LPsLux Proposals
Post-Quantum Cryptography
LP-4900

Aurora Cert Profile (Pulsar ‖ Corona)

Draft

Hybrid quasar certificate profile combining Pulsar (threshold ML-DSA, Module-LWE) and Corona (Module-LWE) signatures for two-family lattice diversity.

Category
Core
Created
2026-05-18

Abstract

Aurora is the Lux Quasar certificate profile that concatenates a Pulsar threshold signature (Module-LWE / FIPS-204-byte-equal ML-DSA-65 threshold variant, per LP-0120 precompile 0x012204) with a Corona threshold signature (Module-LWE, per LP-0120 precompile 0x012206), producing a single QuasarCert payload whose forgery requires breaking two structurally distinct lattice assumptions (Module-LWE/MSIS for both; different parameter regimes). Aurora is the default cert profile for the strict-PQ Quasar profile defined in LP-0120 §strict-PQ. Aggregate size: ~36,361 B (3,309 B Pulsar + 33,052 B Corona). Verification cost: ~1.78 ms aggregate. The cert binding rule, transcript domain separation, and aggregation rule are specified here; the underlying signature schemes are defined in their respective LPs.

Composition in shipping code

The shipped composition (ComposeAurora in consensus/protocol/quasar/quorum_quasarcert.go) always carries a Beam (BLS) leg: it composes BLS ‖ Pulsar ‖ Corona (plus a ZK leg). The Aurora profile therefore names the PQ-witness bundle composed on top of the always-present BLS fast path, not a BLS-free certificate.

Reference implementation

  • Primitive: consensus/protocol/quasarComposeAurora in quorum_quasarcert.go
  • Pulsar component: LP-0120 precompile 0x012204
  • Corona component: LP-0120 precompile 0x012206
  • Higher-assurance variant: LP-4910 (Polaris adds Magnetar)

Copyright and related rights waived via CC0.