) {
@@ -236,7 +236,7 @@ func SignHybrid(message []byte, blsKey *bls.PrivateKey, pqKey dilithium.PrivateK
return &HybridSignature{ return &HybridSignature{
BLS: blsSig, BLS: blsSig,
Dilithium: pqSig, ML-DSA: pqSig,
}, nil }, nil
} }
``` ```
@@ -256,10 +256,10 @@ func SignHybrid(message []byte, blsKey *bls.PrivateKey, pqKey dilithium.PrivateK
| Operation | Time | Size | | Operation | Time | Size |
|-----------|------|------| |-----------|------|------|
| Dilithium Sign | 0.8 ms | 2.4 KB | | ML-DSA Sign | 0.8 ms | 2.4 KB |
| Dilithium Verify | 0.3 ms | - | | ML-DSA Verify | 0.3 ms | - |
| Kyber Encapsulate | 0.1 ms | 1.1 KB | | ML-KEM Encapsulate | 0.1 ms | 1.1 KB |
| Kyber Decapsulate | 0.1 ms | - | | ML-KEM Decapsulate | 0.1 ms | - |
## Testing ## Testing
docs/content/docs/post-quantum.mdx
+3 -3
View File
@@ -18,7 +18,7 @@ Post-quantum cryptography protects against attacks from both classical and quant
## ML-DSA (Module Lattice Digital Signature Algorithm) ## ML-DSA (Module Lattice Digital Signature Algorithm)
ML-DSA, formerly known as CRYSTALS-Dilithium, provides quantum-resistant digital signatures based on lattice problems. ML-DSA, formerly known as ML-DSA (FIPS 204, formerly CRYSTALS-Dilithium), provides quantum-resistant digital signatures based on lattice problems.
### Security Parameters ### Security Parameters
@@ -119,7 +119,7 @@ func exampleMLDSA() {
## ML-KEM (Module Lattice Key Encapsulation Mechanism) ## ML-KEM (Module Lattice Key Encapsulation Mechanism)
ML-KEM, formerly known as CRYSTALS-Kyber, provides quantum-resistant key exchange using lattice-based cryptography. ML-KEM, formerly known as ML-KEM (FIPS 203, formerly CRYSTALS-Kyber), provides quantum-resistant key exchange using lattice-based cryptography.
### Security Parameters ### Security Parameters
@@ -239,7 +239,7 @@ func (hke *HybridKeyExchange) Encapsulate(peerMLKEM *mlkem.PublicKey, peerECDH *
## SLH-DSA (Stateless Hash-Based Digital Signature Algorithm) ## SLH-DSA (Stateless Hash-Based Digital Signature Algorithm)
SLH-DSA, also known as SPHINCS+, provides hash-based signatures that don't require state management. SLH-DSA, also known as SLH-DSA (FIPS 205, formerly SPHINCS+), provides hash-based signatures that don't require state management.
### Security Parameters ### Security Parameters
docs/content/docs/ring-signatures.mdx
+9 -9
View File
@@ -1,15 +1,15 @@
--- ---
title: Corona (Lattice Threshold Signatures) title: Pulsar (Lattice Threshold Signatures)
description: Lattice-based threshold signature scheme for post-quantum consensus description: Lattice-based threshold signature scheme for post-quantum consensus
--- ---
# Corona # Pulsar
Corona is a lattice-based threshold signature scheme used in Lux consensus for post-quantum security. It enables t-of-n validators to collaboratively create signatures without any single party controlling the signing key. Pulsar is a lattice-based threshold signature scheme used in Lux consensus for post-quantum security. It enables t-of-n validators to collaboratively create signatures without any single party controlling the signing key.
## Overview ## Overview
Corona provides: Pulsar provides:
- **Threshold Security**: Requires t-of-n participants to sign - **Threshold Security**: Requires t-of-n participants to sign
- **Post-Quantum Resistance**: Based on lattice hard problems - **Post-Quantum Resistance**: Based on lattice hard problems
@@ -65,7 +65,7 @@ import (
) )
func main() { func main() {
// Get the threshold scheme (BLS for now, Corona when available) // Get the threshold scheme (BLS for now, Pulsar when available)
scheme, err := threshold.GetScheme(threshold.SchemeBLS) scheme, err := threshold.GetScheme(threshold.SchemeBLS)
if err != nil { if err != nil {
panic(err) panic(err)
@@ -95,7 +95,7 @@ func main() {
### Threshold Operations ### Threshold Operations
Corona threshold operations are coordinated through the consensus layer: Pulsar threshold operations are coordinated through the consensus layer:
```go ```go
// In consensus layer (github.com/luxfi/consensus) // In consensus layer (github.com/luxfi/consensus)
@@ -150,12 +150,12 @@ type FinalizedBlock struct {
### Dual-Layer Security ### Dual-Layer Security
Lux uses both BLS and Corona: Lux uses both BLS and Pulsar:
| Layer | Purpose | Security | | Layer | Purpose | Security |
|-------|---------|----------| |-------|---------|----------|
| BLS | Fast aggregation, classical | 128-bit classical | | BLS | Fast aggregation, classical | 128-bit classical |
| Corona | Threshold, post-quantum | Lattice hard problems | | Pulsar | Threshold, post-quantum | Lattice hard problems |
Both must be valid for block finalization. Both must be valid for block finalization.
@@ -197,7 +197,7 @@ Precomputed shares enable:
| ECDSA | Classical | No | With MPC | | ECDSA | Classical | No | With MPC |
| BLS | Classical | No | Native | | BLS | Classical | No | Native |
| ML-DSA | Post-Quantum | Yes | No | | ML-DSA | Post-Quantum | Yes | No |
| Corona | Post-Quantum | Yes | Yes | | Pulsar | Post-Quantum | Yes | Yes |
## Integration with Signer Package ## Integration with Signer Package
docs/content/docs/signer.mdx
+16 -16
View File
@@ -1,17 +1,17 @@
--- ---
title: Signer title: Signer
description: Hybrid BLS and Corona signing for Lux consensus description: Hybrid BLS and Pulsar signing for Lux consensus
--- ---
# Signer # Signer
Hybrid signing combining BLS with Corona (lattice-based threshold signatures) for Lux consensus. Hybrid signing combining BLS with Pulsar (lattice-based threshold signatures) for Lux consensus.
## Overview ## Overview
- **Hybrid Signatures**: BLS + Corona threshold signing - **Hybrid Signatures**: BLS + Pulsar threshold signing
- **Classical Security**: BLS provides efficient, aggregatable signatures - **Classical Security**: BLS provides efficient, aggregatable signatures
- **Post-Quantum Ready**: Corona lattice-based threshold scheme - **Post-Quantum Ready**: Pulsar lattice-based threshold scheme
- **Consensus Optimized**: Designed for Lux's Quasar consensus - **Consensus Optimized**: Designed for Lux's Quasar consensus
## Architecture ## Architecture
@@ -21,7 +21,7 @@ Lux consensus uses two cryptographic layers:
| Layer | Algorithm | Purpose | | Layer | Algorithm | Purpose |
|-------|-----------|---------| |-------|-----------|---------|
| Classical | BLS12-381 | Efficient aggregatable signatures | | Classical | BLS12-381 | Efficient aggregatable signatures |
| Threshold | Corona | Lattice-based threshold signatures | | Threshold | Pulsar | Lattice-based threshold signatures |
## Implementation ## Implementation
@@ -42,7 +42,7 @@ func main() {
} }
fmt.Printf("BLS Public Key: %x\n", s.GetBLSPublicKey()) fmt.Printf("BLS Public Key: %x\n", s.GetBLSPublicKey())
fmt.Printf("Corona Public Key: %x\n", s.GetCoronaPublicKey().Bytes()) fmt.Printf("Pulsar Public Key: %x\n", s.GetCoronaPublicKey().Bytes())
} }
``` ```
@@ -60,12 +60,12 @@ func verify(s *signer.Signer, msg, sig []byte) bool {
} }
``` ```
### Corona Threshold Signing ### Pulsar Threshold Signing
Corona is a lattice-based threshold signature scheme used for post-quantum security in consensus: Pulsar is a lattice-based threshold signature scheme used for post-quantum security in consensus:
```go ```go
// Corona threshold signing requires coordination through consensus // Pulsar threshold signing requires coordination through consensus
// The signer package provides key management // The signer package provides key management
pk := s.GetCoronaPublicKey() pk := s.GetCoronaPublicKey()
@@ -77,7 +77,7 @@ pk := s.GetCoronaPublicKey()
### Quasar Consensus ### Quasar Consensus
The Lux Quasar consensus uses both BLS and Corona: The Lux Quasar consensus uses both BLS and Pulsar:
```go ```go
type ConsensusMessage struct { type ConsensusMessage struct {
@@ -93,7 +93,7 @@ func aggregateBLS(sigs [][]byte) ([]byte, error) {
return bls.AggregateSignatures(sigs) return bls.AggregateSignatures(sigs)
} }
// Corona uses threshold aggregation // Pulsar uses threshold aggregation
// Requires t-of-n validators to create final signature // Requires t-of-n validators to create final signature
``` ```
@@ -120,7 +120,7 @@ type FinalizedBlock struct {
| Signature Size | 96 B | Constant | | Signature Size | 96 B | Constant |
| Public Key Size | 48 B | Compressed | | Public Key Size | 48 B | Compressed |
Corona threshold operations depend on the consensus layer. Pulsar threshold operations depend on the consensus layer.
## Key Management ## Key Management
@@ -149,8 +149,8 @@ coronaKey := s.CoronaPrivateKey()
The hybrid approach provides security even if one algorithm is compromised: The hybrid approach provides security even if one algorithm is compromised:
- **BLS only broken**: Corona threshold maintains security - **BLS only broken**: Pulsar threshold maintains security
- **Corona only broken**: BLS maintains classical security - **Pulsar only broken**: BLS maintains classical security
- **Both secure**: Defense in depth - **Both secure**: Defense in depth
### Key Generation ### Key Generation
@@ -168,7 +168,7 @@ func secureKeyGeneration() (*signer.Signer, error) {
return nil, errors.New("BLS key generation failed") return nil, errors.New("BLS key generation failed")
} }
if s.GetCoronaPublicKey() == nil { if s.GetCoronaPublicKey() == nil {
return nil, errors.New("Corona key generation failed") return nil, errors.New("Pulsar key generation failed")
} }
return s, nil return s, nil
@@ -192,7 +192,7 @@ func TestSigner(t *testing.T) {
// Wrong message should fail // Wrong message should fail
require.False(t, s.VerifyBLS([]byte("wrong"), blsSig)) require.False(t, s.VerifyBLS([]byte("wrong"), blsSig))
// Corona key should exist // Pulsar key should exist
require.NotNil(t, s.GetCoronaPublicKey()) require.NotNil(t, s.GetCoronaPublicKey())
} }
``` ```
mldsa/README.md
+1 -1
View File
@@ -1,6 +1,6 @@
# ML-DSA (Module-Lattice Digital Signature Algorithm) for Lux # ML-DSA (Module-Lattice Digital Signature Algorithm) for Lux
FIPS 204 compliant implementation of ML-DSA (formerly known as CRYSTALS-Dilithium) post-quantum signatures. FIPS 204 compliant implementation of ML-DSA (formerly known as ML-DSA (FIPS 204, formerly CRYSTALS-Dilithium)) post-quantum signatures.
## Overview ## Overview
rust/lux-crypto-mldsa/README.md
+1 -1
View File
@@ -1,7 +1,7 @@
# lux-crypto-mldsa # lux-crypto-mldsa
Canonical Rust binding for Lux ML-DSA (FIPS 204, final standardized form of Canonical Rust binding for Lux ML-DSA (FIPS 204, final standardized form of
CRYSTALS-Dilithium). ML-DSA (FIPS 204, formerly CRYSTALS-Dilithium)).
| Mode | NIST level | pk | sk | sig | | Mode | NIST level | pk | sk | sig |
|-------------|------------|--------|-------|--------| |-------------|------------|--------|-------|--------|
rust/lux-crypto-mlkem/README.md
+1 -1
View File
@@ -1,7 +1,7 @@
# lux-crypto-mlkem # lux-crypto-mlkem
Canonical Rust binding for Lux ML-KEM (FIPS 203, final standardized form of Canonical Rust binding for Lux ML-KEM (FIPS 203, final standardized form of
CRYSTALS-Kyber). ML-KEM (FIPS 203, formerly CRYSTALS-Kyber)).
| Mode | NIST level | pk | sk | ct | ss | | Mode | NIST level | pk | sk | ct | ss |
|-------------|------------|--------|-------|-------|----| |-------------|------------|--------|-------|-------|----|
rust/lux-crypto-poly_mul/README.md
+1 -1
View File
@@ -9,7 +9,7 @@ Wraps the C-ABI exposed by `luxcpp/crypto/poly_mul`.
- **Polynomial multiplication** in `Z_Q[X] / (X^n + 1)` (negacyclic ring) - **Polynomial multiplication** in `Z_Q[X] / (X^n + 1)` (negacyclic ring)
- Built on top of `lux-crypto-ntt` - Built on top of `lux-crypto-ntt`
- Used as a primitive for lattice-based schemes (ML-DSA, ML-KEM, Corona) - Used as a primitive for lattice-based schemes (ML-DSA, ML-KEM, Pulsar)
## Build ## Build
rust/lux-crypto-slhdsa/README.md
+1 -1
View File
@@ -1,7 +1,7 @@
# lux-crypto-slhdsa # lux-crypto-slhdsa
Canonical Rust binding for Lux SLH-DSA (FIPS 205, the final standardized form Canonical Rust binding for Lux SLH-DSA (FIPS 205, the final standardized form
of SPHINCS+). of SLH-DSA (FIPS 205, formerly SPHINCS+)).
**Status: stub — luxcpp/crypto/slhdsa/c-abi/c_slhdsa.cpp returns **Status: stub — luxcpp/crypto/slhdsa/c-abi/c_slhdsa.cpp returns
`CRYPTO_ERR_NOTIMPL`.** The Rust binding is shipped against the canonical `CRYPTO_ERR_NOTIMPL`.** The Rust binding is shipped against the canonical