Experimental Ed25519-Style Verifier & UF-CMA Formalization Upgrade (#227)
Just pushed a major verification milestone to the Sovereign-Mohawk-Proto repository, transitioning our formal models from a temporary placeholder to a genuine, experimental Ed25519-style verifier implemented natively in Lean 4.
Key Highlights:
- New Formalization Modules (
Ed25519.lean&SHA512.lean): Introduced a complete experimental verifier model featuring prime field arithmetic ($p = 2^{255}-19$), twisted-Edwards point addition/doubling, an RFC 6234 SHA-512 implementation dependency, and full signature verification logic. - Theorem Wiring & Cleanup: Updated
TheoremUF_CMA_Ed25519.leanto purge the insecuresig = msgplaceholder andplaceholder_is_forgeabletheorem.Ed25519ToPQCnow properly delegates toed25519Verify. - Test Vector Validation: Successfully validated against the RFC 8032 empty-message test vector (valid signatures return
true, while tampered messages returnfalse). UF-CMA security remains cleanly conditional on an explicit discrete-log hardness hypothesis (h_secure). - Build & Quality Gates: All Lean formalization, specification, and refinement builds pass successfully, along with automated proof linting scripts.
⚠️ **Honest Experimental Scoping:* Message encoding is currently restricted (empty message or 32-bit LE encoded), scalar multiplication assumes a 256-bit scalar bound, and the group law/decoding components are unaudited for production deployments.*
Log in or sign up for Devpost to join the conversation.