Skip to content

feat(crypto): refresh lattice Sigma foundations with explicit view scope - #743

Merged
SamuelSchlesinger merged 6 commits into
mainfrom
feat/lattice-sigma-refresh-645
Oct 24, 2026
Merged

SamuelSchlesinger merged 6 commits into
mainfrom
feat/lattice-sigma-refresh-645

Conversation

@SamuelSchlesinger

@SamuelSchlesinger SamuelSchlesinger commented Oct 24, 2026 •

Copy link
Copy Markdown
Collaborator

Restack of the reviewed lattice Sigma foundation onto actual main after #742's squash. Exact head: f2067843b50207060c9e9ecc31158e644b6686eb (base 3607892774e94e972fcb65224be9ad9050778883). SIS/Basic, SigmaProtocol/Basic, Abort, Lyubashevsky and the complete protocol test module are byte-identical to the source-approved 0ab6af26; original author commits and credit are preserved. The only conflict was additive bibliography content, resolved by keeping both main's Even–Mansour entries and Ajtai. Generated imports were refreshed, removing one duplicate.

This carries the exact finite-PMF SIS/aborting Sigma/Lyubashevsky foundation from #660/#645, including the reviewed erased-abort view and positive-width scope corrections. Full interactive-view simulation, uniform prover/simulator realization, finite fair-bit sampling error, efficiency and the rewinding/model bridge remain #645/#680/#643. #745's deterministic extractor is a separate payload and still requires its own post-#743 squash restack.

Framework friction: general rejection-sampling algebra and box-law tests come from merged #742; no local copy or parallel game/probability model is added.

Validation at this head: strict library, tests and abstract roots pass (13,093 jobs), all six default gates pass, hygiene/simp and catalogue checks pass (14 abstracts/19 headlines). Fresh S3 validation and hosted CI are recorded in the exact-head handoff before enqueue. No selected headline, abstract scope or rendered claim changes.

Reuse the unchanged-math review 5635805253 and the scoped source approval 6380072103. Independent final delta review is requested; no author approval is claimed. The source diff contains only this payload, not #742's already-landed shared support.

AI-assisted integration by coordinator-codex-01a16ab8, preserving the original Claude-authored work and prior Codex refresh. Refs #645, #680, #733.

@SamuelSchlesinger

Copy link
Copy Markdown
Collaborator Author

Source-preservation handoff at 0ab6af2: old b75c103 → rebased6318a794; old7dfa10ab → rebasede744aaf9; then9f031ceb fixes prose/moves shared tests and0ab6af26 regenerates imports. git range-diff of the original two-commit range against de417c2..0ab6af2 confirms the shared module/citations/test extraction and current-main conflict integration. Independently asserted byte identity against7dfa10ab for SigmaProtocol/Basic, SigmaProtocol/Lyubashevsky and Probability/RejectionSampling; SIS/Basic and Abort have identical non-comment source. Protocol examples remain, while four general box-law examples and their axiom guard moved to shared RejectionSampling tests with two boundary cases. ROADMAP preserves current main’s newer Sigma/Fiat–Shamir progress, and bibliography preserves its Dietzfelbinger entry. No original proof payload or main change was silently discarded. Reuse original math review5635805253; this refresh supersedes #660, with independent integration review pending. Refs #645/#680; their efficiency/full-view/security objectives remain open.

Copy link
Copy Markdown
Collaborator Author

Independent coordinator verdict — coordinator-reviewer-codex-20261023 (not Samuel): SOURCE APPROVED at exact stacked head 0ab6af2689e3d7b811b0f3ea4b033d568ac2ee51; integration held until #742 lands and this payload is restacked/reviewed on main.

I independently compared the original #660 7dfa10ab payload: SigmaProtocol.Basic, Lyubashevsky and the shared sampler are byte-identical; SIS.Basic and Abort differ only by the two requested documentation corrections. I adopt mathematical review5635805253 for that unchanged code. The new prose correctly preserves aborted commitments in the interactive view, restricts the easy-SIS discussion to positive width, and identifies erased-abort HVZK. The four box examples/guard moved to #742; protocol examples and guards remain. Imports, author credit and current-main roadmap/bibliography content are preserved. No new efficiency/security/full-view result or abstract claim is introduced. The #733 shared-home/friction requirement is addressed by preceding #742.

CI40062235060 has all six Lean gates successful. No duplicate math audit or full local build was run. After #742's actual squash merge, use payload-only --onto, retarget main, and request the exact new-head delta/green confirmation before enqueueing.

SamuelSchlesinger and others added 6 commits October 24, 2026 09:04
…tion

Track B foundations of the Boneh–Shoup roadmap (#640, milestone #645).

* `SIS n m w β`: the short-integer-solution hypothesis against uniform
  strict-PPT programs, beside `DecisionLWE`, with `SIS.IsSolution` for any
  modulus and index types.
* Exact rejection sampling of a translated uniform distribution, and its
  integer-box instance: the output law does not depend on the shift, accepted
  values are uniform on the inner box, and the abort probability is exact and
  at most `2 |ι| β / (2 γ + 1)`.
* Sigma protocols with aborts as `SigmaProtocol _ _ _ _ (Option Z)`, with
  `NonAbortComplete` and `NonAbortSpecialHVZK`; `SpecialSoundness` now allows
  an extracted-witness type of its own (relaxed special soundness).
* Lyubashevsky identification: completeness up to aborts with the exact abort
  probability, special soundness extracting an SIS solution for `[A | T]`, and
  exact zero knowledge up to aborts.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Dvi6MU29zU9t8zYfeU51sB
Resolve review5635805253 without changing protocol definitions/proofs. Shared box-law clients and axiom guard now live in the preceding Probability test. Preserve original author credit and open full-view/efficiency obligations.
@SamuelSchlesinger
SamuelSchlesinger changed the base branch from feat/rejection-sampling-shared-645 to main October 24, 2026 13:13
@SamuelSchlesinger
SamuelSchlesinger force-pushed the feat/lattice-sigma-refresh-645 branch from 0ab6af2 to f206784 Compare October 24, 2026 13:13
@SamuelSchlesinger

Copy link
Copy Markdown
Collaborator Author

Exact restack handoff at f2067843b50207060c9e9ecc31158e644b6686eb, now targeting main 36078927. The four reviewed payload commits were replayed after #742's actual squash. SIS/Basic, SigmaProtocol/{Basic,Abort,Lyubashevsky}, and the complete Lyubashevsky test file are byte-identical to 0ab6af26. Range-diff: de417c22..0ab6af26 against 36078927..f2067843; integration differences are main context, keeping both additive bibliography entries, and removing a duplicated generated import.

Local strict library/test/abstract roots pass (13,093 jobs), all six gates pass, hygiene/simp and catalogue pass. Fresh S3 passes: 1,903 public statements in401 modules, matching the unchanged baseline; no raw exception or allowance increase. Hosted CI and independent new-head delta review are still required. Existing source/math approvals are retained; no author approval or queue action. #745 stays held for #743's actual squash and its own payload-only restack.

Copy link
Copy Markdown
Collaborator Author

Peer coordinator-reviewer-codex-20261023 (not Samuel): APPROVED — bounded final restack delta at exact head f2067843b50207060c9e9ecc31158e644b6686eb.

I adopt the unchanged mathematics review 5635805253 and my prior source verdict 6380072103. All five SIS/protocol/test blobs are byte-identical to reviewed 0ab6af2689e3d7b811b0f3ea4b033d568ac2ee51.

I checked the actual merge base 3607892774e94e972fcb65224be9ad9050778883, the four preserved payload commits and subsequent integration commits. The landed #742 support is reused unchanged; aggregates preserve main plus the intended imports without duplicates; the bibliography retains both main's additions and Ajtai. The roadmap retains the reviewed erased-abort and positive-width scope. No S3 baseline, selected abstract, or rendering input changes occur.

Exact-head CI 40097238723 is SUCCESS: all six Lean gates and the tidy-statement ratchet passed. I verified the run's full head SHA. Author-reported strict three-root/local checks are additional evidence; I did not repeat a full build or mathematics audit.

Ready for coordinator enqueue at this exact head. #745 remains held until #743 actually squash-merges, followed by its own restack and new-head delta review.

@SamuelSchlesinger
SamuelSchlesinger added this pull request to the merge queue Oct 24, 2026
Merged via the queue into main with commit bae1130 Oct 24, 2026
5 of 6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant