tfhe: Phase 1 real Lagrange-interpolated distributed decryption (issue #20)

.github/workflows/ci.yml

@@ -8,7 +8,7 @@ on:
   workflow_dispatch:
 
 env:
-  GO_VERSION: '1.25.5'
+  GO_VERSION: '1.26.3'
 
 jobs:
   lint:
@@ -50,7 +50,7 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
-        go-version: ['1.25.5']
+        go-version: ['1.26.3']
     steps:
       - name: Checkout code
         uses: actions/checkout@v4

.github/workflows/fresh-clone-ci.yml

@@ -14,7 +14,7 @@ on:
   workflow_dispatch:
 
 env:
-  GO_VERSION: '1.25.7'
+  GO_VERSION: '1.26.3'
 
 jobs:
   fresh-clone-test:
@@ -60,6 +60,7 @@ jobs:
       - name: go test (count=1, no cache)
         id: gotest
         working-directory: repo
+        shell: bash
         run: |
           set -o pipefail
           go test -count=1 -timeout 300s ./... 2>&1 | tee ../go-test.log

.gitignore

@@ -4,7 +4,13 @@
 *.dll
 *.so
 *.dylib
-threshold-cli
+
+# Build artifacts from `make build` / `make examples`
+# (`bin/` is the Makefile output dir; `example/example` is built from
+# `example/example.go` by the `examples` target.)
+/bin/
+/example/example
+/example/dynamic_reshare_example
 
 # Test binary, built with `go test -c`
 *.test
@@ -22,3 +28,4 @@ AGENTS.md
 GEMINI.md
 QWEN.md
 /mldsa-bench
+*.eco

CHANGELOG.md

@@ -10,7 +10,7 @@ This document narrates the original Dec 2025 implementation timeline. All work w
 
 ### v1.6.5 — 2026-04-28
 - fix(lss/adapters): ed25519 nil/cross-curve guard — kill xrpl.go:185 panic
-- fix(ringtail): use SignWithConfig in tests after Sign API expanded
+- fix(corona): use SignWithConfig in tests after Sign API expanded
 - fix(go.sum): add missing h1 hashes for luxfi/log and 4 deps
 - sec(tfhe): UNSAFE markers + panic guards remain canonical (Red F5 fail-closed)
 

LICENCE

@@ -17,7 +17,7 @@ are not limited to:
 THRESHOLD CRYPTOGRAPHY INNOVATIONS:
 - LSS (Lagrange Secret Sharing) Dynamic Resharing Without Key Reconstruction
 - Multiplicative Blinding Protocols (Protocol I & II) for Share Privacy
-- Ringtail Post-Quantum Lattice-Based Threshold Signatures
+- Corona Post-Quantum Lattice-Based Threshold Signatures
 - Threshold BIP-32 Deterministic Key Derivation
 - Identifiable Abort Protocol with Blame Assignment
 - Automatic Generation-Based Rollback with Party Eviction

LICENSING.md

@@ -0,0 +1,18 @@
+# Licensing
+
+This repository is licensed under the **Lux Ecosystem License v1.2**
+(see [LICENSE](LICENSE)). It belongs to the **patent-protected** tier
+of the Lux three-tier IP strategy.
+
+- Free for **Authorized Networks** (Lux Primary NetID=1, EVM 96369;
+  official testnets/devnets; Descending Chains).
+- Free for **Research Use** (academic, education, evaluation).
+- **Commercial use outside Authorized Networks requires a paid
+  commercial license**.
+
+For the canonical Lux IP and licensing strategy and the precise
+definitions of "Authorized Network", "Descending Chain", and "Research
+Use", see:
+<https://github.com/luxfi/.github/blob/main/profile/README.md>
+
+For commercial licensing inquiries, contact `licensing@lux.network`.

LLM.md

@@ -11,7 +11,7 @@ Production-ready universal threshold signature implementation supporting 20+ blo
 ```
 threshold/
 ├── cmd/threshold-cli/     # CLI tool
-├── cmd/thresholdd/        # JSON-RPC 2.0 daemon — all six schemes over one socket (127.0.0.1:7300)
+├── cmd/thresholdd/        # ZAP byte-passthrough daemon — all seven schemes over one socket (127.0.0.1:7301). HTTP+JSON+hex deleted 2026-06-04.
 ├── internal/              # Private implementation details
 │   ├── bip32/            # BIP-32 key derivation
 │   ├── elgamal/          # ElGamal encryption
@@ -35,7 +35,7 @@ threshold/
 │   ├── frost/            # FROST Schnorr/EdDSA (2-round signing)
 │   ├── lss/              # LSS dynamic resharing
 │   ├── doerner/          # 2-of-2 optimized ECDSA
-│   ├── ringtail/         # Post-quantum lattice-based
+│   ├── corona/           # Post-quantum lattice-based (R-LWE)
 │   └── bls/              # BLS aggregate signatures
 └── docs/                  # Documentation
 ```
@@ -48,7 +48,7 @@ threshold/
 | **FROST** | Schnorr/EdDSA | 2 | ~8ms | BIP-340 Taproot |
 | **LSS** | ECDSA | Variable | ~35ms reshare | Dynamic resharing |
 | **Doerner** | ECDSA | 2-party | ~5ms | Constant-time |
-| **Ringtail** | Lattice | Variable | - | Post-quantum |
+| **Corona** | Lattice (R-LWE) | Variable | - | Post-quantum |
 
 ## Important Conventions
 
@@ -119,7 +119,12 @@ Status per scheme:
 - `cggmp21` — full keygen + sign via `protocols/cmp` (CGGMP21 fork)
 - `frost` — full RFC 9591 secp256k1 via `protocols/frost`
 - `pulsar` — full Pulsar M-LWE via `luxfi/corona/threshold`
-- `corona` — full Ringtail R-LWE via `luxfi/ringtail/threshold`
+- `corona` — full Corona R-LWE via `luxfi/threshold/protocols/corona`.
+  Wire-level alias `"ringtail"` is accepted on read (deprecated; emit
+  `"corona"` on all new clients). Aliases live in `pkg/thresholdd/
+  server.go::schemeAliases`; remove an alias once external callers have
+  migrated. Pre-2026-06 callers that still send `ringtail.keygen` etc.
+  continue to dispatch correctly.
 - `bls` — full Shamir/Lagrange via `protocols/bls.TrustedDealer`
 - `doerner` — round-protocol non-functional upstream; surface reserved,
   every op returns an explicit error. Fix upstream and remove the guard.

README.md

@@ -17,7 +17,7 @@ The most comprehensive threshold signature implementation supporting **20+ block
 ### ✨ Key Features
 
 - **🌐 Universal Multi-Chain Support** - Native adapters for XRPL, Ethereum, Bitcoin, Solana, TON, Cardano, and 14+ more chains
-- **🔐 Post-Quantum Security** - Ringtail lattice-based signatures with 128/192/256-bit security levels
+- **🔐 Post-Quantum Security** - Corona lattice-based signatures with 128/192/256-bit security levels
 - **⚡ Lightning Fast** - Sub-25ms signing, 12-82ms key generation
 - **🔄 Dynamic Resharing** - Add/remove parties without downtime or key reconstruction
 - **🛡️ Byzantine Fault Tolerant** - Handles up to t-1 malicious parties
@@ -40,7 +40,7 @@ The most comprehensive threshold signature implementation supporting **20+ block
 - **ECDSA** (secp256k1) - Bitcoin, Ethereum, XRPL
 - **EdDSA** (Ed25519) - Solana, TON, Cardano, NEAR
 - **Schnorr** (BIP-340) - Bitcoin Taproot, Polkadot
-- **Ringtail** (Post-Quantum) - All chains via adapter
+- **Corona** (Post-Quantum) - All chains via adapter
 
 ## 🌍 Blockchain Support
 
@@ -99,10 +99,10 @@ manager := lss.NewRollbackManager(maxGenerations)
 restoredConfig, _ := manager.Rollback(targetGeneration)
 ```
 
-### Post-Quantum Signatures (Ringtail)
+### Post-Quantum Signatures (Corona)
 ```go
 // Create post-quantum adapter
-pqAdapter := adapters.NewRingtailAdapter(256, numParties) // 256-bit security
+pqAdapter := adapters.NewCoronaAdapter(256, numParties) // 256-bit security
 
 // Generate preprocessing
 preprocessing := pqAdapter.GeneratePreprocessing(parties, threshold, 100)
@@ -145,8 +145,9 @@ Heavy computations are automatically parallelized for optimal performance.
 - [Production Readiness Report](PRODUCTION_READY.md)
 - [LSS Protocol Paper](protocols/lss/README.md)
 - [CMP Implementation](docs/Threshold.pdf)
-- [API Reference](docs/api.md)
-- [Integration Guide](docs/integration.md)
+- [FROST Protocol](docs/FROST.md)
+- [Broadcast Channel](docs/Broadcast.md)
+- [Lux Integration Guide](docs/LUX_INTEGRATION.md)
 - [Security Audit](docs/audit.md)
 
 ## 🧪 Testing

cmd/corona_oracle/main.go

@@ -13,20 +13,22 @@
 // Q = 0x1000000004A01 / N = 256)? The C++ body is deliberately scoped as a
 // single-process oracle with luxcpp's own NTT prime — see corona.hpp lines
 // 31-39. The two Go paths cover different surfaces:
-//   * github.com/luxfi/corona covers the 2-round network protocol.
-//   * This file covers the C++ single-process algebraic shape.
+//   - github.com/luxfi/corona covers the 2-round network protocol.
+//   - This file covers the C++ single-process algebraic shape.
+//
 // Both are first-party algebraic primitives, neither wraps the other.
 //
 // Usage:
-//   cd lux/threshold/cmd/corona_oracle
-//   go run . > ../../../../luxcpp/crypto/corona/test/corona_kat.h
+//
+//	cd lux/threshold/cmd/corona_oracle
+//	go run . > ../../../../luxcpp/crypto/corona/test/corona_kat.h
 //
 // Determinism:
-//   * StreamPRNG: SHA-256(seed || counter_LE8) → 32-byte block, counter++.
-//   * pmf table: math.Exp matches darwin libm to ULPs sufficient for the
+//   - StreamPRNG: SHA-256(seed || counter_LE8) → 32-byte block, counter++.
+//   - pmf table: math.Exp matches darwin libm to ULPs sufficient for the
 //     uint64 CDT entries to be byte-equal (verified empirically; see comment
 //     at gaussianCDT).
-//   * float-to-int: we mirror the C++ static_cast<uint64_t>(d) which on x86
+//   - float-to-int: we mirror the C++ static_cast<uint64_t>(d) which on x86
 //     is FCVTZS / VCVTSS2SI semantics — matched here by uint64(d) in Go.
 package main
 
@@ -45,16 +47,16 @@ import (
 // ============================================================================
 
 const (
-	Q          uint64 = 998244353
-	N          int    = 512
-	L          int    = 4
-	K          int    = 4
-	TAU        int    = 30
-	GAUSS_BOUND int   = 12
-	SIGMA      float64 = 1.7
-	POLY_BYTES int    = N * 4
-	PK_BYTES   int    = (K*L + K) * POLY_BYTES // 40960
-	SIG_BYTES  int    = (1 + L) * POLY_BYTES   // 10240
+	Q           uint64  = 998244353
+	N           int     = 512
+	L           int     = 4
+	K           int     = 4
+	TAU         int     = 30
+	GAUSS_BOUND int     = 12
+	SIGMA       float64 = 1.7
+	POLY_BYTES  int     = N * 4
+	PK_BYTES    int     = (K*L + K) * POLY_BYTES // 40960
+	SIG_BYTES   int     = (1 + L) * POLY_BYTES   // 10240
 )
 
 var B_INF uint64 = Q / 4
@@ -481,13 +483,13 @@ type keyShare struct {
 }
 
 type Context struct {
-	t            uint32
-	n            uint32
-	A            [][]Poly // K x L
-	b            []Poly   // K
-	shares       []keyShare
-	seed         []byte
-	signCounter  uint64
+	t           uint32
+	n           uint32
+	A           [][]Poly // K x L
+	b           []Poly   // K
+	shares      []keyShare
+	seed        []byte
+	signCounter uint64
 }
 
 // Setup mirrors corona.cpp Setup.
@@ -629,14 +631,16 @@ func (ctx *Context) Sign(msg []byte) []byte {
 // ============================================================================
 
 // vectorSpec — one KAT vector. The C++ side will call:
-//   Setup(t, n, seed=seedASCII, seedLen=len(seedASCII))
-//   Sign(msg=msgASCII, msgLen=len(msgASCII))   // single Sign per ctx
+//
+//	Setup(t, n, seed=seedASCII, seedLen=len(seedASCII))
+//	Sign(msg=msgASCII, msgLen=len(msgASCII))   // single Sign per ctx
+//
 // and assert that pk_sha256 / sig_sha256 / sig_first64 match.
 type vectorSpec struct {
-	name    string
-	t, n    uint32
-	seed    string
-	msg     string
+	name string
+	t, n uint32
+	seed string
+	msg  string
 }
 
 // Sixteen deterministic vectors covering: t=1,n=1; t=2,n=3; t=3,n=5; t=4,n=7;

cmd/mldsa-bench/main.go

@@ -6,15 +6,17 @@
 // described in LP-045.
 //
 // Modes:
-//   individual   — each validator signs individually, verify all sigs
-//   committee    — committee of k validators signs, verify aggregate
-//   hierarchical — N validators partitioned into clusters, each cluster
-//                  produces one cert, clusters combine into root QC
+//
+//	individual   — each validator signs individually, verify all sigs
+//	committee    — committee of k validators signs, verify aggregate
+//	hierarchical — N validators partitioned into clusters, each cluster
+//	               produces one cert, clusters combine into root QC
 //
 // Usage:
-//   mldsa-bench -mode=individual -n=100 -level=44
-//   mldsa-bench -mode=committee -n=100 -k=32 -level=44
-//   mldsa-bench -mode=hierarchical -n=100 -clusters=4 -level=65
+//
+//	mldsa-bench -mode=individual -n=100 -level=44
+//	mldsa-bench -mode=committee -n=100 -k=32 -level=44
+//	mldsa-bench -mode=hierarchical -n=100 -clusters=4 -level=65
 //
 // Light mnemonic: the harness seeds ML-DSA key generation from a single
 // 32-byte secret so 100+ validators can be spun up on a local machine
@@ -41,6 +43,7 @@ import (
 var (
 	_ = crypto.Hash(0)
 )
+
 type mldsaMode = luxmldsa.Mode
 type mldsaPrivateKey = luxmldsa.PrivateKey
 type mldsaPublicKey = luxmldsa.PublicKey
@@ -122,9 +125,9 @@ func genValidators(n int, level mldsaMode, masterSeed [32]byte) []Validator {
 }
 
 type Timings struct {
-	Keygen  time.Duration
-	Sign    time.Duration
-	Verify  time.Duration
+	Keygen   time.Duration
+	Sign     time.Duration
+	Verify   time.Duration
 	SigBytes int
 }