PQTS2026-05-27_009

PQ Transaction Signatures #009

2026-05-27 2 decisions 340 transcript lines

Follow along

Ask about this call

Answered from this call's summary and transcript only.

AI-generated — verify against the recording.

•Call #10: Riva Labs demo of MPC + Dilithium signing — 00:21:31
•End of month: Falcon SimpleWallet formal verification proof (Ricardo) — 00:53:07

•Q=1 (per-tx key rotation) accepted as valid and likely default for both hardware and browser wallets — 00:42:56
•Canonical FORS params tentatively agreed: N=16, k=26, depth=5; ~2.4 KB signature size — 00:46:53

Upcoming Work:
- ·Call #10: Riva Labs (science laboratories) to demo MPC+Dilithium signing infrastructure — 00:53:16
- ·Blog post in progress (Antonio + Toma); draft to be shared in post-quantum transactions chat for feedback — 00:53:27
Gas And Parameters:
- ·FORS verify cost: ~35,000 gas; rotation (next address store): ~2,500 gas; params N=16, k=26, depth=5 — 00:44:17
Scheme Convergence:
- ·Jordan (FORS-based, variable Q) and Riva Labs NiceTry frameworks converging; both use ~2.4–2.6 KB signatures — 00:37:59
- ·Q=1 (rotate every tx) proposed as default; Q>1 useful for paymasters/bundlers needing parallel signing — 00:42:56
- ·Dilithium preferred for high-value/infrequent txs (hardware wallet + threshold); FORS/SPHINCS-minus for frequent/cheap txs — 00:20:59
Formal Verification:
- ·Alex and Ricardo (ZKnox-adjacent) working on formal verification of signature contracts in Lean via Verity — 00:24:35
- ·ZKnox (Reno) interested in formally verifying Dilithium/MLDSA Solidity contract; funding is current blocker — 00:48:46
- ·Ricardo targeting Falcon SimpleWallet formal verification proof by end of month — 00:52:21

•Antonio Sanso — Connect Alex/Ricardo with Riva Labs and Jordan teams on Verity-based formal verification — 00:25:01
•Nicolas Consigny / Riva Labs — Engage LFG Labs (Verity team) for Yul/bytecode-to-Lean equivalence proofs — 00:49:34
•Antonio Sanso — Share blog post draft in post-quantum transactions chat for community feedback — 00:53:27

Nicolas Consigny
verity
Nicolas Consigny
https://github.com/Th0rgal/verity/tree/main/Compiler For the smart contract :)
Nicolas Consigny
We also started a formal proof of SPHINCS- https://github.com/vbuterin/sphincsminus but V is wrong here I need to patch it
—
Alessandro Baiocchi: We have our current numbers for the FORS in the NiceTry repo https://github.com/RivaLabs-Core/NiceTry/tree/main
Matteo Vicari
https://github.com/RivaLabs-Core/NiceTry/tree/fors-verity-model/verity we are working on the formal verification
Nicolas Consigny
Ah cool happy to see the combination of my projects :) actually SPHINCS- was a reason I pushed the verity idea lol
Nicolas Consigny
Let's ask LFG labs
Matteo Vicari
Reacted to "Let's ask LFG labs" with 👍
Nicolas Consigny
By the way at some point we can write the verifier directly in lean !

Q=1 (per-tx key rotation) accepted as valid and likely default for both hardware and browser wallets
per-tx key rotation accepted as default for both hardware and browser wallets
Canonical FORS params tentatively agreed: N=16, k=26, depth=5; ~2.4 KB signature size
Canonical FORS params agreed: N=16, k=26, depth=5