posted an update —

Experimental Ed25519-Style Verifier & UF-CMA Formalization Upgrade (#227)

Just pushed a major verification milestone to the Sovereign-Mohawk-Proto repository, transitioning our formal models from a temporary placeholder to a genuine, experimental Ed25519-style verifier implemented natively in Lean 4.

Key Highlights:

  • New Formalization Modules (Ed25519.lean & SHA512.lean): Introduced a complete experimental verifier model featuring prime field arithmetic ($p = 2^{255}-19$), twisted-Edwards point addition/doubling, an RFC 6234 SHA-512 implementation dependency, and full signature verification logic.
  • Theorem Wiring & Cleanup: Updated TheoremUF_CMA_Ed25519.lean to purge the insecure sig = msg placeholder and placeholder_is_forgeable theorem. Ed25519ToPQC now properly delegates to ed25519Verify.
  • Test Vector Validation: Successfully validated against the RFC 8032 empty-message test vector (valid signatures return true, while tampered messages return false). UF-CMA security remains cleanly conditional on an explicit discrete-log hardness hypothesis (h_secure).
  • Build & Quality Gates: All Lean formalization, specification, and refinement builds pass successfully, along with automated proof linting scripts.

⚠️ **Honest Experimental Scoping:* Message encoding is currently restricted (empty message or 32-bit LE encoded), scalar multiplication assumes a 256-bit scalar bound, and the group law/decoding components are unaudited for production deployments.*

Log in or sign up for Devpost to join the conversation.