LPsLux Proposals
Post-Quantum Cryptography
LP-4910

Polaris Cert Profile (Pulsar ‖ Corona ‖ Magnetar)

Draft

Maximum-assurance quasar certificate profile combining Pulsar (Module-LWE), Corona (Module-LWE), and Magnetar (hash-collision) signatures for three-family cryptographic diversity.

Category
Core
Created
2026-05-18

Abstract

Polaris — Pulsar ‖ Corona ‖ Magnetar cert profile. North-star metaphor: hash family stands when lattice fails, lattice stands when hash fails. Cross-family defense in depth at maximum-assurance tier.

Polaris is the Lux Quasar certificate profile that extends Aurora (LP-4900) with a third signature from the Magnetar scheme (a quorum of independent SLH-DSA signers — Magnetar Track A; threshold Track B is fail-closed — LP-4540), producing a certificate whose forgery requires breaking three structurally distinct cryptographic hardness assumptions simultaneously: MLWE/MSIS (Pulsar, ML-DSA params), Module-LWE (Corona, Ringtail params), and hash collision resistance (Magnetar, SLH-DSA backbone). Polaris is the maximum-assurance cert profile for long-lived institutional signing (custody root keys, treasury authorization, governance upgrade keys). Aggregate size: ~72,025 B (3,309 B Pulsar + 33,052 B Corona + 35,664 B Magnetar). Verification cost: ~3.7 ms aggregate. The cert binding rule, transcript domain separation, and aggregation rule are specified here; the underlying signature schemes are defined in their respective LPs.

Composition in shipping code

The shipped composition (consensus/protocol/quasar/polaris.go plus quorum_quasarcert.goComposeAurora/ComposePolaris — and the cert_policy_table.go postures PolicyStrictQuasar, PolicyPolarisHashPQ, PolicyPolarisMax) always carries a Beam (BLS) leg: the PQ witnesses are composed alongside the always-present BLS fast path. The Polaris profile therefore names the PQ-witness bundle composed on top of that BLS leg, not a BLS-free certificate.

Reference implementation

  • Primitive: consensus/protocol/quasarpolaris.go + quorum_quasarcert.go (ComposeAurora/ComposePolaris) + cert_policy_table.go
  • Two-family baseline: LP-4900 (Aurora)
  • Pulsar component: LP-0120 precompile 0x012204
  • Corona component: LP-0120 precompile 0x012206
  • Magnetar component: LP-4540, LP-0120 precompile 0x012207

Copyright and related rights waived via CC0.