Files
magnetar/proofs
Hanzo AI 30e71f1271 proofs: EC theories for Magnetar N1 + N4 (admit 0/0 across 13 files)
Tier A EC theory shells mirroring Pulsar v1.0.7's structure, adapted
to SLH-DSA reveal-and-aggregate. Class N1-analog byte-equality theorem
magnetar_n1_byte_equality is proved against the protocol-level
Magnetar_Threshold module type; the concrete extracted corollary
magnetar_n1_byte_equality_extracted composes the wrapper-bridge
lemmas. Entire dependency cone is admit 0/0.

Files (13):
  Magnetar_N1.ec                       — protocol-level spec + theorem
  Magnetar_N4.ec                       — reshare pk-preservation
  Magnetar_N1_Memory.ec                — byte-memory frame lemmas
  Magnetar_N1_Signature_Codec.ec       — FIPS 205 sig codec
  Magnetar_N1_Combine_Layout.ec        — Combine wire layout
  Magnetar_N1_Sign_Layout.ec           — single-party Sign wire layout
  Magnetar_N1_Combine_Refinement.ec    — Combine byte-walk (1 axiom)
  Magnetar_N1_Sign_Refinement.ec       — single-party byte-walk (1 axiom)
  Magnetar_N1_Combine_Wrapper.ec       — Combine wrapper bridge
  Magnetar_N1_Sign_Wrapper.ec          — Sign wrapper bridge
  Magnetar_N1_Extracted.ec             — concrete extracted corollary
  lemmas/SLHDSA_Functional.ec          — in-house FIPS 205 functional
  lemmas/Magnetar_CT.ec                — BGL leakage-model CT lemmas

Structural simplification vs Pulsar: SLH-DSA SignDeterministic is
straight-line (no rejection-sampling kappa loop), so Magnetar has
2 atomic byte-walk axioms (combine + sign monolithic) instead of
Pulsar v8's 14-axiom cascade. The Shamir/Lagrange algebra is shared
with Pulsar's bridge (cross-cited; byte-wise GF(257) is identical).

Bridge doc (proofs/lean-easycrypt-bridge.md) cross-cites the 4
Pulsar Shamir axioms and adds 2 Magnetar-specific entries
(mix_to_seed_first_arg_injective + derive_pk_is_slhdsa_pk_from_seed).
2026-05-19 08:38:50 -07:00
..