LPsLux Proposals
Post-Quantum Cryptography
LP-4420

ML-DSA-65 (FIPS 204 Level 3) Parameter Tier — Network Default

Draft

Parameter-tier sub-spec for ML-DSA-65 (NIST FIPS 204 security level 3), the Lux network default lattice signature. Algorithm definition deferred to LP-4400.

Category
Core
Created
2026-05-18

Implementation status (code-audited 2026-07-03): SHIPPED FIPS 204 parameters (k6/l5/eta4/tau49; sk 4032 B, sig 3309 B) confirmed against luxfi/crypto/mldsa (circl v1.6.3).

Abstract

ML-DSA-65 is the NIST FIPS 204 security-level-3 parameter set of the Module-Lattice-Based Digital Signature Algorithm and the Lux network default for post-quantum identity signatures (Pulsar layer of the Quasar triple consensus, per LP-0110 and LP-0120). This LP pins the tier identifier, parameter constants (k=6, l=5, eta=4, tau=49, beta=196, gamma1=2^19, gamma2=(q-1)/32, omega=55), and the implementation pointer; the algorithm itself is defined in LP-4400. Verification address 0x012204 is registered in LP-0120; mode-byte encoding follows LP-4090. Sizes: public key 1,952 B, secret key 4,032 B, signature 3,309 B. Verify ~181 µs (3 µs cached). ML-DSA-65 is the default for validator identity, consensus certificates, and warp messaging.

Reference implementation

  • Primitive: luxfi/crypto/mldsa/mldsa65
  • Threshold wrapper (Pulsar): LP-4450, luxfi/threshold/pulsar
  • Test vectors: NIST KAT vectors (FIPS 204 Appendix A)

Provenance

Originally LP-4320, renumbered 2026-05-18 to consolidate all cryptographic primitives into the 4xxx range with family sub-ranges (PQ lattice signatures 4400-4499). This slot (4420) was formerly SLH-DSA-192; that content moved to LP-4520. The 4320 slot is retained as a permanent pointer to this LP.

Copyright and related rights waived via CC0.