Aurora Cert Profile (Pulsar ‖ Corona)
Hybrid quasar certificate profile combining Pulsar (threshold ML-DSA, Module-LWE) and Corona (Module-LWE) signatures for two-family lattice diversity.
Abstract
Aurora is the Lux Quasar certificate profile that concatenates a
Pulsar threshold signature (Module-LWE / FIPS-204-byte-equal
ML-DSA-65 threshold variant, per LP-0120 precompile 0x012204)
with a Corona threshold signature (Module-LWE, per LP-0120
precompile 0x012206), producing a single QuasarCert payload whose
forgery requires breaking two structurally distinct lattice
assumptions (Module-LWE/MSIS for both; different parameter regimes). Aurora is
the default cert profile for the strict-PQ Quasar profile defined
in LP-0120 §strict-PQ. Aggregate size: ~36,361 B (3,309 B Pulsar +
33,052 B Corona). Verification cost: ~1.78 ms aggregate. The cert
binding rule, transcript domain separation, and aggregation rule
are specified here; the underlying signature schemes are defined
in their respective LPs.
Composition in shipping code
The shipped composition (ComposeAurora in
consensus/protocol/quasar/quorum_quasarcert.go) always carries a
Beam (BLS) leg: it composes BLS ‖ Pulsar ‖ Corona (plus a ZK leg).
The Aurora profile therefore names the PQ-witness bundle composed on
top of the always-present BLS fast path, not a BLS-free certificate.
Reference implementation
- Primitive:
consensus/protocol/quasar—ComposeAurorainquorum_quasarcert.go - Pulsar component: LP-0120 precompile
0x012204 - Corona component: LP-0120 precompile
0x012206 - Higher-assurance variant: LP-4910 (Polaris adds Magnetar)
Copyright
Copyright and related rights waived via CC0.