Skip to content

Devnet 4#44

Merged
TomWambsgans merged 26 commits intomainfrom
devnet4
Apr 29, 2026
Merged

Devnet 4#44
TomWambsgans merged 26 commits intomainfrom
devnet4

Conversation

@TomWambsgans
Copy link
Copy Markdown
Contributor

Changes:

  • "Replacement" sponge instead of "Addition" sponge
  • Some data reordering (in hash chains + at encoding + in sponge)

Comment thread src/signature/generalized_xmss/instantiations_aborting.rs Outdated
Comment thread src/signature/generalized_xmss/instantiations_aborting.rs Outdated
Comment thread src/symmetric/message_hash/poseidon.rs
///
/// ### "Replacement"
/// This means we "replace" the rate elements of the state with the input chunk, instead
/// of adding (in the sense of finite field addition).
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

similar to the other change: make explicit that this is no longer consistent with the paper, and explain why we do that.

Copy link
Copy Markdown
Contributor Author

@TomWambsgans TomWambsgans Apr 21, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have update the doc with:

Using a replacement-sponge is not consistent with [eprint 055](https://eprint.iacr.org/2025/055.pdf), 
but keeps the same security level. Motivations of this change: zkVM friendliness (saving
roughly 1 cycle per element that we `replace` instead of `adding` it).

Comment thread src/symmetric/tweak_hash/poseidon.rs
Comment thread README.md Outdated

## Deviations from the [original paper](https://eprint.iacr.org/2025/055.pdf)

- use of 'overwrite' sponge, instead of 'addition' / 'xor' sponge.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

maybe make a bit more precise. Where exactly, and why?

Copy link
Copy Markdown
Contributor Author

@TomWambsgans TomWambsgans Apr 21, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

updated with:

use of 'overwrite' sponge, instead of 'addition' / 'xor' sponge, when hashing the WOTS pubkey. Motivation: zkVM friendliness (saving some cycles). Same security level.

Comment thread src/symmetric/message_hash.rs Outdated
@TomWambsgans TomWambsgans merged commit c08a3ba into main Apr 29, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants